9691f7f63134f4a7e9e5bcbbce5aea3fce73ebd45d950e663cad8af7bce04ca3

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 18:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260929-w7dvmada79
SHA256 9691f7f63134f4a7e9e5bcbbce5aea3fce73ebd45d950e663cad8af7bce04ca3
MD5 ae2f193d75572b90ef5aec10ee6c34df
SHA1 be36f4b4549b7f7d586d40f7e6248bc580de927b
SHA512 64a131605ea52c99012d8b657fb339a10512b415986936d22105c94e664791f94abb0a7e2c27652a0ed61cd7caa8183fc1707eb97d24b758ba2707033ad0e0dc
TLSH
T13071B7F79402BC5D57B1028D9A5EF71490D5984AC2101C90F768780B59D0BF3A86B37B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{60F4DD73-5232-4DC0-B62D-B87090B926E0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3632	msedge.exe
3632	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4580 wrote to memory of 2480	4580	msedge.exe	86
PID 4580 wrote to memory of 4284	4580	msedge.exe	88
PID 4580 wrote to memory of 3760	4580	msedge.exe	87
PID 4580 wrote to memory of 4284	4580	msedge.exe	88
PID 4580 wrote to memory of 4284	4580	msedge.exe	88
PID 4580 wrote to memory of 3648	4580	msedge.exe	89
PID 4580 wrote to memory of 3648	4580	msedge.exe	89
PID 4580 wrote to memory of 4728	4580	msedge.exe	90
PID 4580 wrote to memory of 4728	4580	msedge.exe	90
PID 4580 wrote to memory of 4728	4580	msedge.exe	90
PID 4580 wrote to memory of 2088	4580	msedge.exe	91
PID 4580 wrote to memory of 2088	4580	msedge.exe	91
PID 4580 wrote to memory of 2088	4580	msedge.exe	91
PID 4580 wrote to memory of 2504	4580	msedge.exe	93
PID 4580 wrote to memory of 2504	4580	msedge.exe	93
PID 4580 wrote to memory of 2504	4580	msedge.exe	93
PID 4580 wrote to memory of 1964	4580	msedge.exe	92
PID 4580 wrote to memory of 1964	4580	msedge.exe	92
PID 4580 wrote to memory of 1964	4580	msedge.exe	92
PID 4580 wrote to memory of 4028	4580	msedge.exe	100
PID 4580 wrote to memory of 1212	4580	msedge.exe	101
PID 4580 wrote to memory of 4028	4580	msedge.exe	100
PID 4580 wrote to memory of 1212	4580	msedge.exe	101
PID 4580 wrote to memory of 1788	4580	msedge.exe	103
PID 4580 wrote to memory of 2952	4580	msedge.exe	112
PID 4580 wrote to memory of 372	4580	msedge.exe	113
PID 4580 wrote to memory of 536	4580	msedge.exe	114
PID 4580 wrote to memory of 2864	4580	msedge.exe	123
PID 4580 wrote to memory of 2864	4580	msedge.exe	123
PID 4580 wrote to memory of 3632	4580	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x268,0x7ff93580c188,0x7ff93580c194,0x7ff93580c1a0
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,6052404127871703356,377876889747508595,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,15362831825308083047,8675353590764763784,262144 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,9932291694499733275,2385244803960371822,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,1486144551318056235,4763241830313470928,2097152 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,11924085648299030714,7268900739982901530,2097152 