7aaafd6c8dc73094e5660bbc1389dcd794027ed16cfc1be16315d9eeda886bab

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 951B
Sample260803-pgcfjshc82
SHA256 7aaafd6c8dc73094e5660bbc1389dcd794027ed16cfc1be16315d9eeda886bab
MD5 744a9c62b9dab7952b1d522e435fb24f
SHA1 26c50e020f67a2cc86024096b2d5b7036e9add37
SHA512 8f88b77d08e5ce560afc2aa70eb6e78d49bcee250e938556b35fb55db6a44b966402cef0d24c68e45b2c64fb5691717c538f6bd86be3a3b721a39e8d0e05bd52
TLSH
T1A411104628D1AD080230458574F1D41ADFB2A6379B49EE2038DC65AB4FF478ACC8FC64
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4664	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302330762685071"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F99744B6-1403-4D50-A053-A2B4EB65C346}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 988	2252	msedge.exe	85
PID 2252 wrote to memory of 4664	2252	msedge.exe	86
PID 2252 wrote to memory of 1808	2252	msedge.exe	87
PID 2252 wrote to memory of 1808	2252	msedge.exe	87
PID 2252 wrote to memory of 1808	2252	msedge.exe	87
PID 2252 wrote to memory of 1384	2252	msedge.exe	89
PID 2252 wrote to memory of 1384	2252	msedge.exe	89
PID 2252 wrote to memory of 4344	2252	msedge.exe	90
PID 2252 wrote to memory of 5068	2252	msedge.exe	91
PID 2252 wrote to memory of 4344	2252	msedge.exe	90
PID 2252 wrote to memory of 4344	2252	msedge.exe	90
PID 2252 wrote to memory of 5068	2252	msedge.exe	91
PID 2252 wrote to memory of 5068	2252	msedge.exe	91
PID 2252 wrote to memory of 1236	2252	msedge.exe	92
PID 2252 wrote to memory of 3452	2252	msedge.exe	93
PID 2252 wrote to memory of 1236	2252	msedge.exe	92
PID 2252 wrote to memory of 1236	2252	msedge.exe	92
PID 2252 wrote to memory of 3452	2252	msedge.exe	93
PID 2252 wrote to memory of 3452	2252	msedge.exe	93
PID 2252 wrote to memory of 3136	2252	msedge.exe	98
PID 2252 wrote to memory of 3136	2252	msedge.exe	98
PID 2252 wrote to memory of 4668	2252	msedge.exe	99
PID 2252 wrote to memory of 4668	2252	msedge.exe	99
PID 2252 wrote to memory of 3376	2252	msedge.exe	101
PID 2252 wrote to memory of 3304	2252	msedge.exe	113
PID 2252 wrote to memory of 4688	2252	msedge.exe	114
PID 2252 wrote to memory of 4660	2252	msedge.exe	115
PID 2252 wrote to memory of 3592	2252	msedge.exe	120
PID 2252 wrote to memory of 3592	2252	msedge.exe	120
PID 2252 wrote to memory of 3480	2252	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa9c43c188,0x7ffa9c43c194,0x7ffa9c43c1a0
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,12951065815626101104,7525558234125707345,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,10328893256174810668,1322290403659159343,262144 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,6201411308566494797,12735757288382989724,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,13045493407444467181,13328240640817985553,2097152 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,8770746928737690187,17319640321732452492,2097152 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,3394675614486561597,6577988501570360909,2097152 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,12582696479041982812,13314313154896673134,2097152 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,9245332686112994283,15343894532605137068,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,14159619275002863549,7165318268938597018,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,14599172947083662796,3435537882512302284,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,14599172947083662796,3435537882512302284,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,854286398763949017,12189897233941759375,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,13373213668492539998,15053538089953342083,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,10406768302253633784,14951821276020453934,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,17564777371480956293,9174665179395019848,524288 