dc57b4e9e5e6e55a679384831bd79acec4c0c87f5a7073d1013b535e5c3d883a

Analysis

max time kernel
148s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 203KB
Sample260708-pf2n2sft41
SHA256 dc57b4e9e5e6e55a679384831bd79acec4c0c87f5a7073d1013b535e5c3d883a
MD5 f9d03078d9958be920ea4c9ee519457e
SHA1 9dd3ffd86d7e13bb2c576efea8d761c3f4e40ad4
SHA512 acee024d5bc944412d5c9dec4130781603a1cfc17d9cc60a60afe0c14e8978dee6c254524b0e9bfd4d6272921af15701734965229699afa9f4c68267321d792d
SSDEEP 1536:zEME97qZNKCcdgFgUSs8Zj1idMBSX2tf1z18nGga2qMm3qT9tpiHBpaL7eVppHmS:Uecjs2XSnG8qM7i2Wo6
TLSH
T14B1432FB976490D8398B6D7DDE3A39D52009A4FABA95A8DC323CDC44C1C3FDA9215B04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279866313921649"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{720B435C-50B4-4CB3-A090-FBECE32F3AB6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 464	2880	msedge.exe	84
PID 2880 wrote to memory of 3124	2880	msedge.exe	86
PID 2880 wrote to memory of 1412	2880	msedge.exe	85
PID 2880 wrote to memory of 3124	2880	msedge.exe	86
PID 2880 wrote to memory of 3124	2880	msedge.exe	86
PID 2880 wrote to memory of 1884	2880	msedge.exe	87
PID 2880 wrote to memory of 1884	2880	msedge.exe	87
PID 2880 wrote to memory of 4028	2880	msedge.exe	88
PID 2880 wrote to memory of 4060	2880	msedge.exe	89
PID 2880 wrote to memory of 4028	2880	msedge.exe	88
PID 2880 wrote to memory of 4028	2880	msedge.exe	88
PID 2880 wrote to memory of 4060	2880	msedge.exe	89
PID 2880 wrote to memory of 4060	2880	msedge.exe	89
PID 2880 wrote to memory of 4812	2880	msedge.exe	91
PID 2880 wrote to memory of 4812	2880	msedge.exe	91
PID 2880 wrote to memory of 4812	2880	msedge.exe	91
PID 2880 wrote to memory of 1828	2880	msedge.exe	92
PID 2880 wrote to memory of 1828	2880	msedge.exe	92
PID 2880 wrote to memory of 1828	2880	msedge.exe	92
PID 2880 wrote to memory of 1748	2880	msedge.exe	96
PID 2880 wrote to memory of 2200	2880	msedge.exe	97
PID 2880 wrote to memory of 1748	2880	msedge.exe	96
PID 2880 wrote to memory of 2200	2880	msedge.exe	97
PID 2880 wrote to memory of 3480	2880	msedge.exe	99
PID 2880 wrote to memory of 3560	2880	msedge.exe	109
PID 2880 wrote to memory of 4220	2880	msedge.exe	110
PID 2880 wrote to memory of 4236	2880	msedge.exe	111
PID 2880 wrote to memory of 1296	2880	msedge.exe	112
PID 2880 wrote to memory of 1296	2880	msedge.exe	112
PID 2880 wrote to memory of 2696	2880	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x20c,0x23c,0x240,0x214,0x2a8,0x7ffa0554c188,0x7ffa0554c194,0x7ffa0554c1a0
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,12212332071328652896,5830767395866765741,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,12105262851983636112,9693186990593064684,262144 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:2
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,16284835937650271057,4667104553556035782,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,8974776373553354985,16779378391699607488,2097152 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,1641718409969846370,17905537688335283817,2097152 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,13620381042048430319,13081104033063941013,2097152 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,2033061060028170000,10234688280528608446,2097152 