1fde9f093493c5f7bfe9f3b8464fdc6f58f21b52f8f8aeea0e4b8f579d50abf2

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 5KB
Sample260804-pdm3waag83
SHA256 1fde9f093493c5f7bfe9f3b8464fdc6f58f21b52f8f8aeea0e4b8f579d50abf2
MD5 9113388f581262ac88417fb4f3f5f1c4
SHA1 8ab8202d88c0e6ca6fbf4340f517d4a733750333
SHA512 3626d1ccf0a43d4628324316a86b2c1bf835cbc1415e9eab634f873b76e31c44b0f033358cbd66649148336839cb75443333999ff316c8121258a10d75de8d2b
SSDEEP 48:vr3oM9Hlo+u85ij+KoM+SxDNIP//OVfYDMJ8oOqt5ncz7o8VsCf8a4wH8inZ0Z4V:vr3NHqHHJK2XO6uP/qwPZ0Cy3h7C3iU
TLSH
T185C1533261F0102E92D382446F25733A2BABE297B64E4114BAAC47959FD3E83CD7B51D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1080	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303194738782620"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{0DC44C69-BF90-470C-8DB8-57F497F3D669}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4440 wrote to memory of 3056	4440	msedge.exe	87
PID 4440 wrote to memory of 1080	4440	msedge.exe	88
PID 4440 wrote to memory of 2844	4440	msedge.exe	89
PID 4440 wrote to memory of 2844	4440	msedge.exe	89
PID 4440 wrote to memory of 2844	4440	msedge.exe	89
PID 4440 wrote to memory of 4552	4440	msedge.exe	90
PID 4440 wrote to memory of 4552	4440	msedge.exe	90
PID 4440 wrote to memory of 4380	4440	msedge.exe	92
PID 4440 wrote to memory of 3332	4440	msedge.exe	91
PID 4440 wrote to memory of 4380	4440	msedge.exe	92
PID 4440 wrote to memory of 4380	4440	msedge.exe	92
PID 4440 wrote to memory of 3332	4440	msedge.exe	91
PID 4440 wrote to memory of 3332	4440	msedge.exe	91
PID 4440 wrote to memory of 2628	4440	msedge.exe	94
PID 4440 wrote to memory of 176	4440	msedge.exe	95
PID 4440 wrote to memory of 2628	4440	msedge.exe	94
PID 4440 wrote to memory of 2628	4440	msedge.exe	94
PID 4440 wrote to memory of 176	4440	msedge.exe	95
PID 4440 wrote to memory of 176	4440	msedge.exe	95
PID 4440 wrote to memory of 4192	4440	msedge.exe	96
PID 4440 wrote to memory of 4192	4440	msedge.exe	96
PID 4440 wrote to memory of 4192	4440	msedge.exe	96
PID 4440 wrote to memory of 1272	4440	msedge.exe	100
PID 4440 wrote to memory of 2940	4440	msedge.exe	101
PID 4440 wrote to memory of 1272	4440	msedge.exe	100
PID 4440 wrote to memory of 2940	4440	msedge.exe	101
PID 4440 wrote to memory of 4176	4440	msedge.exe	103
PID 4440 wrote to memory of 3212	4440	msedge.exe	111
PID 4440 wrote to memory of 4952	4440	msedge.exe	112
PID 4440 wrote to memory of 5004	4440	msedge.exe	113
PID 4440 wrote to memory of 5076	4440	msedge.exe	121
PID 4440 wrote to memory of 5076	4440	msedge.exe	121
PID 4440 wrote to memory of 2320	4440	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x29c,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,14530400405767172019,5480932802246549369,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,4621018452452217786,15466946374925264883,262144 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,4370178636322270779,7143157400933626507,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3276,i,16127156728856716727,10959054476038106035,2097152 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,1180628479116620512,12290875168190288155,2097152 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,14712506208662983661,5850035166813696367,2097152 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10516175904590080348,6477093832887678550,2097152 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,11211366205631557891,10957471905579376466,2097152 