0d2215a4390d239de480a53410ac187ea3ce37ba34fab9770506cea28a6d3f2f

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample260803-ncwsysvhpd
SHA256 0d2215a4390d239de480a53410ac187ea3ce37ba34fab9770506cea28a6d3f2f
MD5 4af4fd94ec42489fbaf2306806efb57c
SHA1 e0b21db05cb0593c70f2da545f40c22351f61f19
SHA512 c2e6d16cde2f4823088c2748d271416647a075847d1e9650c4b1af0a9312f04df8716a2f1dfe5ca5913c195f4ebd41e087c01705216d38ee3acb94cafd6c56ac
SSDEEP 96:x2Q7vqu52qwqVm62HkmNdtnN+oHhMWHgkAhm52o:j+26GGV2+Um5X
TLSH
T11591231250426D6FA5572036BEE26EED213781E8D70F5F080A297AF1E3CE6ED55336D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3764	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302293468744026"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{36037AE7-141E-4551-BE55-6459A5A2AF26}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 3240	2816	msedge.exe	87
PID 2816 wrote to memory of 3764	2816	msedge.exe	88
PID 2816 wrote to memory of 2052	2816	msedge.exe	89
PID 2816 wrote to memory of 2052	2816	msedge.exe	89
PID 2816 wrote to memory of 2052	2816	msedge.exe	89
PID 2816 wrote to memory of 2076	2816	msedge.exe	90
PID 2816 wrote to memory of 2076	2816	msedge.exe	90
PID 2816 wrote to memory of 4648	2816	msedge.exe	92
PID 2816 wrote to memory of 4648	2816	msedge.exe	92
PID 2816 wrote to memory of 4648	2816	msedge.exe	92
PID 2816 wrote to memory of 4356	2816	msedge.exe	93
PID 2816 wrote to memory of 4356	2816	msedge.exe	93
PID 2816 wrote to memory of 4356	2816	msedge.exe	93
PID 2816 wrote to memory of 1440	2816	msedge.exe	94
PID 2816 wrote to memory of 4364	2816	msedge.exe	95
PID 2816 wrote to memory of 1440	2816	msedge.exe	94
PID 2816 wrote to memory of 1440	2816	msedge.exe	94
PID 2816 wrote to memory of 4364	2816	msedge.exe	95
PID 2816 wrote to memory of 4364	2816	msedge.exe	95
PID 2816 wrote to memory of 4844	2816	msedge.exe	98
PID 2816 wrote to memory of 2028	2816	msedge.exe	99
PID 2816 wrote to memory of 4844	2816	msedge.exe	98
PID 2816 wrote to memory of 2028	2816	msedge.exe	99
PID 2816 wrote to memory of 3228	2816	msedge.exe	101
PID 2816 wrote to memory of 3300	2816	msedge.exe	108
PID 2816 wrote to memory of 1624	2816	msedge.exe	109
PID 2816 wrote to memory of 4144	2816	msedge.exe	110
PID 2816 wrote to memory of 3480	2816	msedge.exe	118
PID 2816 wrote to memory of 3480	2816	msedge.exe	118
PID 2816 wrote to memory of 3812	2816	msedge.exe	119
PID 2816 wrote to memory of 3812	2816	msedge.exe	119
PID 2816 wrote to memory of 1564	2816	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffaa54fc188,0x7ffaa54fc194,0x7ffaa54fc1a0
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,9245593698964792280,1511898336299379330,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,14496701174337510193,13134100499476695355,262144 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,4783820778936735890,3179217276056690044,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8448664340978029512,443475480906212774,2097152 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4084270727497147423,18412232951196602881,2097152 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,9700977997598689594,15666498599320673288,2097152 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,18302706755292179355,3889086632887774888,2097152 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,9221127777278403226,12222440431867376077,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,17687497057755566702,8137369724622025084,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,14981677755873396431,3116641314992374215,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,14981677755873396431,3116641314992374215,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,14044965916458802922,12277108085770434974,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,1835532790983978846,14534935072579107100,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,16575324018881294749,2267035549039927102,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,11332328867346115757,3369817924870965612,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,10570371228886841489,2623673002007683822,524288 