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,5441964667402129971,9878599168347298778,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,2925556019858914643,4504983332067715140,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12751642912286990846,7921733685909553462,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12751642912286990846,7921733685909553462,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,6026975404564973935,2684348748977458940,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,1200025004712709752,12590032676113973107,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,6011087657293187581,17732655735379510530,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,690468412406810656,3603681142317474149,524288 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,820294211265138870,7125580539190682408,262144 --field-trial-handle=2900,i,13244318274536544971,1750625637818504471,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 43b00918dea5f445088c10a110d9364da072187ed2bc8dfc4859ca811b3e684a
MD5 cf132f975cad7d9011f90ea6a08b725b
SHA1 688e4e333e0e41978a1c109c6c24182ad9561e94
SHA512 80cdd2fbf477af9179ccc5cefad39c18edc2d416201f31e5265f114942bc11f70cc23a2784c53cb4360526be64b9912a61a7c607c4835d6859f2e131fdd9dd5f
TLSH
T1BE71C336223100E7FF31417239C16201F9BDACEEF6AFEF2A4964D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5876b2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5876b2.TMP
Size 3KB
SHA256 79187936bca67c7d1085b5b65ce626646fe84e6745d88cae3479c64e4115d6fb
MD5 79495af34e093ae22947bd018acfac1d
SHA1 980c86832b6708366bc571cc2db11317f76589ab
SHA512 22803e3c4c848d642e643ec22c5c6c8a445885913747038f0d9d2f4680ed31a8709422667ae58c38e3f31090618576949d0734fa7110457ca1c9ef71c2996633
TLSH
T18371C236222100E3FF31417239C16201F9BDBDEEF6AFEF2A4864D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d55cf3fac6b49b0d6173dbfc6fcbfe8d3c3b2d75f240428746b88a88fa800881
MD5 edec6166f76e530d3619617a0d5983a6
SHA1 4ad6bf365294ffd4488260d8e2d15af4036b7594
SHA512 8a7dc00f72fb9ce90049b3d070c207f4bed28cf7290c79194dc573476afcd82a186d2f916457fe959e31776871e8acb326d88cb0e2c95308c129b00d750d5872
TLSH
T1F2117DB3C7D585AEC91116F06A28AE2BCE2D0606431C7C1985D4EF2793E3475D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 025cf1c286de2a0ee5e5ddcf51c841a553141aed8f1fae9c8fb42b012179c721
MD5 9d8a43a029fc283d4191e0d7c3ec5647
SHA1 3ab84e73870a56fcac55b267719081522566feb9
SHA512 d966bdea1b4a14fd769db0b244b464026d6aec15372af858f093651cae29cb18f5161580545d3e14ae7bec2bd8717006927d854786d6e8480c1d0fd1b49fe0fa
SSDEEP 192:sxZzRJyM/jK1Ml8Mk7/frsf4zrIdpd4HW6+WNGYIkzSC3IgrJ:sxZzfM7/frsfE0uHbG+X9
TLSH
T11642D7126A389977CCDBD209FA55BF53D6F91463A2900D44A9FCCA0C05E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a60554f5b4febaa2b1f8545288b5947ae37ed0d8ee85e001de8efc006e2b49e9
MD5 514946c06521ebf3649e0a8ff37eb695
SHA1 c07fa60b69159d4ee80134a32cd84cd29c941b23
SHA512 5741c4b26fb705c9e7d2bdea272bd896b5b055951c822d31276877f9746310640d43ee195a6c840a05f5b01f169f5523d16c993e2ee759457372bf2b76302c74
SSDEEP 192:sxZzRJyM/jK1Ml8UQ4k7/frsT4urIdpH4HW6+WNGYITOqC3Ig55J:sxZzfqb7/frsTd0YHbG6XN
TLSH
T11552C6126A389977CCDBD20AFA557F53D6F51463A2900E44A9FCCA0C06E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 225ec9c51e3f434ffc68f869ebcc0d79a90f359beb8462c772b7875018f02102
MD5 ab6030cb7821d0eba7c699c548f1bfb7
SHA1 c2d5f4f5346511ef42e26dcab663198f610116a2
SHA512 f225864901c1c9bbbb4a1bbb58318fbf623d50262cddacf7b9fb5bcf7441086e3ebeacceee5e48ebc5a6739091fec1c6259b06c114bb1e3a1cfcd584f2416cd3
SSDEEP 768:QysqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9vroUrf:QysqxXlWvJD6Tu1ja54LAs98Uj
TLSH