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5808,i,5309446086474547766,2905272979253239143,262144 --field-trial-handle=2236,i,16535930918465244257,11852646711190080485,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3480

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 64cf7adf13e875b415330ac3657ce5672efbf3fe1e27d486548e17589aa3a1f4
MD5 53ba21c908061701ed89d58977fd5431
SHA1 22c15a7c711919b311779b49362665f68b242b4c
SHA512 21913acc2e29a5c12b144cefab51d67eeae1375155e130ca8822891a4e7242d8a5ba5b53050c45771e39f1a55d230820ad8d169ca80cd1a13e712d95b4bd743d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P75:fwUQC5VwBIiElEd2K57P75
TLSH
T1DAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dd7c37d5e00eab0744f31c31862baf13c15870467ceddb3f54e0c217d7e21e09
MD5 c6fb7e7ce603a3a247305e2c1f4fb5c7
SHA1 f7001a7934fbbf27f726749f57057ff97c829c94
SHA512 a186d84c41e25140ccd36ec6ff7aa042356798e3c393398977a93a4ecc2e0ea703a0fa387d947f5fea06d1e0725ae3e06ab7f9d867996b415238bcc872304952
TLSH
T1EC61291A83696053DB9E1631C0DD0B023572B5FD595BBF2A0980B07F6537BA1D7AD04C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cd38644-4773-4a58-94b2-8ad384b94be3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1cd38644-4773-4a58-94b2-8ad384b94be3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 b4273cb16e60002a890289cc8ca1a77cddc8ba08e64786742b5d6d842fb8cd70
MD5 a220e58868b10ceb020c0672e6be11e3
SHA1 654458f855a5f3f8b577636a3cd7b6fd0f7673eb
SHA512 5e7de0a5d753d826503343073a1766c6e40820aba88cbf6210688aebf7faef5160ab42268a4b7e7b174333b264f1bd75c114cd96d1615fb12679e421f8c785b1
TLSH
T1EF117DF3C7D585AE890516F05A24AE1BCE2D0506421C7C5985D4FF2B93E3075D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 48d480d07b56f1675a085aa455c3cd534511bfde9fa9b2ffef8c2e58d108b891
MD5 489904e5ec6b959f92faa76dcadb186d
SHA1 f467399c0309075bf0d07e90574ff0d46ac6407b
SHA512 2732c334c3dde451f85ca7482df16b2766a9c187f12de7c30d9ff72e0b86747e4666ab0d60242ee955019f245c679fade02d24df457502b4c2579c5ffb73fa31
SSDEEP 192:sxZzzRayM/jK1Ml8Mk3/f+soIgIdpdtHW6+WNGYwKPcXIgrJ:sxZzzkM3/f+soIhLHbGT9
TLSH
T1DF42F8016A34A97BCCDFD209FA51BF93D6F5447292940E48A9FCDA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0fb4c4c4e5c21698a7aa3fccc32a300d6c1235e0527f931922a89b8ab1c7501c
MD5 5179dd5d6f2c8122e7f03faacc6e9a7b
SHA1 8f7aaf95856311da157391e6e11c6a88e0dbbb77
SHA512 efe2c1510bb55994350c4bd8f987400303da05d313b84beec65d16b611f9e2c227d1a4c4cde8690cadfe332de5769e99f7014f475cc3836eabc126245b5073f9
SSDEEP 192:sxZzzRayM/jK1Ml8UQGk3/f+s1ogIdpHtHW6+WNGYwNkDXIg5YJ:sxZzzkqt3/f+s1ohNHbG8C
TLSH
T10E52F7056A34AD77CCDBD209FA51BF93D6F5447292900E48AAFCDA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b1747215b465b383cb1320568a3d3772ac096a8d24ab5f99a84aa5825ee690e2
MD5 9e97d631032c95d9f13b56b81028e69c
SHA1 20ae42a6a02ed2f79634466c70eda785045667c8
SHA512 29632097f8f30435b50e42e5b9494d055aa33663d43ee3d9edaa56838e90c417c903eca9bd97190253cde670dd5f7bead77352c2fb7c8e5234002f7961445ff0
SSDEEP 768:G/4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dSrohXic/aY:G/4jeXmWvmKLEu1jacPLZQdJHX
TLSH