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,12982467074937604249,3821580714415709446,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,17134520361544390771,11202667149555824844,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,2659443144981490660,13212468956845409158,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,2659443144981490660,13212468956845409158,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,5071808193632451323,1368676598513206276,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,2366368525192757856,764995256684029878,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,5851522306825903568,5489856218488266891,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,16516159591238952928,12548611672108224112,524288 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,12512519309564221389,11034716861533667308,262144 --field-trial-handle=2344,i,13735362037157907202,3191936454585441389,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2320

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 87a1ad539223f6d5a5b4e4949664fd859e6d3d8268daac1e9d48f45d7883e33f
MD5 8d1f02b2682cf896692c00fcb993f021
SHA1 235c4ebf53055f0c8716f38e8b203b6f5ea7fa9d
SHA512 6484adff2c28be3b3800593519483a7c69ec6e9268b9e345bb150e55d6358a021a09503e79072c70d9ac609c218ee44238f1a8d2554d0fa8bdcabbbb51e76775
TLSH
T1E161C6750B10C4ECE79035B098D932927872DDEAF4835E4670735EB1FA05F4149EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fa2200400cb4a8b9d290f8d71296ec4139a91ece5fd8ff85bfdaa3ab6f7b16df
MD5 3cde186873dd94218204c7c5018241fc
SHA1 a957824fa60b13d74a39090d43f8648b376ccf6d
SHA512 41578b03bdfd5f71275d297e986bac4ff6b05b1c03d49ccd2171accb33dc7f2ac6a5de81b7200aca851255ad608a560be4ab0b89486e94ee5bb84dce58a629c0
TLSH
T169216EF3C7D5966E890116F05A28EE2BCE1D0606831C7C1689E4FF1B93E3575E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1f94170bceec10249cfc7ea12111dce51b0516cb6120c205e87f078159eb38b4
MD5 a4644f8e185767dd273bbf90840abc2f
SHA1 251b5bde22ee22c32ae8a79f505fd2f3b29fce1d
SHA512 ec8a3bca06d6d441edcf805ab61349a8055eea8b93f524225c3920c7c875cce940fa0143b048338a7ee6746a5854cea857ce2da1a644482439996c5a16fea0fa
SSDEEP 192:sxZXRGkA/fqsJuwVmIdpdBHW6+WNGYvr8UkHIgrJ:sxZXrA/fqsJuwzHbGK29
TLSH
T1F822B8116E38A9778CCBE20EBA15BF53E6FA503195901E58F6FC961C04EA6DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 893ecd0a452db141cc14698ecced373e28d42081612f684c947295688e246038
MD5 022d6a7891951cef0a30461e73ed51f0
SHA1 759151801850ceca066925a22f29334221c73be1
SHA512 a99115ee2a28aa0ec672c213463c7c3fa42b04cf4f3c41f069e7a99868f80ceb3a24c7c471a973e0c83f8cdc395737558baca86df36212c5dfc12a15276782ad
SSDEEP 192:sxZXRGkA/fqsGuwVmIdpdBHW6+WNGYvr8UkHIg54J:sxZXrA/fqsGuwzHbGK2G
TLSH
T15422B8116E38A9778CCBE20EBA15BF53E6FA507191D01E58B6FC961C04EB6CD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d38f238199301c71c70df7ce7aa866a6c92e45e98ab436796830c40fc995ed59
MD5 7b92c3c8ce21b6d9c7189e56a2130ab1
SHA1 5198af08821198d4c5abefd528f4ae1db101fe46
SHA512 5de143138cd1cad4aeba5e24043935d68a390ddec65395dd153f069e130f47553bce4e62dc5271f5583d776c4bc00a0f0b98017ac2f1b169c1372ed7e1599444
SSDEEP 192:sxZXRGkA/fqsGSwVmIdpdBHW6+WNGYvRsUkHIg5aJ:sxZXrA/fqsGSwzHbGK2E
TLSH
T18222C8116E38A9778CCBE20DBA15BF53E6FA507251901E58B6FC961C05EBACD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d4a05bfbae711b1598eab65fd57f49624ab53b4f0241de7f38586438e43a45c6
MD5 595e75cf960c7918d67b5536f88116b5
SHA1 a89596c2c35b4e767e57604c23e5f15ab9dd5a9f
SHA512 54781ad86af4aea34ce02b903feb32c3ff4f07d88861dadd08555d11897a545361782e235ec9a266bc632f14a4240b4f0f57159028afa9a5f1fa6a5012aa7533
SSDEEP 768:/eee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pbAroV:/eee3rxWvhffnu1jatcL88bLV
TLSH
