52d00b3a154f05d9986823f7534430861e18c45ded2f5d3bb07c3668a1fd27cb

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 25KB
Sample260801-pkgvfaap4y
SHA256 52d00b3a154f05d9986823f7534430861e18c45ded2f5d3bb07c3668a1fd27cb
MD5 0a6543ab8bdafb6817b14054376f2f70
SHA1 c986b1e23d2d1f6ab335a3298e6b6b09720b9398
SHA512 10fb2b655fd8d44e4f47f920590186eeb63fef43b0ba7f1bbf1c0990b5f4a3abac5528ba1ac08d9c73776b7c0e301296dc8102fb9525408aa14a79ddf0b001d7
SSDEEP 192:NSmFW4N9Nxas3tTj3tTisbLRLRLRLRLRLRLRLRLRLRLRLRLRL3stHL9L9L9L9L9s:JVNoyPTLH
TLSH
T1EEC2686197C4B30EC9765148D3A04F98CFF6901B5B170DA8B80FA1AF5FB98858D27A7C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300606227907022"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{E7D4FDC3-CEA6-498E-8805-850C1FDBBD2B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3796 wrote to memory of 1536	3796	msedge.exe	84
PID 3796 wrote to memory of 3848	3796	msedge.exe	85
PID 3796 wrote to memory of 3496	3796	msedge.exe	86
PID 3796 wrote to memory of 3496	3796	msedge.exe	86
PID 3796 wrote to memory of 3496	3796	msedge.exe	86
PID 3796 wrote to memory of 4828	3796	msedge.exe	87
PID 3796 wrote to memory of 4828	3796	msedge.exe	87
PID 3796 wrote to memory of 4984	3796	msedge.exe	88
PID 3796 wrote to memory of 4984	3796	msedge.exe	88
PID 3796 wrote to memory of 4984	3796	msedge.exe	88
PID 3796 wrote to memory of 4056	3796	msedge.exe	90
PID 3796 wrote to memory of 4056	3796	msedge.exe	90
PID 3796 wrote to memory of 4056	3796	msedge.exe	90
PID 3796 wrote to memory of 3784	3796	msedge.exe	91
PID 3796 wrote to memory of 3784	3796	msedge.exe	91
PID 3796 wrote to memory of 3784	3796	msedge.exe	91
PID 3796 wrote to memory of 448	3796	msedge.exe	92
PID 3796 wrote to memory of 448	3796	msedge.exe	92
PID 3796 wrote to memory of 448	3796	msedge.exe	92
PID 3796 wrote to memory of 1620	3796	msedge.exe	96
PID 3796 wrote to memory of 1832	3796	msedge.exe	97
PID 3796 wrote to memory of 1620	3796	msedge.exe	96
PID 3796 wrote to memory of 1832	3796	msedge.exe	97
PID 3796 wrote to memory of 4776	3796	msedge.exe	99
PID 3796 wrote to memory of 5056	3796	msedge.exe	102
PID 3796 wrote to memory of 4416	3796	msedge.exe	103
PID 3796 wrote to memory of 3264	3796	msedge.exe	104
PID 3796 wrote to memory of 1488	3796	msedge.exe	111
PID 3796 wrote to memory of 1488	3796	msedge.exe	111
PID 3796 wrote to memory of 1244	3796	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc8e4dc188,0x7ffc8e4dc194,0x7ffc8e4dc1a0
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,1097645271879173105,1532850422009566297,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,7252124657295816469,716915114436045715,262144 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:2