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,1145425604772679514,3414491948895858502,262144 --field-trial-handle=2096,i,1293195667559898266,23764717786123270,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 81b365ea82409f1ccac31c98ea2ca4cb0be5b910a6b11b18a5c9be98e7453029
MD5 37a277076f38a82edcb5a0af5f60a32c
SHA1 339819b250b6da12057b67147abd36254c573078
SHA512 9e636589953c256d141c7fa0e049bee89baaf40dc67e09598af97004f3b13f57e1f222db27a50ded645e94d608a67a2b2df8f4c430c6547b29ed44a1a383327c
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T100B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8fe3ccb12730fe16fc89dfbeff702d523d1d6746ef5761f7e195a252c7e849de
MD5 9ed14622ac3a38efeb5140bad0438612
SHA1 2a0a9637aac2dbbbc1569b7773f2456ff1ddbbef
SHA512 32987727133d8266d238650ed58ec7c8200662c50432d00724b322f82dd8f6c71cb978ba0b969c8f1127727bbb53242c39d8ce97e48c394efb2e42b850e4d5c8
TLSH
T15E713C35E202D4A9D7B013317081236DF071A9C8FA6BDECD3E7358B79504F29721D916
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a795.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a795.TMP
Size 3KB
SHA256 6bab1ede0dd98554d8832f9e1bf2fbf00de869d3d680fdea088c99187947ce26
MD5 bff3c920aa7cfe34d5305dfdc6c9c29c
SHA1 43057f1a1ba2e7d7d97133d020c32f68f02d8d98
SHA512 8480cf64557e2513cbe7403204737dbeae83c8735d7bad0ed398fa8a5f270d85ee3611f1716d004d3ae2dbe7fd46dcd15f35fc4151d43267d7d80e738fd4dbba
TLSH
T17F713C35E602D4A9D3B013317081236DF071A9C8FA6BDECD3E7358B78500F29721D926
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c59524f5f49b6d93c5dc3ea4a7e020732f9445a76fed510d95d898b151f4189f
MD5 6b9de2cabcee939ba9d6a3e42ecec65a
SHA1 d2afbb4929ba97c1aa4183219f475b6b06446c3c
SHA512 324d47fc51098a9f1dda0394961affc11ff3f17b1f8d7b0982616b52879678d5407f16d7e6ac95d19a0b52e4bf63552f3ce06015b5ea0718a0ce87a73702f042
TLSH
T13421DFF6C7E0866EC91152F05A24AE1BCE1D0516431C7C59C8E4FF6B93E3071D00259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 de5a9c18966b2f2c21cf9bd3966c285d9b4858dff064fdd983fd64a0e78b7046
MD5 cbdbf1f5b7a48c8ac04afd306c2991f1
SHA1 811fd7ee10b7bfc225dcca41648ad83ee7670314
SHA512 6f6abce482649398a876eed4f0bec149df554cbe06dfa8ed956c12fe7e5c321a6f722e627c2d5fa7ae9850c5d2bcd7cba4308f9997e11b96b65887f954a23bc7
SSDEEP 192:sxZuFRByM/jK1Ml8MkzM/f7sGzFVjiIdpdnHW6+WNGYvrRMfF6IgrJ:sxZuFvMzM/f7sGzjL1HbGIow9
TLSH
T1BC42F8116A346977CCCBD209FA55BF53D6F55473A2901E88A9FCDA1C04E6AEC2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6e01d53502f46bf8a851ca85c858ba666b4a56c229e5f788b00667de6732c29b
MD5 9173875f0ec2ffbdda210d1b9760e89a
SHA1 513d87766ad50ec171652f2806fb477a5a021403
SHA512 ad373be007d5f51de5fe2ad67d928a4d6658ce980faa46c33f0f6fb6381943997c45051492985e33f41e40a3fb24002c9f3a252e5f880071fdab58b4fb866c8b
SSDEEP 192:sxZuFRByM/jK1Ml8UQTkzM/f7sbcFVjiIdpHnHW6+WNGYv0RrIF6Ig58J:sxZuFvq4zM/f7sbcjLHHbGRswy
TLSH
T1B852F811AA345977CCDBD20DF945BF53D6F55473A2900E88A9FCDA1C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c4b644337a1b2a16bf9f5112e948e4c73e79c24686413ff51662f649b9af5404
MD5 2a5164f3b7b99128155d1d855f34cd0b
SHA1 32b611dad9fed07c22e0803f3f72136b01cbea38
SHA512 d60a5f93b2d5c69752bfbf41317a22d23688a994af568d21ac4014104392e95e4b15fc4c92e3be031fc0b172f0a9bef3582b57f9bf2880af01184c9c131f15f8
SSDEEP 768:WYseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pporoIG:WYseJ3xWvhfynu1jaVcL88pTl
TLSH