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,13644909620966638035,16156385389719101340,2097152 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,1623509165499194622,7891633403407331606,2097152 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,4028132837213492911,638729636792027826,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,17676409658656109799,14471169748840623517,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11950786605083713673,4385855122102594154,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11950786605083713673,4385855122102594154,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4128,i,7116186367080456664,18211349155886990039,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=568 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,5964197183141437254,17936416116408423133,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,14191415471815571034,14418584921303687968,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,14783277969475641746,16091580935416621032,524288 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,13541648989989623367,10828324308003648549,262144 --field-trial-handle=2704,i,12333375858843905348,15965021313325494442,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3632

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7b24fa8e-e314-47c3-bc41-829169b9498c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b24fa8e-e314-47c3-bc41-829169b9498c.tmp
Size 8KB
SHA256 bf72f51ba41b1324a9eef15701a091a4556b00c92e0ebbe089f425766eb1a979
MD5 31632c2f0eb0c3384a09e895c2752c47
SHA1 5faf52173edaaae10f410336a03a33e78c582765
SHA512 335082576b63f84ad7a3b7bd92efb9cb09a0e020d7c2b3af204b440fada3fe9e4644dd616196dd908e364ca31d96aaaf8fe9f8aaad9e97ecd0726c9a9ecd7e6d
SSDEEP 192:1ONl6wlDgQmiUyG2W4X58gZEOK2owDlm5U6:1ONl6kgYW4X58EEO0kuU6
TLSH
T11202D734B9BC7C7B8EF2AE49F58726139FA4102BD5552F84CAE81A1C00D779C2347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

2f1719ff-3223-4fbf-989d-8dba8f3fa728.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f1719ff-3223-4fbf-989d-8dba8f3fa728.tmp
Size 10KB
SHA256 6476729745d6c2101c727c1198e44bafe8b3c8ccf37b69eb9658f84df98e0aeb
MD5 4eda5165d682ba8351a0de11b84c49fd
SHA1 1136b18de4028408f10a9648a0060a9789a622bd
SHA512 7ae94c641834090961faa39acaefade4228558d40c53626b66c0c88bd8454cc99ce3daae974026b79e89ff249e3af06b654bc619861a03e22d0854ba0b116673
SSDEEP 192:sxZzRzWw/fts2VSmIdpdQHW6+WNGYr5scIg5AJ:sxZzQw/ftsRHeHbGmK
TLSH
T16D22C952AE28A9BB8CC7D21DBB557F53E6F9503251D51E48A7FC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f80767cebeaa1f93d61f3c02866d28ee7b255e794d10e7315452e6bb8f77f154
MD5 bfa0f5cf4870b000e83cc0c04be2012e
SHA1 9a7955e991c8189c0490bdea3168b9134d32a1d0
SHA512 4cf459a6c017e85a3d36707dd50ca15eaf582f028a9b73bf52738ea615cc830964a84ab432d572f3a028deb3ca6a0c17b9db04c9588cc6d2dd68484eae2e638c
TLSH
T1DA51E6B756606CD3FBAA51327FD384A33E3E8D8454838E9125A4F8F8FA1A79C9072014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59431a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59431a.TMP