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,6364363712157754566,5362006508763186068,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15645249487221292526,1560684656505446324,2097152 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7939942417957296721,16406588320964846239,2097152 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,9220611054331883448,11583137496620043331,2097152 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,14223709802390326583,14137698332138042992,2097152 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1843318721712425677,10452425671175076593,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3716612538679116773,14166299744779491422,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,9028282877042066381,5098886064701811921,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,9028282877042066381,5098886064701811921,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,13558208795283528180,16230237901849391370,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,13158777403345106009,14420444501063648864,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,6062448622213050267,17984450440993545216,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,5330679774873105623,14489903352715930899,524288 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,4313902230793199336,13813303290835856517,262144 --field-trial-handle=2920,i,10635097184881473012,8996890368666049514,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b50b98bcaa03b9b90e2d0c335d8f75c46e3a86545a9eb814c9bd297b2766a244
MD5 6cff3fb88b933ff101e0c085842946c4
SHA1 8fe9302eb764d43cd3c531487c644e64c21f4553
SHA512 67186e6262e7c79370a020e13b2cfdce7b4028045c9fed258022a03e3c3b38aa501cafc93e081e8b74459f964f19df5ace9a7a13721a64757648b2104293a44a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7i:fwUQC5VwBIiElEd2K57P7i
TLSH
T174B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 77797d11474dca7bf1efe4effe52a577b2a09ef611d3fa0501c4bee79393fe82
MD5 f9fdc1a5e8a77a556307d27b3fdb3533
SHA1 a3d65bb2010d6c91328c973fcfad00e31f1ae494
SHA512 6f161d5fefd18d6acdfbbcd5347e41b9212277f86fa2cbfb72f957932769198e2f4e4e5c0be1f9cfff6910d2556cdc4f87032240560d82649b11c433e86531bd
TLSH
T13E61090A0D8D1984F3A93139A3D243C239B1C4AB19DF9E170153DABBE91671D4C26DFB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58726c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58726c.TMP
Size 3KB
SHA256 6c8f697cbfbc6a7fcc141dc12f09b2fd6ed43aa17bd3daa913d91c7105634699
MD5 ebfade5ebe2a6995b3bcceca2a50aa9a
SHA1 434773698dda726f817dd630a340c646a5834674
SHA512 59711b621f05b98cb97cb763c065cc78bad8d86ad1c728cbc7d79b35831bf9f485f4e9c9556a2519978ee28ae81acbf2a8fa5d6be7517857d8001ff59bb4b369
TLSH
T1EF611C0A0D4D1984F3A53139A3D243C239B1C4AB19DF9E170153D6B7E91672D4C26DF7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 694B
SHA256 13ecb4744e9378ca2c76e172afe4d89ebf7861341ddf1f36cfee7c932cd4d308
MD5 76510df81f27d32a850b2d0a6934d35f
SHA1 2b313c5518037b87886803859266aae198a3f44f
SHA512 2894642f3f374f14110255c63b244c717ffd18e51ac3ff9aadd10b92ab55539d5f2a07c5632525748d5c73442aadafc33c42f178103ba68e9e69d2c529db1265
TLSH