T1E0C2FA3B640CCB7E5F800AADDC5A6F977FA802C767548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ab3a95ffb70b73726afc764c2d746e00f389f65f1eb715189f82e70786846075
MD5 53e1e039116279d88a87c243db22b66a
SHA1 d104d04ad8b19e9794cffa8920a82faca90f0e19
SHA512 1bce1590f04db8f9cc9dad29c29e558a4b45b5c8d723e0b9f906dcbd23a5b4fbbdd62e6abfc7620fdfbd92e441e6e3927b36175fa0befa3d9346be10aae564e1
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09S:KYH+Kggm+ruKAUyyQgKJuH
TLSH
T13891F21A743E02022C3D3D8CB2A596364F4631A37464A8AF7FB844A65D67E114EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4b7b19b-dbc8-4cd8-82e0-8977010b5451.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f4b7b19b-dbc8-4cd8-82e0-8977010b5451.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 0630dcd7e1cc051be8ca49c3c66e0011547f138f53aec1dc21bdff6620559d04
MD5 c59b843e7690eb55f0e4946bd58a6ca0
SHA1 5ed72cfa9005f0d6c9faa06565c53f20b27933a3
SHA512 aa7f8c89bf75a05f15290031d24c37c85cbb9b9cbada5d31704a64ad5cad009026c1d5648b7305254657a999376854b28ae5ba3c45552334442617df7fd9b1fe
SSDEEP 192:uAwm+xasuheOwQxMGsN0RQQV1XKcHM7BGjQmiU14Wu4MTAn+FdLQx6ptFd3Ev8z2:BZcIhsN0RVTs7EVBxkdcxMdU0K1Ss
TLSH
T12A626CB25C745C3BA9B6F546F48A36035EF49127A6C42B90B6EE7F1C01DE6A8031BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 922e81e92f995827cc06f3189f48f095d7da201cbd9bab5f8b1c0c1af07f61a9
MD5 59bb0b8d5c738fcd692e9a7dbe33628d
SHA1 a6c7f0ed1de252a0819926a3db92b3dc572a614b
SHA512 487cd8ff6e1f9f22fe640a5d580250d44a56544d8bced9c666e5a79bfa133a38b95cd521d390a5d717371986cfe7bc2a7dae4b66d4a1adecea55dc5eb56d3c66
SSDEEP 384:kiFiZcI3zsN88TUNTUlIlYVTs7EVBxkdcxMdUyK1Ss:/FQjVwg7KSnUyKQs
TLSH
T1C1824C735C64997FAEBABA46F94A32038EF45067D5C4AAA0F3DD6F1C019A19C030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 45f94745c22d7ad0a3d7211f3ed103eefb55693022d5b1eb5f21a2d4da3375c2
MD5 e2d8e1eb9fca0bde7c2119241124751d
SHA1 bad7094d03e568ef43434b733f59a2243a2b256e
SHA512 31a31d8961c16f19d5158a487e9fb8d4184f717a905d708f367fb066fb17b46ceeb1815d871b07ced91c293813d18575445d065c193638de5e88645a04a89c4f
SSDEEP 192:ugwm+xasuheOwQxMGsN0YQQV1XKcHM7BGjQmiU14Wu4MTAn+FdLQx6ptFd3Ev8z2:NZcIhsN0YVTs7EVBxkdcxMdU0K1Ss
TLSH
T1F0626CB25C745C3AA9A6F546F48A36035EF49027A6C42F90B6EE7B1C01DE6A8030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 80d8c6817fa4e86e0bbae4defe7b7316d8965b133cb134f306bde4dfd34d9ab1
MD5 9614edb62921ccfd4dca586f796f214d
SHA1 caea8c5c3eeebbac365bf9dcc4ea3c8f1ac45c91
SHA512 08b6ee6f1b219aff0c9f99b5e313e8419c0fef994e1e54262ef053523d0db2917279748eb66fd7f421b3635484a0b987f8c35b4e782cb4a93bd51e6bfcf8fa88
SSDEEP 192:lONb6vMtPQmiUymIThTAn+FdLQx6/847UMU/u:lONb6UtRGT7dcxEZU/u
TLSH
T1DB020835AC786C7BEAA3AE46F48A37171FE4116BA5D01B54EAE82F1C00DB65C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 436c135f490614defd0db1a32e7764b7adbbab2ac0ac1ef7600fdb28ce5a2bc4
MD5 5a51889c788737c192170bd2e734f88a
SHA1 a8e4ee2148d75333aa592641f77109df04e5bb14
SHA512 c6b0511156fc357d85956157c531868b6c6024cbed29a3ad9f30f8a6ff3534b77d60d6fa014e943acdebcf3d34a71a7a3f56f1437e84f93591580ba3d077937f
SSDEEP 192:tON16vM0PQmiUy9IDhTAn+FdLQx6ptFd3Ek80IQqwU/u:tON16U0R5D7dcxMdUpKU/u
TLSH
T1D8121B71AC649C279E93B546F08B36175EB0926BDAC46F50B6DD3F1C01DE6AC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 25ed680b64ab0bbbfcbeadea8f54dafb8486acdbf67b9b0bfa8d99aa9b7aa184
MD5 3b07850461a5ad3541c7a0df97c3f83e
SHA1 0c29d5c7f8261e8f5decdbc86daee3a320bd30f9
SHA512 d5a11ea007f8a10ceb52c2e5f5d19fc303ec60ef8f2b7c19a0e1967ced835b4af5ea01012a910d62ba7db4156fb300041bec2cd425a8e05e8d45e3ade983c482
TLSH
T189412D68A6E91148B3B76F5A6BF6A86D887FBC772E56D45E00110D4F0A21B00C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download