Size 3KB
SHA256 12006cfa7e7ca1b54918692e9311bab2a610823e02ee73e954b443884b3d706b
MD5 f581b23004306496df1c27985d3b4b55
SHA1 57bc162be00c7cbc71ef877103ae427b1fb032bd
SHA512 34800c0b0d6cb0f9c11e24a7cd7792bd7d918b449bd1545f060d89f1aac55f0bc7504d80ceab612d2126340bd873a30926354733d3a92239a9302d28325e088d
TLSH
T12A51D8B75AA06CD3FBA651317FD384A73E3D8D8454834E922594F8F9E91A79C90B2014
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2b6cf64b01b9928ab75d72eab9d1cfc9366db836122d43495252a79e9205d837
MD5 12755b4a4bc42f2ec296f6d40246902d
SHA1 d0c242fd438e63ef96951783abbdb7a26ae21097
SHA512 36c3140bb3979cc7e8ec3108c7a6f4dc2cc92f6b533dc1f08cc3832c8d6c1da9bc96f84d9df6c5c7da2937fd819d275ad7c39e1358a33140aad0bf1575543034
TLSH
T13C11BDB3C3D585AE890116F05A24AE2BCE1D0505421C3C1AC5D4EF2B93E3475D00199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 943b9cf0219eee0393295182fca757468fb36f799044b648b85966c1810f51b8
MD5 77a53e1bd995350bf004f38e9ca434aa
SHA1 ac733374abda930383744d86149a59a1287fd7d4
SHA512 239dfc31f64b33ae4b6c3cc19f2e36bb3b5114a839f044d591a2b34bee1d6796bf854c850c51f6a7c1d1f3e62beabead5cf00dbda57091343056ce3a41a713b3
SSDEEP 192:sxZzRzWw/ftsnrSmIdpdQHW6+WNGYrbscIgrJ:sxZzQw/ftsuHeHbGi9
TLSH
T13622A852AE28A97B8CC7D21DBB55BF53D6F9503251D41E48EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 256a007ff5599d6d2b7432bdd94c1860614e1723c27762a0a6ba56328b161e76
MD5 65862c67b333ae612f3dc80c7c9ba80c
SHA1 34f75ff607ea2d144e6e0030ccc9e6feadc64bb9
SHA512 0e1e75cd05d5b260d20370901ec5d19308cd4bff5885e48de28779951d51ed3afbfd2006e8d0600d1ebf34d8d9ffc0f5d357008ad27b8fe63faacbdc3103fade
SSDEEP 192:sxZzRzWw/fts2VSmIdpHQHW6+WNGYr3HscIg5AJ:sxZzQw/ftsRHwHbGEK
TLSH
T1D822B952AE2869BB8CC7D21DFB55BF53E6F9503251D01E48ABFC861C05E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f550660b382e731d34a2b828495ac5322aaeb992968e7102c7d8f4e8e5c91154
MD5 6ec28794408d274966f259bcafed8459
SHA1 def041312db7587083ac959164eed869f44d0e5f
SHA512 ec20b304a8f23727ef0a551cd6eac6aa92c4fa385bd398726aed7456569755ffac05dcdd561ef9a7260d051b631f1ed2292b9cafc54d6f47d3c7bf7ea34e72a3
SSDEEP 192:sxZzRzWw/fts2rSmIdpdQHW6+WNGYrbscIg5qJ:sxZzQw/ftsvHeHbGiw
TLSH
T16222A852AE38A9BB8CC7D21DBB55BF53D6F9503291D41E48AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 11e4b545f5ad9d5f8d769a2ba04f4137b90b08ffcbd3d8cc5863e940852ef3c1
MD5 0cd5db4460f27ce7b70c8821f997bda6
SHA1 49aebd92866402cb03dbd249a1f3944d94d847e9
SHA512 39f27f0accb3339572c56212717cdb1bcb9c47fa7c5729c539c871cdc93d3d5f6cc0a39214f43dd66115aeec44f96e0f5864b858ede76fb39f11111a3ddbd026
SSDEEP 768:8Vy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbnroRWVK:8Vy4J/DWvbtBhu1jajiLm0b08VK
TLSH
T16FC20B3B784CCA7E4FC00A9DDD5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cd808aa539a631b325ca0ccebcd94420aa53dc203e796aa8bf83d3956b4e6810
MD5 4c69a798068c258b0e9726409df4ee5a
SHA1 2a396e3394427e7d101077e8b28107d47e73f9eb
SHA512 d864a24489ff7a9c543a19381773c42385e7451a6072cb7131960aae70f35fde9f3cc944368881f5b615fad730d212a9b3f4242fdb23fe9f0832a4e80b67e86c