T1FE017BF3C7D595AE8A0552F05A24AE2BCE2D0506421C7D2586E4FF6BD3E3479D00296B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e427e5c5ac7877f69ba9e3ffc2af9dac54975e45cb5939ab2a059f8fcf607676
MD5 321d7d0750a17cac4c943cb7c00d5124
SHA1 816056ce824c07d27b0f22db1bec445a7de16809
SHA512 b3d25b88e2d6f15b480ed056d92eaafd5f32ded0553173be465a0287712cb801f753512829cac885aca70fac10676b985c60d042b75116e95355a414b2d7cd34
SSDEEP 192:sxZv/yM/jK1Ml8Mk3/fusX0dducIdpdHHW6+WNGYHjN8VeIgrJ:sxZv5M3/fusXsduF5HbGTA9
TLSH
T1AC42D7126A386977CCDBD20DFA557F53D6F90472A2900D44AAFCDA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6dcb2abb40c805c1e1c94ee880e229c710008d4fd2afd197f1ecc4724eed18c5
MD5 e1ef260750dae712696c3546dc665530
SHA1 1a377af8cb78405e290200c699ea298c6bd9e6f8
SHA512 83d2cca19fb53800a5baff529b33cae784e1c6f37f931e5c79badb52b01591d3ba0744d5b76843644ed572536719b238d60e503e7ccbe66e7285190c133ead16
SSDEEP 192:sxZv/yM/jK1Ml8UQlk3/fusc0duucIdpHHHW6+WNGYH+gLVeIg5DJ:sxZv7qu3/fuscsuuFnHbGCA/
TLSH
T17C52D712AA385977CCDBD20DFA557F53D6F91472A1900E44AAFCDA1C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 497ee4e7531508fdf5048cc97083d7a2624af9bf28eddaf9885c56c1f9eb2eb7
MD5 b2a7d1792d00c44a77aa5122408988eb
SHA1 1025761ef3fc5535aeb3234d277d13c4e616f19e
SHA512 ea3e8dac7c949f8a73b6135838929e3914729025e4be3189e15beb93e327ee9ba33c5c89bfaa19a1ae71d22c296abf89d54f46a6648ac284518858e753c298ff
SSDEEP 192:sxZv/yM/jK1Ml8Mk3/fusc0duucIdpHHHW6+WNGYH+gLVeIg5DJ:sxZv7M3/fuscsuuFnHbGCA/
TLSH
T12652D8166A385977CCDBD20DFA457F53D6F91472A1900E44AAFCDA1C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 02454cde91ded8441d1dd1f44a322cf3ed709756c1b5bf5e7740a6c8ae684d32
MD5 27f10d90a93b640e5c4c36c459d19c57
SHA1 ccf367dc8abff148f99913d1970a6d40045d3746
SHA512 1487516b2158560b333116c3d16763bb36336900aa4406621d974cb7f2b7e9788e6cdd6fbc96f7826cce08106cb75c78824555a6a0748682d12cea22d0915996
SSDEEP 768:YzUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RHroVJ0Bg:YzUZYTMWvg0Pou1ja7eLZmRUwBg
TLSH
T1A6D20A2B280CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA894C03CB6EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e25d6febd65a6e79bbba53b72b1b1ef4c19803923aafc15a5506a91a3a487853
MD5 6588c8a5e6ecdb6bc6ceed1b208b3b20
SHA1 e51faac2ab2d28647595dccc89808fba07729dce
SHA512 92f8e5bc715018c233559a1b62d904bf1d3298e7ee5b9a1dad6c09b70c9607b87f144eeb9e4dbbf40aaa9428a2da64293f82ea30c4752871412e64f70b241176
SSDEEP 48:KA1ItK2AIHIdKUMgHypa/MAac8hZ8yI/KDyQ/yNDIlKA8AX:KA1eK2AIHuKUMSeCycKDySuDeKA8o
TLSH
T16CC1284371BA46933C7F6A08829497278E42B3637118E46B7FAD50B14E67E209CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 050a2b56d889ebb4262a92ea835656687c5c5553ed60e230a81509d5a31365e0
MD5 432ed47978146db4c7a1347aa601074b
SHA1 24cd43ef5dafab8498cab3a0d09ec392e5bf4e2f
SHA512 2d84db83bf9bca74660180c0773e3bf3450aedf588b8eeb3680857fcaa78e3ff78413b12dfac7bd56486bc9d7bc8644d166c61e251f68dff55c7555907f9174c
SSDEEP 192:uuLsNIkIQvPdt01iQmiU12or4zX5Obd+jCjzorOyRwXk4QEqOFLqyyK9:3sNIkIgVx0zX5od+a8O1XoiXyK
TLSH