T118D20A3B244CCF7E4F844E5CEC26AE976ED802CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c4a859582efd1c4ca0275afc9e1b3cf0e7ecd052fadb4e0ace82c686a17de606
MD5 7b8327b929aab4f3d21a57d15a6f7fcf
SHA1 a68ea565749730ae2b70c7a3711220c1e650c227
SHA512 e6f0e7a244ba1cf0145444dbd91f9e25241d4b2188ff0f23983edfd54858c7203524e935eba55841f0c8b230e61e8422933ede332b3aa9efd356d5bf22af938d
SSDEEP 24:KdWf5qra4dsYU4M4+fIjuUKiXhaYU1E2ESmKMb8WJyXYafNWHacdwMI44k+bIjyh:K4TINKEkY7yFTI1KQE4oZIFKyoAnyVz
TLSH
T19C914F8670BF02153D7E381DA29296668B4277A33419E42F7BA900B30E67E250DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595922.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595922.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a82fbb163ac9a74af56f2b3cd50fc865d7bd26b9d27ee16f31ee21fd06fc66de
MD5 af29e7033e08e1dd6c0b1d87da11314c
SHA1 b1eae6fb24b7c4bac0a9f628e5b02775e512839d
SHA512 ef750e7015193bc8b924427282cc4fd6f4aecaa7fd72b401000d6e400864413ccd1a969185f11bacfbcfc20e38bba9b37e164317ff331352473caace6e9a3b4b
SSDEEP 384:2ZcIhsNEzAbkwGlduf+uOdKc+28F06HlytEDq1BW3hI:khQqlgjOAcl60oy6DqvW3hI
TLSH
T1B8928D3159785C3749E6A541F48B39138FF85067A6D4AFD8E1EDBF2C00CA6AD230F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7eb0ac9b585157335ab1f7f2495874cbf1e21d34887b42002f51eeab7b8a3163
MD5 45dfde22efb0f8669deff18ccac18f4d
SHA1 c771f4b9232ad01155082fe7a03fc08cd54f1391
SHA512 272b3174b4d841ad8d99ba1bf08464ec50eb67b41d303b934d68c39b0cb95bee59fc68832dab264a08a2075333905b6af2b0d4ba4e3a0c1e69327a799553aa3f
SSDEEP 384:eZcIhsNEcAbkwGlduf+uOdKc+28F06HlytEDq1BW3hI:chvqlgjOAcl60oy6DqvW3hI
TLSH
T1B0928D3159785C3749E7A541F48B35138FF85067A6D4AFD8A1EDBF2D00CA6AD230F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 38f616c97216c689b52e488bddfd9c8fe7b2dacb61b06000c41a7e42b87feb80
MD5 7e5e626da29840f06bee89bfa0ffdb6f
SHA1 3c66ccfbc86919994f9e29617944a31777b2f937
SHA512 2b2d48c5d30b9f899db5b4b9e40234507dae4fd37ac97c2e31b51661d170196ab3466d56e5167a417c70a046e226bae1b4070e4caa4a36746cbc16b3329d0e3f
SSDEEP 384:LiFiZcIIzsNM8TUNTUlIlcAbkwGlduf+uOdKc+2IF06HlytEDq1BW3hI:mFQ0dwgpqlgjOAcl20oy6DqvW3hI
TLSH
T113A26D3249A4983B9DFAAA45F48A35138FF95067D5D5FBD4E3DDAF1C00861AC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 db13b61a1aa1f9c45d819f3e19b97d91badbaa83ed8b6fe949630e4a75dd411b
MD5 2e85af9633530778a75613eeda036b88
SHA1 f357f023dd8f81bd0cd348e85471b04723eb3407
SHA512 15d6349a8cbab2318e97432b44153bcdeb5566f89c2dae90e50979658f0aba564228a21160facf8f153d086963afc0040125cce0ec0c4d516fa5a51949407031
SSDEEP 192:EONo6hZ0QmiUy2Jmpc/+jVQO1L75wOZUx1WU6:EONo6oFUpu+uOdC2wWU6
TLSH
T1E002E93568686C778EF2AE45F48737239FE5117BE9916F84D6E85B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 151a22b287faa043e765f889e21e505920532d2800a0af546226d0b7c4997cea
MD5 82358889e4a32c225f4f9361cb99a25a
SHA1 5d1f15bfa04eb0992719856869c29a6d29d655ec
SHA512 23ce9e578a6edb7dfae9a10fbc03f7ec8d3fd3d50adc7ea565fe54a2e5e70ae1d53977b4cd5e4204a5d6c65ea637e428c9e681d7200b66661ac397df86968c54
SSDEEP 192:nONd6hZKQmiUy2Mmqc/+jVQO1LKc+2BE5cOq8q+U6:nONd66Flqu+uOdKc+2B90U6
TLSH
T14012F9366868AC374DE2A641F48736538EE55167EA86BFC4D5DC3F1C00DBAAC230F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 508e6efeb32ff83f2a4f7869a58a2e6b405f66f59acb3c8e69fecfd244ad5639
MD5 a3e2d87a556052ed21d78d3cd46600ab
SHA1 e409f739e0d0a174bdf4c7aae49adb3bcf1b6f2c
SHA512 389cc075d3e21801f855494fb39819b6d06ff232b96e59dda56de59d958627cc2e6cd2bc71ffc19630b49babab5229a0e0e3e1f9058ea25201ac5b891e1d969d
TLSH
T1C1413D5C6AE91148B3B76F5AABF2A96D447FBC372E06C09E10110E4F0622B00C862B33
MD5 SHA1 SHA512 TLSH

Submit Download