4cf5c6cd47b709634bba5a290dea3d84228f73a1024e0a65706f05ef023eba7c

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 55KB
Sample260802-ppc22sap8z
SHA256 4cf5c6cd47b709634bba5a290dea3d84228f73a1024e0a65706f05ef023eba7c
MD5 6ffc2439b68e8873fd611d844e160947
SHA1 66bde51ef808c792bb77f6e226f60d3c6b2fa007
SHA512 00e100653b5d5e5db027e706b61a0fa20a1f96373c07b62d1eff744f167500773ea85669d4bebb7618e3769a44e6c75d702351e8d039721c95dfd41e01051b76
SSDEEP 1536:dswnr1Z5apd1p8tnMhC8Aso36v1H80NuqWUdPGB6H8b8V63uu8ohFO:s56nMhC8Aso381H80NuqWUdPI6H8b8k2
TLSH
T14043A672B9960D27215F179FA013330DE496DDD9DA46A2E8F4F7C02816F8DE132B3299
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1780	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301474023957175"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{1E05784D-C001-4DD4-ACB1-210B6A62CE93}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 1848	2016	msedge.exe	87
PID 2016 wrote to memory of 1780	2016	msedge.exe	88
PID 2016 wrote to memory of 1524	2016	msedge.exe	89
PID 2016 wrote to memory of 1524	2016	msedge.exe	89
PID 2016 wrote to memory of 1524	2016	msedge.exe	89
PID 2016 wrote to memory of 1836	2016	msedge.exe	90
PID 2016 wrote to memory of 1836	2016	msedge.exe	90
PID 2016 wrote to memory of 1612	2016	msedge.exe	91
PID 2016 wrote to memory of 1612	2016	msedge.exe	91
PID 2016 wrote to memory of 1612	2016	msedge.exe	91
PID 2016 wrote to memory of 1072	2016	msedge.exe	92
PID 2016 wrote to memory of 1072	2016	msedge.exe	92
PID 2016 wrote to memory of 1072	2016	msedge.exe	92
PID 2016 wrote to memory of 1716	2016	msedge.exe	94
PID 2016 wrote to memory of 1716	2016	msedge.exe	94
PID 2016 wrote to memory of 1716	2016	msedge.exe	94
PID 2016 wrote to memory of 3088	2016	msedge.exe	95
PID 2016 wrote to memory of 3088	2016	msedge.exe	95
PID 2016 wrote to memory of 3088	2016	msedge.exe	95
PID 2016 wrote to memory of 5012	2016	msedge.exe	102
PID 2016 wrote to memory of 4268	2016	msedge.exe	103
PID 2016 wrote to memory of 5012	2016	msedge.exe	102
PID 2016 wrote to memory of 4268	2016	msedge.exe	103
PID 2016 wrote to memory of 4672	2016	msedge.exe	107
PID 2016 wrote to memory of 2904	2016	msedge.exe	114
PID 2016 wrote to memory of 1616	2016	msedge.exe	115
PID 2016 wrote to memory of 1192	2016	msedge.exe	116
PID 2016 wrote to memory of 5044	2016	msedge.exe	118
PID 2016 wrote to memory of 5044	2016	msedge.exe	118
PID 2016 wrote to memory of 3392	2016	msedge.exe	119
PID 2016 wrote to memory of 3392	2016	msedge.exe	119
PID 2016 wrote to memory of 3780	2016	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,3377715274601661905,7499397902332465756,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,1099968793152090235,17752017366359483786,262144 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,13908420696803995878,219866479320797313,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17542248443571765327,17333785032264628625,2097152 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,148990291827608045,10807888183234875043,2097152 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,4076613122366523361,11798214559843838643,2097152 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,9805730692385119669,12765653324802830878,2097152 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:2
