82d572b8a86a41ac414fcfc1e803ec5f7315532fddd4a102723ebb11fcec20b8

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample260730-prcjas11c1
SHA256 82d572b8a86a41ac414fcfc1e803ec5f7315532fddd4a102723ebb11fcec20b8
MD5 dced0316a142b096d5353d1e0a3e4627
SHA1 5a8c410b0fbc24b18add844bb950478bd60ae3ff
SHA512 03db7daaa3be5fdb7e0c1358ba9ad2f31b22e03617abadf96b44df4d38c95accf6dba21e4dd96d674c70b5db8a94f4b8b3ba691a67ba9350b5b1ab3eb63894d5
SSDEEP 96:1phBUneQNig5d8Jkd05suT5x0Ap25btXM:1RUneaig5aJkW5sylp2HXM
TLSH
T11FA163B8D4F5E523C285C73A9B24A6295FD1E5DBCF960098F1AC136A2F41C878D4327C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5036	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298887132203801"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{963D470E-6490-4E38-AD09-EAC2408AB387}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
960	msedge.exe
960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1768 wrote to memory of 2196	1768	msedge.exe	85
PID 1768 wrote to memory of 5036	1768	msedge.exe	86
PID 1768 wrote to memory of 4292	1768	msedge.exe	87
PID 1768 wrote to memory of 4292	1768	msedge.exe	87
PID 1768 wrote to memory of 4292	1768	msedge.exe	87
PID 1768 wrote to memory of 2372	1768	msedge.exe	88
PID 1768 wrote to memory of 2372	1768	msedge.exe	88
PID 1768 wrote to memory of 2948	1768	msedge.exe	90
PID 1768 wrote to memory of 3136	1768	msedge.exe	91
PID 1768 wrote to memory of 2948	1768	msedge.exe	90
PID 1768 wrote to memory of 2948	1768	msedge.exe	90
PID 1768 wrote to memory of 3136	1768	msedge.exe	91
PID 1768 wrote to memory of 3136	1768	msedge.exe	91
PID 1768 wrote to memory of 3940	1768	msedge.exe	93
PID 1768 wrote to memory of 3940	1768	msedge.exe	93
PID 1768 wrote to memory of 3040	1768	msedge.exe	92
PID 1768 wrote to memory of 3940	1768	msedge.exe	93
PID 1768 wrote to memory of 3040	1768	msedge.exe	92
PID 1768 wrote to memory of 3040	1768	msedge.exe	92
PID 1768 wrote to memory of 3908	1768	msedge.exe	97
PID 1768 wrote to memory of 3908	1768	msedge.exe	97
PID 1768 wrote to memory of 1196	1768	msedge.exe	98
PID 1768 wrote to memory of 1196	1768	msedge.exe	98
PID 1768 wrote to memory of 3208	1768	msedge.exe	100
PID 1768 wrote to memory of 1792	1768	msedge.exe	103
PID 1768 wrote to memory of 2220	1768	msedge.exe	104
PID 1768 wrote to memory of 1364	1768	msedge.exe	105
PID 1768 wrote to memory of 752	1768	msedge.exe	106
PID 1768 wrote to memory of 752	1768	msedge.exe	106
PID 1768 wrote to memory of 960	1768	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9116dc188,0x7ff9116dc194,0x7ff9116dc1a0
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,8016546215992799709,5464683289307531606,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1816,i,11333276711799830787,4366929956121488983,262144 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,6721332777511900060,15371389813508466814,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,13008370454917739855,14337153208385497430,2097152 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16382447478518657601,3471583345149833195,2097152 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,1815506933151246838,14266605742813884615,2097152 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,17176372429566729891,1546785341513259673,2097152 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,16946690900885791938,8626461111681518957,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,14854030399649292690,16616371827725843942,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,7174097466321522717,10651786478550338840,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,7174097466321522717,10651786478550338840,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,5189509837485603997,11953913028072644521,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,4475726344166836171,15129460058211462465,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,862933397198753622,3956088616751291180,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,3450077056128748903,15482976838137870684,524288 