f3ec5e41023533b8414292e7965fde2c0869bf3e93b497d0cbd8f9e402324702

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 10KB
Sample260724-pl8pjszerd
SHA256 f3ec5e41023533b8414292e7965fde2c0869bf3e93b497d0cbd8f9e402324702
MD5 464338fe3bcba1623e9395b72b5920d6
SHA1 120a73f0a032ae4e937afae2ab47a34974713f31
SHA512 c30f0a8964353124737e62944f53067e95e1ed511c5d6110e5173b95af6268fd632ce6b7d4a8e067cfb0539443bb2832a600342241c791fdde1bdca8194bb670
SSDEEP 192:uByBjBWSQGnFc47mzAB8Lq/o9W67qjUDQkkxXfxAx1TksTxwvg/:S2dSKFc4CzAB8Lq/oQUBSZIi2wvg/
TLSH
T1593254B3950071FA05D361CDA1EEA3395151A31CC6EB296929E593DD07E0CB2F88772F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1624	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293697431217103"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{792EEA30-7806-4007-B063-CF16063DA989}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe
1740	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1740 wrote to memory of 2616	1740	msedge.exe	84
PID 1740 wrote to memory of 1624	1740	msedge.exe	86
PID 1740 wrote to memory of 2736	1740	msedge.exe	87
PID 1740 wrote to memory of 2736	1740	msedge.exe	87
PID 1740 wrote to memory of 2736	1740	msedge.exe	87
PID 1740 wrote to memory of 3980	1740	msedge.exe	88
PID 1740 wrote to memory of 3980	1740	msedge.exe	88
PID 1740 wrote to memory of 1056	1740	msedge.exe	89
PID 1740 wrote to memory of 1056	1740	msedge.exe	89
PID 1740 wrote to memory of 1056	1740	msedge.exe	89
PID 1740 wrote to memory of 2252	1740	msedge.exe	90
PID 1740 wrote to memory of 2252	1740	msedge.exe	90
PID 1740 wrote to memory of 2252	1740	msedge.exe	90
PID 1740 wrote to memory of 1728	1740	msedge.exe	91
PID 1740 wrote to memory of 4136	1740	msedge.exe	92
PID 1740 wrote to memory of 1728	1740	msedge.exe	91
PID 1740 wrote to memory of 1728	1740	msedge.exe	91
PID 1740 wrote to memory of 4136	1740	msedge.exe	92
PID 1740 wrote to memory of 4136	1740	msedge.exe	92
PID 1740 wrote to memory of 520	1740	msedge.exe	96
PID 1740 wrote to memory of 520	1740	msedge.exe	96
PID 1740 wrote to memory of 3096	1740	msedge.exe	97
PID 1740 wrote to memory of 3096	1740	msedge.exe	97
PID 1740 wrote to memory of 2288	1740	msedge.exe	99
PID 1740 wrote to memory of 4648	1740	msedge.exe	108
PID 1740 wrote to memory of 4412	1740	msedge.exe	109
PID 1740 wrote to memory of 1620	1740	msedge.exe	110
PID 1740 wrote to memory of 2512	1740	msedge.exe	111
PID 1740 wrote to memory of 2512	1740	msedge.exe	111
PID 1740 wrote to memory of 1216	1740	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff8bba5c188,0x7ff8bba5c194,0x7ff8bba5c1a0
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,1951889784935368037,5866032264889749907,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,10953208562095461836,13111417133727469606,262144 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,11297309394750309712,8239340269652296233,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15944671239190813757,14865743975621842646,2097152 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,4409387801636001325,6862679603355587,2097152 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,8644792835654828358,453221694411304556,2097152 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,8627197363562999078,14394186852900710107,2097152 