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,8268973303449840779,4440904611627374363,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5239150348735171689,11095173408087433530,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,15739577030299521066,10630645461681781251,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,15739577030299521066,10630645461681781251,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,6357435998073040302,10547414001417208746,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,1494519357532246232,8294106635588762208,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,10080807156399189324,4747200401384075758,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,18019805193032542553,3354583822126307774,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,6537804486820975540,13546965198841238591,524288 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3516,i,8050882207495436036,725525358277061614,262144 --field-trial-handle=2128,i,16225208373256151171,14031025156501152756,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

86a457b8-f24d-4ed4-986f-dae4b54ce379.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86a457b8-f24d-4ed4-986f-dae4b54ce379.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f9d4491c7cdae0b449f0232e607b79fc19318c216237f02e2e386985a210f638
MD5 9ec5720c9b9cc348234a8eb8614962e2
SHA1 c8e376e598487823189def96519bd15e056d6ad2
SHA512 8c102eac1fcb9a2c970df9b8cf8f0470d7f853912fe91deaf8a37b68a535a3716a11d984a76108d0cd5d7b7709bc8c8a80fa76f0b0d0e5a9918c077a1c38d5cd
TLSH
T13F61C6750B10C4ECE79031B098E932927872DDEAF4835E4670735EB1FA05F4189EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e4a23ca78b2c7438e70700513863d5c5a92765a3200c3342e112efafe9b302fa
MD5 76eb7b718ed593f2c9ef84a33168db81
SHA1 10861dca533b7c81063cf9f4f642508c14b512e1
SHA512 e43513b99a1d19a8e7317b3abf0bed14bc58278010c74d0837ac16f40cbb81f24702f2caa22c16d96939ad451546e2a34783e8a946dfd54b8404a02ebfa51a2d
TLSH
T13E418EB6C3D4877E891116F5AB25AA27CE1D054642383C2AC9F4AF1F63F28B0D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f3fb0dabcd6cef74e1239bd196d1b3c35ff56c3ce7207dc088b77d9010a32dcc
MD5 5b28500aedfb7ad96a17a153060c5623
SHA1 a5122eccc50cfe0a16fa8893d4e2dd658c593618
SHA512 048bc1441cfd01154c693ea2c0d57bdfed406a126760c9c04271d5269ba420b8ebd7cc9e605a53e7634366772530d969861eea92fef6bcb335249118cf2af825
SSDEEP 192:sxZ8HRska/fysBubN+VQIdpdXHW6+WNGYvrkYZxIgrJ:sxZ8Hxa/fysBubNAxHbGiP9
TLSH
T14622D8526E38A87B8CC7D61DBB15BF13D6FA5032A1911E58EAFC961C04E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0b602bb194d63a857af7516a4dccf619c4a87802530a187c82a34fde2560df99
MD5 8ddcaafe66aa450a3c56d1dbb550f425
SHA1 09660092b9b3d3ab269f135ee40012b591e88a87
SHA512 e234959fcc6e2b125a0b6af0e07011ab7073c4418d64b44a1e5e99cb898b8eaa9bfc5fbf98ac8d325602e1ad95638edf68f39bdff200361559af6264f1c594bf
SSDEEP 192:sxZ8HRska/fysd7bN+VQIdpdXHW6+WNGYv+kYZxIg5vJ:sxZ8Hxa/fysd7bNAxHbGJPv
TLSH
T1D532D7526E38A8778CC7E60DBB15BF13E7FA503291911E58A6FC961C04E6BDD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4fc613cc99178e9f0579ff5bb0cd6b1b361d666dc71f22e8dcffe6840fc06a35
MD5 6cfdfc7f1d459a716e1c1eb2e51aa2a5
SHA1 130778f26e99b8a94dab567386d1973fab43c045
SHA512 7f6e0759ba68ab7ce6f8a03c589aa4954028e62ae4d435a14db89a72c5f5fb3e4a6e839ec8e9e357f58142070ffc08c7df733a17823a2bf1dfc141c0dc39d330
SSDEEP 192:sxZ8HRska/fysdubN+VQIdpdXHW6+WNGYvrkYZxIg5FJ:sxZ8Hxa/fysdubNAxHbGiPZ
TLSH
T1A222E8526E38A87B8CC7D61DBB14BF13D6FA1032A1911E58AAFC961C04E67DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fe551258a8c8c3fa3131d178b7a9539416a0bd5fc183dc7160256232552a3078
MD5 1e218c6f1ffd0fb6732add0bd331913c
SHA1 51c55cd0212027f19e8e329c41c460f44e78f394
SHA512 3a1213c8876a2fcbada49b1c4b3916def0f8df860749f1b7025697cfd4de19881e925cf3ed59d881a499f26ab4aa5705310c522dca8a264c469b17b8dd7d258d
SSDEEP 768:3qee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pb8ro1:3qee3rxWvhffnu1jatcL88bn1
TLSH
T1DDC2FA2B640CCB7E5F800EADDC5A6F977FA802C7A7548D4087F9994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a5ab5d74236da3ad45129ecba61247896db8dac4dd64ae81c94f1f5113410dd0