T195422932A878AC7799E2A545F54B36139FB85167DAC42F94D6EC1F1C00DF2AC2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 1223d78fd190af23a16806b794c997342144f9dbff0c84a38cd7972c64ab9e53
MD5 6bd5021e954cb9048476ec3c1a151b1f
SHA1 3116af405f1665ab3a7995296e33f50c7887fa01
SHA512 451a5965da31ab3cc3c2a4d536e592714b8a9aa57e2ab9478ab0c9fd13f60623c5e2761970a8c08635b2f429ace3025fb88f13dd66e3b2a14dc4d7b4a5fba0f9
SSDEEP 192:upLsNIkJQvPdt01iQmiU12or4zX5Obd+jCjzorOyRwXk4QEqOFLqyyK9:+sNIkJgVx0zX5od+a8O1XoiXyK
TLSH
T1E3421932A868AC7799E2A545F54736239FB85167DAC42F94D6EC1F1C00DF2AC2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 fb0db63f77b8a7100055a47ff76fe6a4870662ab969b682fabb419683827a7eb
MD5 7aed343709e7f20dc0e30e46fc290f3b
SHA1 3f5e9e7041dca0c1dcf2ca6f4d5090c34895f9fa
SHA512 89a41bffab6e1b018664f61dacbce3665210b720552250833b2cc3c3cda4963fd6bebbad757fc7c383a8aae3929f5a1b220b03c2602f2a7e4ffacb88ecc31bdb
SSDEEP 192:ufsKzsNIkJQvPdt01iQmiU12or4zX5Obd+jCjzorOyRwXscQEqOFLqyyK6:wzsNIkJgVx0zX5od+a8O1XMiXyN
TLSH
T1F6521A32A878AC7799E2A545F54736139FB86067DAC42F94D6EC1F1C00DB6AC2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c3060243ab02904184bec841fcb43c93a47ecf1caf0f1e47c344dc40c910913
MD5 57f149264977637e4e68ec5422fd6eac
SHA1 927460a6cb00f934132daa8041fb8e870daea3f1
SHA512 272528fe30b8eff93299fec7c8897e0c41531e24f9fd6eac96437c4d01b0f8d4a5c92e952a0344c4804256ee075244471f384b3061e18228f1fb32ed92749d23
SSDEEP 192:yONb61VWQmiUy7+gGX5Obd+jCjzorOyR5/a83MYU6:yONb6W7gGX5od+a8OT/YU6
TLSH
T10202C835A8687CBB9AE2AE49B44737135FE4206BEA956F84D6E81F1C00D765C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 b1e3629db3f7ddd97db7f7af55b72a010cea9af8b4d247c5a1c8525cb3606aea
MD5 5e66e8122bb38295861d96260efe529f
SHA1 fae9b87aea6f8a6dbbe5e32c6416fc7a3cd3df2f
SHA512 876cd7c0a287ab6af30d35d082bdd290923c256717d6f9be4a0a7ae08ca01d79a5bbe8f828ae94b5d8ba09604c924c4242c42663477f00baec77e09d6f875c42
SSDEEP 192:ufsKzsNfkJQvPdt01iQmiU12or4zX5Obd+jCjzorOyRwXwfQEqOFLqyyK6:wzsNfkJgVx0zX5od+a8O1XjiXyN
TLSH
T124521932A878AC7799E2A545F54636239FF86067DAC42F94D6EC1F1C00DB6AC2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1bc4dddb178da27348268709a779113e908c38b429b1f35078b4fa0385ed9bb6
MD5 bd44c570fa036fe551d9ebb2ca4e0363
SHA1 b350ec63d24ceb9168ac89bcabf6bfee4a9c781c
SHA512 20cb6896dfda9e7ceab02298ded6a2b297818dfbd49afbba9ffd333e177b0ee2c258f91d51de0102309f250f91c3b31ee946a4eb03d6c559d6387ea301f24c0e
SSDEEP 192:8ONsx615WQmiUyy+UGX5Obd+jCjzorOyRwX5jJEqOFU6:8ONsx6GYUGX5od+a8O1X7iU6
TLSH
T17E12FA32A568BC6B9DE2B548F48736139FA95067DA857F80D6EC2F2C00DF65C130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fe97c198a9bb8915ac7cab7656fda6ce7223ec492ebcb3c1c1fa84fa99881508
MD5 d267c2b8e39628dd55d0e46ca170c636
SHA1 e97c17e7de61d4b74de98e26198621ad534d756d
SHA512 0b87b07589f8ccad99a153edeecbaea528823239f80c44e61423fb5a24c1ea67c9e97593ec8cd84e4183a18c37f5bb3f9e5e29b06d0f7cbf178e0708ada4665c
TLSH
T1FA412B58AAF91148B3B36F469BF6B97E487BB9771E0AD49D10100E4F0A67B40C862733
MD5 SHA1 SHA512 TLSH

Submit Download