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16724148770127483121,8298101377063432526,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9101691581916601321,11907926980558485926,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,3661034342767666798,13132549709904063504,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,3661034342767666798,13132549709904063504,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,9960942972976779088,2938556428481809181,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,10860302001860642608,2528258644721382071,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,7937613408972582015,10288649290442881485,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,16604762300409674815,10749982605421280789,524288 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6412,i,7248588241647432044,15000089850137241236,262144 --field-trial-handle=2252,i,11529138127047866694,13677647428045008840,262144 --variations-seed-version --mojo-platform-channel-handle=1792 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b72f98a2404c319151d961227b0c5598594b9d61a65966cc3c427664e3dbef8e
MD5 add920e642e04059c06c4f6c2be21c57
SHA1 cd2983b78171ee19724669293a8b8c248bbf202a
SHA512 5ac877bfa67acb71f63229ed048b07dc3e0fe6c34c657fe68ca3dc975589e976eefb9809fbf8cd9d0ec85fe5961d6c7e6ffb7c064df048b54e90c28c74bcc44f
TLSH
T12861B468CE524B95E7A00333DCE21A9435B184D40E1F8E5111BCAFFD6914B68FD76409
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 b9b431f225d7ac3c0bbeffac07a2ef504c56238d73d273fe98de88f9c80d7146
MD5 53fc849a1df5dd75980a9711c0f17392
SHA1 615a5d921f4cc68a8812e141b428565c2f79887c
SHA512 4e94befa0d29ec6d018cdaca7a65e51ee8cf8972a988ff08add03adb3f8e28d848f8fc2f3e17cfdc23e2002cfc633fdec1293affa9644ed3b702e6937c783f31
TLSH
T11D117DF3C3D585AE891516F06A24AE2BCE1D0605831C7C15C9D4EF67D3E3479D10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 47f1914b574f016d452c0b9553f4b0d0d957ce5a210da2a9bd45ffad573ebe36
MD5 b251c86ab639dee28dade6103cb3e4e3
SHA1 1b0935585a85a1a9e5f0b53a3fc06b2188d4e44d
SHA512 4898d4bfae1e142c31b0dadd268a855f6fed9bda64295ca32ac619aedc038e14e05a95616c77af7473f495c1f28fadcc39d6e5797f280db7f4cfdf5c359b920e
SSDEEP 192:sxZWRvyM/jK1Ml8Mkd/fcsvvPmIdpdxHW6+WNGYHjyIhIgrJ:sxZW1Md/fcsvvPHnHbG09
TLSH
T10642C6166A3859B7CCCFD209FA45BF53D6F51572E2900E44A9FCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9949155d74b5639f1553237c25f39df927f4c6021011f92fb5004b6131f08a85
MD5 cc1a87dd85ba632a7c82e6d3b2b2ce9e
SHA1 30e1a8299932506a09e807ad883c1eed8c7024de
SHA512 21daf201ae9fa4deb09f30674ee905b418102f6393d7bb8ee451a12772ccdf8ee8e9f779cf2b4ef9d1bd8e3ee6dd35249999eca01115a89599fadfe370c6acba
SSDEEP 192:sxZWRvyM/jK1Ml8UQ6kd/fcsJvbmIdpHxHW6+WNGYHgVUhIg5nJ:sxZW1qJd/fcsJvbHRHbGeP
TLSH
T11E52A5166A3859B7CCDFD209F951BF53D6F554B3A2900E44A9FCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7d5b253521a59b509adb8c5c09ed42b8fbc0052d9958df41caf5b2031a72cb71
MD5 50993b78c6d8bc3b5f118afa2eac848b
SHA1 fc8f468ee65478cd3d8f0180edf7b24b29eec184
SHA512 5d27d25aa15b747f422f524ab2e89bccc5e0b8d55bc0a00494141e59f67269b6772c8f72d6af3c40912fbe3b4888f742a3a9ef8f71eda14f8492f0c33d478bff
SSDEEP 768:wvUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R3roVy00:wvUZYTMWvg0Pou1ja7eLZmRkr0
TLSH
T192D20A2F280CCB7E4F844E5DEC266F963ED801CB5A984D5447EA894C02CB7EF511759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8e7795c8b9861fc41ab372c6881f5d9393e30619486ff9320d311e3045194d44
MD5 537a3eb48eb57b406df4a7b8cb1bb219
