d841e10df5b11f9949228a32a5e772aed6722a9a766b59cdbdc0e0841e261a87

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 356B
Sample260728-w1sefaeq21
SHA256 d841e10df5b11f9949228a32a5e772aed6722a9a766b59cdbdc0e0841e261a87
MD5 3527cb1251e4350b98753a34c37eac8e
SHA1 777bf1258b0eb2a0331069181ca093304fd3e44f
SHA512 00d8c000310a3f3585ddaaf74d6e3bedd88ac4f35eee2c0da3f614e7ae200b9fc83cd28d4d1da3d641be946336617c03af553b63de376f6bc6286da054e1b966
TLSH
T1D0E0262E2E355A282122B1665279F308A03911B3A000E3C6358D8881AF32CC199D3CE6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4124	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297366486588899"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{F2A98173-3277-4406-B975-0B22B46A6A5E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 4788	3224	msedge.exe	86
PID 3224 wrote to memory of 4124	3224	msedge.exe	87
PID 3224 wrote to memory of 812	3224	msedge.exe	88
PID 3224 wrote to memory of 812	3224	msedge.exe	88
PID 3224 wrote to memory of 812	3224	msedge.exe	88
PID 3224 wrote to memory of 3944	3224	msedge.exe	89
PID 3224 wrote to memory of 3944	3224	msedge.exe	89
PID 3224 wrote to memory of 2156	3224	msedge.exe	91
PID 3224 wrote to memory of 4712	3224	msedge.exe	92
PID 3224 wrote to memory of 2156	3224	msedge.exe	91
PID 3224 wrote to memory of 2156	3224	msedge.exe	91
PID 3224 wrote to memory of 4712	3224	msedge.exe	92
PID 3224 wrote to memory of 4712	3224	msedge.exe	92
PID 3224 wrote to memory of 1408	3224	msedge.exe	93
PID 3224 wrote to memory of 5012	3224	msedge.exe	94
PID 3224 wrote to memory of 1408	3224	msedge.exe	93
PID 3224 wrote to memory of 1408	3224	msedge.exe	93
PID 3224 wrote to memory of 5012	3224	msedge.exe	94
PID 3224 wrote to memory of 5012	3224	msedge.exe	94
PID 3224 wrote to memory of 1928	3224	msedge.exe	96
PID 3224 wrote to memory of 1928	3224	msedge.exe	96
PID 3224 wrote to memory of 1928	3224	msedge.exe	96
PID 3224 wrote to memory of 5040	3224	msedge.exe	98
PID 3224 wrote to memory of 1704	3224	msedge.exe	99
PID 3224 wrote to memory of 5040	3224	msedge.exe	98
PID 3224 wrote to memory of 1704	3224	msedge.exe	99
PID 3224 wrote to memory of 3096	3224	msedge.exe	101
PID 3224 wrote to memory of 1344	3224	msedge.exe	107
PID 3224 wrote to memory of 4616	3224	msedge.exe	108
PID 3224 wrote to memory of 4380	3224	msedge.exe	109
PID 3224 wrote to memory of 3508	3224	msedge.exe	113
PID 3224 wrote to memory of 3508	3224	msedge.exe	113
PID 3224 wrote to memory of 4952	3224	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff95724c188,0x7ff95724c194,0x7ff95724c1a0
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,14002596465387992648,14795998200996054357,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,10890140749008074872,10419957466794484135,262144 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,1499873439114151116,2032718296815606638,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,14491042539050432331,14149330637451013444,2097152 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,10631931681711329681,9852415836320409172,2097152 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,12112289958387998444,6279706698925609536,2097152 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,16181415805926984582,6263010807043877609,2097152 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5096,i,8042647992678105030,6460656826558249097,2097152 