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6040,i,16678757936968943676,2852267732136663379,262144 --field-trial-handle=2356,i,12627338298861382370,16049701394136837679,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b49447cd6b6dd70edc7e2d71d3978d2beaf05b925955535501f5996dd5ea2cb5
MD5 63f9ac2386bb201ec99ae99612ee7cb9
SHA1 cb57886878aa410847533604ffc768da5404be02
SHA512 ef772eba12df45d97a1aa5ce9893d093155004d8f65d502b3096e2a2fa7941974d9f4f758384cb5e9120843c530a877321ce04317c093913570dbd9a182a1ce8
TLSH
T16D613A0A87534CE1F3701173F0AE42463B71C199FBB78E10A0E484BD772CB6D812652B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589bce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589bce.TMP
Size 3KB
SHA256 41ebc05b8e398d2d6a1dbb73d82f3de798bf742fd59e1ccdf865c3940efbc18e
MD5 d937dec79d140a1f141f545b447e7a7d
SHA1 a259d42f277b1febe03157eec1511a0ddad9d643
SHA512 5304201d1bb6fe0b20206e9f71a7054c951796770aca31b14cc76c725b9bb43892f84bb6786cdd1af96c849dbdcbffe668a420f57a551f5cbe645da111949f3a
TLSH
T1F761190A87534CE1F3701173F4AE42463B71C199FBB79E10A4E484BDB72CB6D816652B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 72d4cdd3e599c0472190114740471e9b460ff8dfd3a44e16cedaadf104dd5de3
MD5 90dca779ffd076d4ec0f845b658cbc4d
SHA1 85d47c67e8268a3791d9c4bf0af8846b89d73ce1
SHA512 5a0c43aa77455cd275001614e191338ad2362b504316e7f417e02564de02e013908317522f63226ec6bc6b0854df1adafe7bc5a722ad2533eb6e19b13e176501
TLSH
T18A118CF783E5856E890116F06A28AE2BCE1D0506831C7C2989E4EF2793F3476E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 be17fcf5503ae61935fffb8fb178fab8a6a3d47b603bf50a94a7ca564c58582d
MD5 40892ec2a6a00fda7c8c1fd94167896b
SHA1 0458897fc6d178ce373c69196a710d39f065550a
SHA512 b47853e944aec5311208f890839ea5d4a1ae0890db2ab645352173c84571964a01bbf3dd990857d83bc89698c70bda613d6563a30f6f696da540ae93aca44a40
SSDEEP 192:sxZnRpyM/jK1Ml8MkA/festgCIdpdaHW6+WNGYLzMKuIgrJ:sxZnnMA/festgrkHbG79
TLSH
T1C942D5156B349977CCDBD209BA45BB53D6F90573E2900E44AAFCDA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 90a1c3dca5f2ada6633a26bc0ee4b3262ff0c88ff4e2486f8b2cfc0210e4f00d
MD5 46f5997e81eb58aea05867358543dbe1
SHA1 a434e8397e167939a8ff67add92e7c420f866705
SHA512 b2d1a6cd5f2856d808bf544e9238dad071776564448569a111d7ae3e6f7b4bfa61399cae18113539f6dbc467287f6c47d5cf1f1ee5cff9abdb3d22759deca2b9
SSDEEP 192:sxZnRpyM/jK1Ml8UQukA/fesl3CIdpHaHW6+WNGYLPX9uIg5+J:sxZnnqFA/fesl3r6HbGvw
TLSH
T1DA52C516AA345977CCDBD209B945BF53D6F94473E2900E44AAFCDA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 88b6befd52c5edca7c6a776e12b625d70533b129454cf2b32543b8143a3bfa69
MD5 05231faee8e82ac35eb6ad51d498d452
SHA1 7de79ec3f9f88ee1c579624db885d046f9d13a95
SHA512 c42ce5f44c621e237a29b3b196ca95bf2d757198639eb6aa8b183c213cfe148f24dbb7bb5b2982b2a5f2dc180aef113d0aa9a7c07441ae088714272c62ce3cbd
SSDEEP 768:k+s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNuroKeg:k+s6pD1WvxzWju1jahILIsNlKj
TLSH
T125D2FB3B680CCB7E4F841E5CEC2A6F967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8382ae3369bb6e29603d0ff272d82bc10cd0a50562c609356b004a55577aed08
MD5 a4acf5a7e2c4f97a69c2531bb670da85
SHA1 510a181feaedc934f1010e20c5e52e1b996aa104
SHA512 1664e3aa31765b73c1efa157241cff21df7b3a10be02c4be729ab2242e6b0f87629b8a4b1dac50b270817259c96d5f065178b5746693e8f8e0507343d771cbb9