SHA1 51ef4b068ddccfbde29a16ba30575368f4f2d91f
SHA512 61429592aa654cfbc654f2c65401ec9f6bcb47dc0de25185acf431679a90f4d87258094e418a68d75df1d2093ae9adfd234d13dd7489883c5dce67ae5724048f
SSDEEP 96:KA1eK2AseUKXqlmd+KuARvmK0UyiQAKli9:EWE1r9n6
TLSH
T194D1D21671BA03113C7D2A0C86A59B668E41B563302DA52F7FAD00B54E6AE209FFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8b402d055e1e6c82438ab1b9d0821327b6e6ee8d1a8524aa2f856d9b97550fb4
MD5 8d958ecd0d59aa67c21ddd0cfb1a9603
SHA1 1db34c0200d88f20775547c1a3bbfd160f05c26f
SHA512 08466ec67256ecf5bd3c505bc0e832ef7dcadb6078945313fecf0fdae2bd630abb226f3967bbacbb87821072badb53ba15d174ebeb052205ef81c6921b4e2f3f
SSDEEP 384:lZcIhsNpl0Q/wgbDhzX5od+2d6/Id+2CLv/OObjI9G6w7F:dhvqRpOv3lCLv/29MF
TLSH
T141927C326C286D7789E6E555F4873A134FF491B7D7D82BC4D1ECAB0C01AAAAC1316C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9c189a144f44c7c60a5e0dd73b1f7b7033ee71feca25879e98706ec4175ee511
MD5 c7cc19dabc4a82893e1051386213478a
SHA1 35685cea1d8851eaa3574c315b15032bc4fa3c64
SHA512 7f0323fb4fad68504304100b0fbdd7e04a314900753ba82b6052f6b676519972f4226223babf7829bf3471d38f45b4a61ea3dd907513e99972fea0a27ae34582
SSDEEP 384:OZcI2zsNpE0Q/wgbDhzX5od+2d6/Id+2CLP/OObjI9G6w7F:sGwqRpOv3lCLP/29MF
TLSH
T17C928D3268286D3789E6E515F4873A134FF491B7D7D86FC4D1ECAB0C059AAAC131681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c089c621592744395756113d4468ec829578cb1fe2561475c44818f3311055ca
MD5 57ed8bcba303489bb4f9b811435a55b1
SHA1 b3cde7de9b60d292c597ccfab215a598e9726b10
SHA512 ce42030a86c47ba0accf44f81f2db85fb74e59d3e02cb803750b374e2c70b03cb64ffb5b239efc6bb9eb177f9d60176a227d2da72e927ba2b804344f12b047db
SSDEEP 192:yONI61VWQmiUyAxgGX5Obd+j1+FdgX/t/ao3PXU6:yONI6WjgGX5od+2d6/wsXU6
TLSH
T16202B63568686C6BCEF2BD49F48777135FA4206BEA952B84DAEC1B1C009769C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 68ae6c164379599e9cd521d53bb05030479b78f0e81a00e70ed2bbaa3f00c3fb
MD5 8448a91020ac9b2dd492a81c03e7b0c0
SHA1 3010307f7776835ecc9f3b02ab0a7ecf6edac062
SHA512 e80da3d1e88e40e73aff645e9ccb856899226b9f73737f5587a0fa130cc842c7485d42c4a6b03c4477c63a7561b205447f7d16dcfca145c8269b37e45dcae8eb
SSDEEP 384:gZcIhsNpE0Q/wgbDhzX5od+2d6/Id+2CLv/OObjI9G6w7F:ehwqRpOv3lCLv/29MF
TLSH
T18C928D326C286D7789EAE555F4873A134FF491B7D7D82FC4D1ECAB0C01AAAAC1316C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fccaa4d0f92391662391529966c2c5b998474e7f2046bb1266ec826bdff80ea6
MD5 59203fa1e318af17b505a1735f882439
SHA1 aa2169a065df66966004a05a19ea3c44e6dafa65
SHA512 1a1b2a38f99e212ee95ef234b94798977b88f5d91651b44fe54c7fc255315573e35e542f506b99460013bb835e9377a8ce2c61b2b065e346952bf9eed4db98ba
SSDEEP 192:xONM61wWQmiUydxTGX5Obd+j1+FdgX/oxFd+2CLjjJzQqpU6:xONM6V4TGX5od+2d6/Id+2CLx/U6
TLSH
T1B112E8326868AC278EE2B955F48735135FE55167EB897F80D5EC2B1C01DB6AC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b35521c0-006a-46c6-b3a2-a16931b9e5ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b35521c0-006a-46c6-b3a2-a16931b9e5ef.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8ac19669dbdaadc1cf3457b9600e2b0ec2aea72161c0637eca1ef8e4e6515e9f
MD5 046164ef2d02622ce061d81000538108
SHA1 303c3f8e7fbe828404e9f38991f664a055fedda6
SHA512 5699c6e5ea636e33dcd99349241f5143a1c4a25a867e28f12494201b0fb8fc50df9d171b8bbd012c0002b9b86f984a85c4693e9f96772eca5c1778f04aa607e9
TLSH
T147413B5CBAF90148B3B7AF5AABF6A46D487F7D372E46D45D10110E4F0A26B00D8A2737
MD5 SHA1 SHA512 TLSH

Submit Download