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,16111114753029273257,5163233904308407319,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,5770284644109526993,2152774820388588437,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,17089678432678358679,1130994901238285356,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,17089678432678358679,1130994901238285356,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,7566468553226027804,11978950068495904851,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,4309546685825210981,3055838922358754128,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,6091492779665204587,169256281493565668,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,15232759356795145323,14258511831961995123,524288 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,12528655761187860033,280858742274637925,262144 --field-trial-handle=2624,i,15526317150000504463,861768924375928060,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9f34f455009b490d89a5a08944fcf02f42ebd7ca7974da3734c7d0270fce66a0
MD5 acc394511ab2198fcb52683c91d9941d
SHA1 c36e08e2c488f2020a45492c03b74aa87fbbc904
SHA512 5f8467538e01f543a17ed5c8405a5c0d7ff38793fa7a963c5b8e16f8540932eaf393988cf41f0529ca172748aa86547013afa27978abaed7efb403e53bb9e5c9
TLSH
T17C71713B122209BAD3AA8033D0F32341317BAAEAF4236E5917708CB76634B52B15957D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 edbc039e045773392b8c25f344d4c64199cd0eabfa3141f2d23f65817ea2a22f
MD5 cd13518b994dd224ffb18a985b6be039
SHA1 b9c2e56daa6f61a2fac48b1acfe23dea60bfa437
SHA512 584281a1b5b76acdfc1496e0475dec0242fb6db5ef7a27ddd18e2ad0ddf12fa9176003bf2d993dce66149a7d29e346fe4dc15e318c5959e6d33d7aafae0cd9e1
TLSH
T190117DF7C3E5856EC90556F06A28AE1BCE1D0605832C7D5989D4EF2793F3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c52ef67f09a0dfffef2dc255de36ecc966dc5fc81440864c4a84c61666e3b7d0
MD5 03e0d8d35e70c5bc2c7d43c4d83a9365
SHA1 806644dd74695d8e0206d1eb11f320ddcf7442b7
SHA512 22610137de519fc8e4c009861dddd3394090e123b418f368f3c939a174f622cbe38d3f95ca5e111ae7c917580d4e634a2289aae39efb927258a0ba50a748eec7
SSDEEP 192:sxZkRQyM/jK1Ml8MkO/fQsIMLkIdpdaHW6+WNGYIknV+MIgrJ:sxZkyMO/fQsIML9AHbGgH9
TLSH
T1FB42F9156B3869B7CCDBD209FA557F53D6F44472E2900E44A9FCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 df04cd232f20bd4d5135d7c992b7bd00035d6011c38530e7976c0c69594d2d14
MD5 b4da5e7baf406b0089f9a1a6ba6b5067
SHA1 02d81c50f01c665c2d86b4f29d0f6b8f715de5fb
SHA512 c6bc1a4795cff9b920731d532543f7ed6f36bcdb103b984c529bdfeb1a53147f209861653b676f80d3f04984234d9401320deededf30f3e7398834ce1b3d3769
SSDEEP 192:sxZkRQyM/jK1Ml8UQvkO/fQsyMckIdpHaHW6+WNGYIl6N+MIg5cJ:sxZkyqcO/fQsyMc96HbGuH6
TLSH
T1D952F8166A3859B7CCDBD209FA557F53E6F44472E2900E44A9FCDA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8a9fc792c77c28a826001d2c057505160c9bf557beead0e66a88c8d1e2046e43
MD5 50b64bb44b18f66cfee3cb926db747c7
SHA1 a5250d0453fbb91f2a6239f7af754e86cf908ded
SHA512 ddfb86e981769790a7b535fb874285a3dcc9676f564f3ce9cc04230ddc7ff553cafd8b9734dd6f6ad5bf464c6377b773a578d7bf61e23b7bd3b4431ad4fe45f6
SSDEEP 768:JpsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9mrojLw:JpsqxXlWvJD6Tu1ja54LAs9djM
TLSH
T1E1D21B3B694CC77E4F840E5DEC266FD76ED801CBA6988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 7f55f0857612c8ed427a91e9d2bc4481db2b0d619550d298a1e65ec5b5a2f439
MD5 4bcad002780ef5243853a6d8f8ad9a94
SHA1 3b63d30bbd69e1b9395336c8fe2d0772cbd2c1c4