SSDEEP 48:KIDI1Ks04jyL7+/bldd+bNglIS7+K9L1J+xTuYIZrfyLWRsQO00tbYvAISotK9MV:KIDCKs0+iQgKNOaW5eKyo8
TLSH
T11891014430BF060539FD288885758B1E524132B7B169E63B7FBC44AA5E6BE042FFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7129f29e-1ab1-47c5-8329-3dd705af370d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7129f29e-1ab1-47c5-8329-3dd705af370d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4fd678d2ee32715f2ef9c8a54f9acfec15ff675c56605fca04c120aa4c6cb396
MD5 fccb65d247ca31b2df41fea6e5345203
SHA1 693191704a4b9184b977077b7190e7617c23c777
SHA512 ce8f69f76a0ed14d0e7e0d6c8511d3cd6216da2fd34274b107a98d9f8794192968bef443259b45266407278d4ce58ce722023607f8291f0d3430d57db79a8d3c
SSDEEP 384:uZcIhsNJ/FbR2ZQLYHX58EEO0ynitgOIwZOyDLoW:Mhe242afO0yniXsqF
TLSH
T151828C32A9B8AD765DF7A145F5C735038FB8906BD284BB90C5EC6B1D019B6AD030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 910bbb9b401ef4c4b2f5b1543417eb8d5c0e3ceaf4b0274c0ca81312e459f67f
MD5 c9e8d446d14b1e7062fef70fead9e7a5
SHA1 215ca82c203a0acbb739ce99ccffa79f7fb8670f
SHA512 2f2df341522744baed92c5032ab4ef3dcb11fee991058129b0156854dc4b3210ccc005187099216e5f7f46ff0ef6f1d37b724f10ba5125bc5917c94aa2181696
SSDEEP 384:AZcIhsNJKFbR2ZQLYHX58EEO0ynitgOIwZOyDLoW:+h5242afO0yniXsqF
TLSH
T1BF828C32A978AD765DF7A145F5C731038FB8902BD284AF90C5EC6B1D019B6AD030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f7974a63baf6c381f0721e4af62e94a1a4f3a2bc8a0cdf21abb33d5c809d0384
MD5 94bc1bc8858c4ef34e63c5e5484dd5c4
SHA1 538c02c3e17d6b2672cb0779a172decefef3a21b
SHA512 a4a9e992ce3c1db1edeb942454a73e67a983587632cbfad00a28d1b56aabf32e09eb5d81a5262f72b16e73bca545a8f0c2a5b02feedb2f86664033be66c319d2
SSDEEP 384:ciFiZcIxzsNr8TUNTUlIlKFbR2ZQLYHX58EEO0yIitgOIwZOyDLoW:HFQBiwgw242afO0yIiXsqF
TLSH
T166A26C739DA8DD7BADFB9645F98A31038FB4406BD685BB90D6DC5A1D009B2EC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ec39fce7dfb36638b0a5c799692c38bd208d532fe25891f69ddc4c4026c526f
MD5 49646f46d42e39bb0567955b661e952a
SHA1 59373b8831a13be01075fc20bb95b513850ac8cf
SHA512 bcfe80da70947b678ebaaaba607d4997660a5ab0ae71f09f6737b943233b5195721e104ac56157519e2b0b1a318ad89376398b4adb366ff825056a7c34b92ccd
SSDEEP 192:1ONE6wlDxQmiUyn2o4X58gZEOK2oyMveLqFU6:1ONE6kPXo4X58EEO0yniU6
TLSH
T1B712F636F9A8AC775EE2A545F4C735039FA9512BDA49BF90C2EC2A1C01DF26C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

509cbb9f-9ce3-4b34-b1b6-bc9f20b88a35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\509cbb9f-9ce3-4b34-b1b6-bc9f20b88a35.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 58b9823db9107e5604a8eed3534f5563baaa69d4572c6351555ec148392b1067
MD5 84e11b81520c2b4a832f937aa1a3f22a
SHA1 16d48b688036c86edaf3146edccae75ea33ae337
SHA512 a2e9953a86deb79e9f2660949c8c688f6d9303757f75a32b42f50b2f80a75230572f9180f73e2e0649f2e8c795c19649121f73b06a813710bcd2ccf92d3e5532
TLSH
T117410558A6ED1248B377AF566BF6A86D587EB9772F06D05D40110D8E0A26A00C8B2B33
MD5 SHA1 SHA512 TLSH

Submit Download