T1ABD20B2B280CCB7E4F844E6DEC266F966EE801CB67944D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ab46abc3e8fc57887e77c00a8dfbf9e68ded94e375afb7c69bedcb31a51e6d4e
MD5 c76891ca64cfb39c0735eb44a987b7fd
SHA1 3117965a9e2ae44b751efbaf1600bd2db6526f8d
SHA512 410c3ae9eb4b1f89db988820de8c74fb73b41c38a6da7d919039a62b19b61babf04288813efe683c84f30b2fd68306f8fdb8fc4665206083942ab1cd28aab696
SSDEEP 48:KYHIhKggkXyZqIvK7i4Pyd9I5Kec0BnWFBXxdXz:KYH+Kggm6qUK7iqW9yKec1z
TLSH
T1C9912712363F02023CBD2558B2A995778F4135A37468A86FBFB804754D6BD112EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3725b80a-4da2-48ba-a804-42abcfcaec65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3725b80a-4da2-48ba-a804-42abcfcaec65.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bd05e38f04801fb3ad13e92b976eb387f709dc0240fea7bd193d2426e30e7c65
MD5 332e17c816acf2d7d4702716ab3a6ec1
SHA1 cf8ea783f16d9e4a3102cf4d0b08a57f9beea667
SHA512 17a128299969dbf36c1f6fc4ad90b6ddecb18dc1ebe8826b6a9140275d8241df35ceb53d13cda2ae914b35b646e9e5eb3c4b95ecd0f7cbc53d63bff820527bd6
SSDEEP 384:g5iFiZcIDzsN78TUNTUlIl9/AP7MG6Mxd9tq/UMC:ZFQH+wgcPaG/tAUMC
TLSH
T11F824C735CA4C97BADF6EA85F58932138EF48077D6C4AAA4F7DDAF1C009619C0306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3950e6f893915609221df936ffbc83e9bb0699445072b88ecec69cefcb116c3b
MD5 4ee08da30447c82408bd56641a41aaae
SHA1 38967442606ff302f3f71b9a07f91c4c18dfa099
SHA512 75f77bf4fca97b5b052514c3b6158609d9e184e2b64a40fc45e1371fe96fcb686f98456b1012a92d938d4e5b9dc9d1e562f794f4446474cf73861d6edfb40100
SSDEEP 192:lON46vMtPQmiUy6/ThTRV+FdLJ67847MOU/u:lON46UtRVTad9IbU/u
TLSH
T192020B35AC785CBBAAB3AE49F48A27175FE4217F95D02B54EBE92F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 4c36506631b7277df9803afdd34d4a06a94369c49f9ac25a17e22bac2e38d4e7
MD5 e1efba73a7ce0a64fe538700ae391008
SHA1 d4c96960db75eebbac884131222672c1d510d63e
SHA512 47a077372e160250bc78717be2682d0c4c7196f4630d8c8499b3b94542b95e07d2fcd42e31636be7550ddf13872f3af597a0c6c080bccb6b69f87e4d7df18bdf
SSDEEP 192:u0m+xasuheOwQxMGsNZ9/QjHyM74hKQmiU1WLj4MTRV+FdLJ65rSfyO8z10qKMgN:WZcIhsNZ9/AP7MG6Mxd9tqPUMC
TLSH
T14C625D729C745C7B69F7F185F08A36134EF4D037A6C42BA4A6ED7F1D00DA6681306D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 255f0be65b45a2deaea0644042e72c17b571e515980d0b45320c7f26ca5efcc4
MD5 392a193f3df402cc946a9fa641ec0ce8
SHA1 bda5c0a0d883b265899880292fb9a03713773ab4
SHA512 74873d4498e2159345102b6c08756c125f42e2b83fdb780a1d32efb973e2b76187cd3e3c17fb0b8e170641fe8e2534f20be641af179580afdc87ca6e35868200
SSDEEP 192:uBm+xasuheOwQxMGsNZi/QjHyM74hKQmiU1WLj4MTRV+FdLJ65rSfyO8z10qKMgN:zZcIhsNZi/AP7MG6Mxd9tqPUMC
TLSH
T1BF625D729C745C7B69F7F185F08A36134EF4D037A6C42B94A6ED7F1D00DA6681306D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 68bd01af90aff5ce92b2c804f2b256082de2ddc12c32ba54e91fbe5a16a7908b
MD5 25b5bfebab8873335f08f606d89fe420
SHA1 86099523ba0e370cde652b0603fe9b575842ebdc
SHA512 abb9add0f3131971291375c508fd59b37ec7def424ce0a0b85158c5930300913eb6f6bba7f2d14ce73a9d6f52e78e67a7d8115a867029497899b1d86a56ad703
SSDEEP 192:6ONE6vMHPQmiUy7/chTRV+FdLJ65rSfyR80I0qKU/u:6ONE6UHR6cad9tqmUU/u
TLSH
T193120932ACA45C6BADA3F585F0CA32175EF0916B9AC47BA4F6DD3F1C01DA65C1306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a702766-10fa-4869-b39a-c7574ad0f531.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0a702766-10fa-4869-b39a-c7574ad0f531.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3d9a2a5920d8a168877e1b1fe77813a402b6a97a8cb9b07dc581d09440d10a8b
MD5 7dbb1af6a9b396735ee10bf8ea98df5c
SHA1 4191e80b06eb1a9e2b3fca98e8fee5d3f88e9102
SHA512 4950430b26c5b26a0063ad93999f9e923e85d9660f1dff88db676c5ab02b95909452710ccbbe92ffcca991d35234e7683bd89aadf81d160c0f428dc1293a5a25
TLSH
T14F41E65CB6E95148B3B3BE5AAFF6686E487BBD772E46C15D00110D4F0623B00D9A2B37
MD5 SHA1 SHA512 TLSH

Submit Download