SHA512 0cfe229a2b0d3f860fde2a79db3d34749531550f0ef2309161744afd04f3c2f360a3233b1f9b20d8521f7e6cbb77bc9336e122c9bb11a8e3fb6b943f04a5c434
SSDEEP 96:KYbaKYIK6m0Knq6+HuKYYj5uKiYCiE4KxCZ:ExX/l9ZfG
TLSH
T1CFE10302717F02033ABD7908A3AA89374E4276A37458A4BF3B7954654EB7E111CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592e59.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592e59.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a35368908c631c5c22f6d8b9c500fb065ae3a3d3330fafc2ba9419c36c2f5763
MD5 e7285d3ad8c17e3bedd4b7d082d08b60
SHA1 675b892837d9121cac6e4a51f834c20c92dba8a9
SHA512 1aec2f34917f174214a403a892ae3578132957c094736bcd24b9cc888d756f08e32e6368cb5192a3ad0e4f8fdc740a53b25091fa9419262d0b7e049ab672c792
SSDEEP 192:uHLsN/USQt4kRb8JQmiU1uxj4VRNwOmhOmVU9DFVSRHqIMRU8:IsN/USgbOkMVRNwOWG9JMoU8
TLSH
T1CC3229316C785CB74EE3A545F54B36139EB8512BEA882F80D6DD1F0C01DF69C134B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 6392ce8d0b9157b5c317e23aab74c305e9d04f1f812ed6dd0a0c2ae0a32c210f
MD5 e2c38283b20a24610b20da7c0b71e722
SHA1 7d71c5a0faaa9974a16ef3f89f58386ab9a15569
SHA512 734a476314a18d98231cbf1d6f671fd894c6d2f16ace8f7e7130d4ca0bf02c02edbcaa5e8d093e2ca6da28bc3a607d579ef94ea9b3a074634e385dcceba7413c
SSDEEP 384:4iFiZcIpzsN08TUNTUlIlOgbOkMVRNwOWG9JBoOObjI9G6w7ut:DFQJhwgviHwOp9Lo29Mut
TLSH
T173A27D335C6888BBAEB75A55F98B36179EF45077D6886E80A3DD5F0C01DB49C030BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 957ebe21caa4391fdc3816fe9dbd58ae66fc4870996146b698b82ded32dc3869
MD5 abbea96fa84e5b94bfdde5a479f6d448
SHA1 c3291e2e0d5d91be6272e50d43d1fd8fdbd30325
SHA512 58964e5370444f88f0507feeeadc6903a84ae18e75df7a356729193a5f3df6452793b33625c04626acb7898fee5e62d55d9e8d0a3253c1123684f6afa5331fdf
SSDEEP 192:tONg6JkRtQmiUyaGW+RNwOmhOmQh3DRQU6:tONg6UrkW+RNwOW0yU6
TLSH
T16402E935A8382CB79EF2AE49F54B27175FA4203BEA852F84DAD81F1C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 efdab6e81e3465d76a9658768c185a00127b4146514126d186da37c58a09693f
MD5 33400746faf33ceacfffe0f054872a44
SHA1 0a6336566f029fa5e27d8fef48322eb750be5d16
SHA512 607dcedd16cc8ee04e7301fb4e2dc5675028074102eef04cd3398f5cbbc8d52d06107ccef872033e7257f738d4f5ca9bf661a0475995b0f8050c4ef7f6c2251b
SSDEEP 384:nZcIhsN/UOgbOkMVRNwOWG9JMoOObjI9G6w7ut:Ph9iHwOp9Oo29Mut
TLSH
T195927E326C385CB79EA7A555F58B36175EF8913BE7C82F80A1DD6F0C01DB99C130A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5422d39b64e18221ddeb3643a58eb580d42e2e582cae4023c6c414dda49c85a0
MD5 1cdd7e8f7021aef056a78aaacb3e9581
SHA1 72ec309ace8dfa0550df346f11bfcda335274ad6
SHA512 c833c621b0fb88c46c6b01ad23d8e574009da356c6b6fd2d378396fddb52039b930a8bd8f53993906ede295a7d49794534b33f4418f7353821132ba2863a6b99
SSDEEP 192:zONV6JkRlQmiUyuGc+RNwOmhOmVU9DFWVcHqIMRU6:zONV6UDyc+RNwOWG9JxoU6
TLSH
T1CC122A3168785CB75EE36445F58B36075EA9512BEB892FC0D5CC2F0C01EF69C234B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4dc2129-ce82-4f18-b855-92db8ec2bf55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c4dc2129-ce82-4f18-b855-92db8ec2bf55.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b31008db8f730503dd25683df7c91ff038b5034c12bf03e8eb2c6c19b41f1d59
MD5 c3bafe76f0f8135cfa0cae98d864a1fd
SHA1 1313e8fd77159b5c1bb1c876cd7cb82a77f54ed7
SHA512 cfd882bf3dd30af403913841639fb4a5344a514da580e4d8d97de75a88de0d5393b7e0ceed35d360347f8bdef4101e274b91da4d06c7755d1629c45a6b0e7803
TLSH
T116410958B7ED1148B3B76E9AABF6A86D847EB8772F06D45E00110D4F0A63F40C8A1777
MD5 SHA1 SHA512 TLSH

Submit Download