T1CED21B3B694CC77E4F840E5CEC26AFD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 4029ba53ab6931cf01bf62cf6b591d174f6c0e3b2646b2140279020daae7a02a
MD5 3511aaad0218e5176085f9e5c4f3aa91
SHA1 164a31ff7df8acc0d15a3220507ff18a4b1f52db
SHA512 814326d11292ddca13c00d0726aa0f3301e22e9f5f66eadc2051492a769c2b8b18a43f08b72eb840bc936161fc9133fdbcc8f9e2e8ec7e6cb2c5be36de2a5489
SSDEEP 192:ExN9uzCnTRZZEpojzzrhFYbzg18ldNfItpfq:EnEzCnTRZZEpojzzrhFYbzg18D3
TLSH
T1FAE13B1236770202387E6905E39EC5779E5376633418E46F3B7850A24EA7E216DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5912f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5912f2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 711075fc1fb6349d05eeddb27fe5e95ee5176b0bcb27bfa8a702e70c5af8bd77
MD5 727eed3443a09b37c050216e5bc751d8
SHA1 a1d5a3b3f948d4dfe25032144fe4e079f11bf53e
SHA512 50aa3198c40bfcf72126e92323f5940be0e0ee7dfbf6492e4311c0d32bd7d993c05189649d3d6109a5c7b799daca1d60efe2f6d76a94db7c52e4e9e5e1a9937a
SSDEEP 384:ItNn/s3n9SfsN2WYHy9b19+VRNNOE+l9R+22UScjmwxXY/:Ij+9Uk98HNOEI9Rl2U1ji/
TLSH
T1CB927D326D299C679EE19586F54B3617CFB8506796C51F84D4DC6F0E02CB2EC031BE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e4ee9186680958cb31013a1ec6e2b037ff574b5e50f0c574b8cc1aadcb7b9811
MD5 124e8c4a17ad9f7aa748dd4cd94976cd
SHA1 798756e954ce750f813a131e5eff401c2fb2303f
SHA512 b58a99e4abe325fcb209cddb34d9184174806bdf597e10e09f44d360f904259bedb6853b97431ab74fbd20012a2e5b0fbd373ff4714ce48a675a256bbf60e85b
SSDEEP 384:YtNn/s3n9SfsN2JYHy9b19+VRNNOE+l9R+22UScjmwxXY/:Yj+9UT98HNOEI9Rl2U1ji/
TLSH
T172928D326D299C679EE19586F54B3617CFB8506796C51F84D4ECAF0E02CB2EC031BE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b0b4c34ce073ecec658b87b361bcd1437f0f9301628a62a7bd0a44b17896a6e2
MD5 72453662a05d81923e541e239ebb28ff
SHA1 4c31e5f3206c9779459fc2f4debccbaf14311dbb
SHA512 370925c93b7e647538fdad9f378716a5f0b01f6e64631c8086d8e34e59a64eedf5d8972981fee8797367eeb2e63b52377f19d1abcf4a52ccbbf8685e6847b1a9
SSDEEP 384:JiF1tNn/s3n9SmzsN28TUNTUlIlJYHy9b19+VRNNOE+l9R+2VUScjmwxXY/:gF1j+9lrwgv98HNOEI9RlVU1ji/
TLSH
T175A25D335D588D67AEF58A86FA4B3617CFB810A7C6C56E90D6D85E0D02DB1EC0307E25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9cbe91cbdbcd0c3f539ab42ffe25e936e1b39c811f11053a054cc400db17d295
MD5 492bfa602ae1829f2ace74e9fcfe8f42
SHA1 3b700c8ab50333bb9ba82bcc73699cadb0a166a4
SHA512 fe2fc6bff6e0b8fc31a1b5c5e1b6ddba4025c7733d71858e8e3400890493f0e446279e5cd35899fcb29b3c63f7c799803496d5a08a8dfb87c349df87c6b4e245
SSDEEP 192:tON16JkRtQmiUyFCW+RNNOmz+ih3gRIU6:tON16UrrW+RNNOE+6XU6
TLSH
T19902E9356D382C7B9EF26E05B58B27275FA8203BB9856F80D5D81F1C01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30e5d366c2800e0896ecef84f19eb52dca820a71a1df65e6e8ac242e74628630
MD5 ee587ca4a6a870148c2f8e1579d39e3e
SHA1 baf23e7dc030cc39a3df030d03aa213de5601ffc
SHA512 8939d717381dbca0d13cd33e8832dd1d17142988bfa31386defea5f5544a9dd83cc0495363ad4a9eb814f9f470c70961eaffce53be75bd9b8115c783fdfd15ee
SSDEEP 192:wJONX6JkRrQmiUyLC6+RNNOmz+7R9R+2FVckqnOU6:WONX6Ud/6+RNNOE+l9R+2oUU6
TLSH
T1A912193268285C775EE26945F48B32178FB91127EB8A6F90D1DC1F0C02DFAAC134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7be1245829b3525acd35eaa9af96eb8f0d70fe2dff767c64b0aa0177b2cf260b
MD5 c0ffcb6e5ebdd1909f0085449035ece6
SHA1 62c37bcf10c93e2025447a69ffb0bff46a4c558b
SHA512 22019aad1fd4ede6a7a424dcde7abcad2daeacdfea55b520bafb3f2174ccc0aa81f8a524e4297a3126b54958352de128a1fa8b42ccc2e77cf3cd93d0890be568
TLSH
T1CC41485CAAED1148B3B76F5AAFF7A8AE447BB8732E06D05E00110D4E0A23B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download