SSDEEP 96:KUAAKtePGhOKy46CK8K/aMHeKIoWKqsKHqj:ii1Z3CN/U
TLSH
T157E17B4272B702123C7E6908969987275F8277A33514E42B7BA840F28E76E341DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 41c259af8792788f15477048790b7d2dc34193a2a2cb2b6341b6554deb41b0bb
MD5 2d5a9e90b73706286d66f663e45952d8
SHA1 101df38749c17fa65efe8132fe38d09243a67567
SHA512 2b8495b4902ebaea6407865c910fd7630efb5861ac3398ab676048963fe1a84cc9e65965153e373c2cbb1ec075c797aa45f539f8948d2c47dc7456aecc79f674
SSDEEP 192:uzLsNUVQVRyQ67+3vA6QmiU1tIUq4atb0/+Fd15GKLMRqoghg4+UU83s4Z2IqqBq:usNUVPQxTwU1a9pd1oqd+wvDm4vqpK3w
TLSH
T159725B396C346C675AE3F584F68725135FB981A7DE8A2E40D6DD9F0C01EE2AC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 6151249adc28b281008829dd12eb66c2d887343e776b0c17e6793aaa950961a4
MD5 28bf6a2565eaeb3c4557f2d1d9b1bfeb
SHA1 5478305fdc84556bcc0f9ebd5116fae1f447670a
SHA512 fc0c0bac145c55a2b3fc1cbbba5c77773a88889add09eb3fbe31162900acf5e2253319124256f5fa73e8369af0d99e6050e9281367078c053ff2d571de005c52
SSDEEP 384:6zsNUIPQxTwU1a9pd1Bqd+wvDm4vqpK3w:S3Ybpqd+wZg
TLSH
T118725B396C346C275AE3F544F68735175FB94067DE8A6E40D6DD9F0D01EE2AC230782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 2ab660d32999c160c61476647cc769cfb31d198843c4b92e3e0d2ce717abfe31
MD5 32ffdd55a5f6e1e1251662f7aef9988b
SHA1 f3d7f6fb23cb55493339c9a275e30e1213d04a49
SHA512 776460b39ea65b6f483e73293380a67928218b77a4afeaa63c2f2d25b1a1c174e3b5f9d4a03e9d2e3e79f971c1acb8d331f67ced75e1e35d285f3a2730d95460
SSDEEP 384:6zsNNIPQxTwU1a9pd1I3qd+wvDm4vqpK3w:SOYbOqd+wZg
TLSH
T161725B396C346C275AE3F544F68735175FB98067DE8A6E80D6DD9F0D01EE2AC230782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3f160c3e75488ba9cd89eb53aba6102365e3b57886ce7a84721c569fee67075
MD5 c4aaf6a793592187a70819a962f61321
SHA1 86fc00e4c4f764f687de29a685ef4c4aadbe8918
SHA512 f59a4b30632cea37ab20c9f14c683f18082244eacd2250f81d35b706f5f63cbab33205dadc1854c9768b61a302e4b4dc9d9832129367f233751a7da234452bf8
SSDEEP 192:qON66O7+3hQmiUyOyGttb0/+Fd1DgGdiU6:qON661cGt9pd1HUU6
TLSH
T13D02E7396C782CA78EF2AE45F68727175FA5117BE9A62B40DAE85F0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 d8d78862791af1655c7698aa736b36a349be5da9f9bdfe175cd3de68d851ee00
MD5 b8001e8d0e624bfcedb0db93c3f6dbc3
SHA1 6e5453d9d4e83abbc1a4e5fb869162c5ad0e87a5
SHA512 b05305535c294db054251d309d27069b0c4a4cef2639a6febf235758fd06e66eb4c062fa3478d0254f08aa3a5f93f9a6ba703adbfd52cd2425b76c5c93c0e070
SSDEEP 192:uALsNUIQVRyQ67+3vA6QmiU1tIUq4atb0/+Fd15GKLMRqoghg4+UU83s4Z2IqqBq:3sNUIPQxTwU1a9pd1oqd+wvDm4vqpK3w
TLSH
T17E725B396C246C675AE3F584F68725135FB581A7DE8A2E40D6DD9F0D01EE2AC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4104298f0b9ea303fb3b901ede1466be5d5112bc4be31c9d486ce5240738a97c
MD5 052b33c03d957e8572e9e091d8a81f32
SHA1 fb4f70f4a6348ff3a3ddc38c652ac12f97b74e04
SHA512 ef914de27ac7bc537a4106292da4b52551b158a1f4c75e789793678ac9424714ab6c1a57e80a3e00a59ada55becf48d1561b3da6c0034b38f3c61fa8e9b48880
SSDEEP 192:kONV6O7+3DQmiUyGyHttb0/+Fd15GocNRqoghU6:kONV6TyHt9pd1oqU6
TLSH
T1A6121A3A78786C675EA2B445F58736174FA54277DE8A7B80D5EC5F0C00EF5AC2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46d6b755-37e1-4033-9bec-80771fc2b4b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46d6b755-37e1-4033-9bec-80771fc2b4b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6e8973482e74e04cc6b1bcab5672a4cf3a9f04d139e32b2986ff9dfb2d15e1aa
MD5 73b24087b44e658d466687a505f9465a
SHA1 197767ff27246ec73bd9824a5ab1f025b1c841c6
SHA512 b88984b3b41b45643896f5b8c6d502adc85297e1e532fad5417d68f440201227c8fff5efcab871d5366cf9232cf7a5e07719d4c250976a6735ba07855c458f28
TLSH
T1A3412D58A7FA1148B3B32F569BF6646D487EBD733E06955D00010E4E0B27B41C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download