MD5 93202788e4cca0ef56f283b169f522f4
SHA1 48ea4b4ea399a5de8e256ff2fe96b5459ce3e103
SHA512 867df5e7b199a53610cb64042dacb94965862bd415ca0306eb4317b8df54746e442477bf65d674afff81f5a17d39c4002842bda1d2e15a9b293638625e5f4caf
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09SZS/jZvq:KYH+Kggm+ruKAUyyQgKJup
TLSH
T18D91C016753A02022C3E3D8CB2A696364F4531A37468A9EF7FB904664D67E114EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595f5c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595f5c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 4721d365d040209b3ce6841783042f94f3c15d3f7cb8cc2819bbb7eae7a09a83
MD5 d6dcab8e0695e0042e4fd29e3a7cd3b0
SHA1 daa7d471cd75da00345577c98c12842fa865d725
SHA512 9f37ef22fff1e2ee600b9f1f6c9de681f79f95c0f2fccdb4c075997106ea0c469cbcd782070a36b559e742e63ec212258b89ebb6a0afa149f3f75f421998255e
SSDEEP 192:uom+xasuheOwQxMGsNxzQ2QM70KLQmiU1QIaB4MTAn+FdLQx6ptFd3EE8z1iquOr:IZcIhsNxzx7j9HaukdcxMdUFOJ+
TLSH
T199625C726C746C37AAA2B646F58A37135FF4902BE6C45B54F2ED7F1C01DA6A8030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7ed786805731e7caef73997a6ab1402828c9b8ab3c9df774f91712d04e9b164a
MD5 f0ff75697e1b0e4eb5822881013b893a
SHA1 79d2a58da91b91a66e8690d2a611dae882910b2b
SHA512 d315b2d122b1db4b0c25598fe06da1fb1899f527cf196c2642c0179cdff8d2a45811f85b7c1f1673b046c8ec4d5f92f013966a62aaf90e0fea167ff7b3bcc5c8
SSDEEP 384:6iFiZcILzsND8TUNTUlIlux7j9HaukdcxMdU1OJ+:xFQfmwg+9snU1OJ+
TLSH
T193825C735C64993BAEB6AB46F58A33138FF4506BD9D4AA64F3DC6F1C01961AC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d21012b42fc7750b2b8910d277c8cb2815e18d3fb8b4ea238dd9fd9e832c28b1
MD5 235f2c7710504bd932e64db15e36726c
SHA1 77062ff4cd284158ae8e98f32796003f5ee2610c
SHA512 9946dd48e8e05f1128df2701a32a8d96f19befcc890d3afb4d8a0b69e9f47e026988001168dc8011570ee0b9b8604e27e4a15a25b319009143d171b68cca63f3
SSDEEP 192:lONb6vMtPQmiUyO7ThTAn+FdLQx6/847qMU/u:lONb6UtR9T7dcxE3U/u
TLSH
T1C5020835AC786C7BEAA3AE46F48A37175FE4616FA5D01B54EAE82F1C00D725C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 fef898ede82839aea7545eda9c3e03a57fa846b60d70e912ff02fcb77d3cfdd8
MD5 3f6fc7cd89b5a90e1771a7b7d3db8a6c
SHA1 18790596e372ea4f4c9c748236dc4eacc160cc3a
SHA512 bedeadb33104be2b84233311191d136d5c0a9c51732f60d0cad7826a8b0ceb7bc09e81fb627d78c5c51733113894a659a2ad6801098a1ec01b15c6be546c1af4
SSDEEP 192:uam+xasuheOwQxMGsNxuQ2QM70KLQmiU1QIaB4MTAn+FdLQx6ptFd3EE8z1iquOr:SZcIhsNxux7j9HaukdcxMdUFOJ+
TLSH
T179625CB26C745C379AA2F646F58A36139FF4902BE6C45B54F2ED7F1C01DA6A8030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 77e18cc6793f8a916b29d96df6bf9a203698b5cce83bc84ab3eed4049054219a
MD5 dee624ca5d6f3055130bbf9086f0189d
SHA1 1b0e7d4270ff1b9df6e3febab9e6a496840d45da
SHA512 81096c5401a564016a94f8103673a48fa9ee10ef72ba0a1c041534820785c8156136d014c71b739737210be2b218b83e3e83ae4ed23b8854e4139381014d5f81
SSDEEP 192:uONc6vMoPQmiUyp7NhTAn+FdLQx6ptFd3EF80IiquU/u:uONc6UoRwN7dcxMdUKOU/u
TLSH
T102121B72AC649C279E93B946F08A36175FB1912BEAC46F50F6DD3F1C01DA66C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74b546f4-b195-424c-a33b-35eab3db31a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\74b546f4-b195-424c-a33b-35eab3db31a6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c105ca55cf71e223266a02d3633c81c511a9bdc87b10936a6d3b4412ef279e14
MD5 6d85654239aaf67b70789b0fcccb9b4c
SHA1 0ecc9abb1ae7dd6343ed5fb6f173a8b9f4e602f3
SHA512 eded5aaf1b7d7d0816d13ce534627854fad045ac89a1fdf5719e5fbf9286812b9b9c68e555422a75579728cb0e01aa083adf4ec7174bede31ce5bf7ea12077fb
TLSH
T19841F95CB6F91104B3B7BE5AABF6A8AE587EB8772E46D55E10110D4F0522A00D871733
MD5 SHA1 SHA512 TLSH

Submit Download