79380eaf4fe95d0146e7e2471809be19d28599e7c3a378c35c82142346b5316b

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 14KB
Sample260804-pg778aem4y
SHA256 79380eaf4fe95d0146e7e2471809be19d28599e7c3a378c35c82142346b5316b
MD5 d431c5f53a08f33921d45314e0c8bdea
SHA1 553ac903822b938c5e36f57a6071bdc273657f90
SHA512 7e71d0e6b1010c0c3c053fc26a19df7f6ae01be0f7f343d832c0535bad883c7ca89710c5e04ee6a38ca2dab116db5d6e1557b69aecf1ae60ad7ceb6ed73df019
SSDEEP 192:Fv2MCR+SvH7kjyvm07lN72K4TY/QppEDmle6AESaEhcCKve5Urjb1kgM:8v007lp4IQneOe6Hq
TLSH
T1EB62D83978D1012B01B3C2D95A206B9AFFA68207CB5B4648B2ED2BD70FF7D45CC67658
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3056	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303195956449768"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{C88B7D9F-AE97-4C14-A4F5-F445ED1900BD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4772	msedge.exe
4772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 788 wrote to memory of 2716	788	msedge.exe	84
PID 788 wrote to memory of 3056	788	msedge.exe	85
PID 788 wrote to memory of 4128	788	msedge.exe	86
PID 788 wrote to memory of 4128	788	msedge.exe	86
PID 788 wrote to memory of 4128	788	msedge.exe	86
PID 788 wrote to memory of 2628	788	msedge.exe	87
PID 788 wrote to memory of 2628	788	msedge.exe	87
PID 788 wrote to memory of 4028	788	msedge.exe	90
PID 788 wrote to memory of 4028	788	msedge.exe	90
PID 788 wrote to memory of 4028	788	msedge.exe	90
PID 788 wrote to memory of 548	788	msedge.exe	89
PID 788 wrote to memory of 548	788	msedge.exe	89
PID 788 wrote to memory of 548	788	msedge.exe	89
PID 788 wrote to memory of 2296	788	msedge.exe	91
PID 788 wrote to memory of 2296	788	msedge.exe	91
PID 788 wrote to memory of 2296	788	msedge.exe	91
PID 788 wrote to memory of 3928	788	msedge.exe	92
PID 788 wrote to memory of 3928	788	msedge.exe	92
PID 788 wrote to memory of 3928	788	msedge.exe	92
PID 788 wrote to memory of 3716	788	msedge.exe	98
PID 788 wrote to memory of 3716	788	msedge.exe	98
PID 788 wrote to memory of 2420	788	msedge.exe	99
PID 788 wrote to memory of 2420	788	msedge.exe	99
PID 788 wrote to memory of 5068	788	msedge.exe	101
PID 788 wrote to memory of 456	788	msedge.exe	112
PID 788 wrote to memory of 2760	788	msedge.exe	113
PID 788 wrote to memory of 4316	788	msedge.exe	114
PID 788 wrote to memory of 2312	788	msedge.exe	117
PID 788 wrote to memory of 2312	788	msedge.exe	117
PID 788 wrote to memory of 5552	788	msedge.exe	122
PID 788 wrote to memory of 5552	788	msedge.exe	122
PID 788 wrote to memory of 4772	788	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaf62ec188,0x7ffaf62ec194,0x7ffaf62ec1a0
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,5926859664431283665,16686363235831313567,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17366032215947339701,15015948239435603104,262144 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,15383376349713483470,3894061098835233454,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,7447871579710082275,16130098843439006644,2097152 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,13392737691708489558,7233539892895694148,2097152 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,16633853506940602690,3635994271779667673,2097152 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,14419231113519905245,14446366097841627485,2097152 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,14256133754163499825,16462469950410244985,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,9949994901307216596,38835421075685953,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,3671433181277846350,12174981790280972307,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,3671433181277846350,12174981790280972307,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,12039895719476688815,598449025597165530,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,8840644940615442967,13245679876562872715,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,401439523077307367,2582444007931336366,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,11703814657193866620,7196408863260843878,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,18225371018298858580,2250965617127859558,524288 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5940,i,8073382131722955230,9467604857642976136,262144 --field-trial-handle=2268,i,8066396862099165167,6711740698793100969,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4772

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

8b5371e2-5582-4080-a811-fc526c49cdfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b5371e2-5582-4080-a811-fc526c49cdfe.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2033579eb8d12af2003740fc204cfe44b6a8b152b6701a9adad8a7cc90ca8ab8
MD5 d698ca5d1f46989c6706961b18a499cb
SHA1 924f1b9b2ef0383af6ea315628fc625531c716c7
SHA512 1556c1647946a4177e3576f75c62a4d34ab310ae8a54224e203a9425cf2582a81da7a934267280848a1ff024e3c1995f76715cb7250c254bf665c6de6a7a5235
TLSH
T1BE61815D224F3D6EE39AE6F3FBD2274770318495092F5EC31080A8BEA52932CCA71C18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6dc49522f23bc7eac3587f154c2036696be84e335646ee43944e9fb2d474cad5
MD5 d955df99486c8fe20b256e1b40b0ddc7
SHA1 6c4fe0f8aa14a723e28fff100493391f320e2f3d
SHA512 5c9a8a254a23303dc068ab8700e76eae3fe7beea1f6327ca649731330c454bca283e4c0640d2b8e70ca8a72b7f5912c61adfac0ede0fbc38f6dba31991e8f000
TLSH
T1C041AEF7C3D886BE880156F49B246E2BCD1D055A422C3C5689E4EF5F63F2470E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5ff3d8dc49dddb784bf572202449a7ad3b3c9adb4612487a098f9c3ff543a51c
MD5 112a9d266ad216be28c4f02aff23f7d9
SHA1 56c2a57a494de563297548014b28fece586d4adf
SHA512 ab9f4220a47030729e2a73b69e92589b877b4215cb80df20a69b2fe97c873264db3562dc323068067dc00670bcd719ab1cca4fcf662b5d7cd98d57adec42d4e7
SSDEEP 192:sxZ6RJkk/fns5xwuyQIdpdVHW6+WNGY4wrtiIgrJ:sxZ6wk/fns5xwFxDHbGX9
TLSH
T1D722B8516E38A97B8CCBE20DBA15BF13D6FA5032A1D15E58B6FC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 826b3b3d1fcaccc9afd6169125dabce9131e68236f915239d0459d2a2045b608
MD5 aeebe2f9bbcd6ceb2188bc9c8703f5fb
SHA1 0d152f7ca0abfce6f304900625448fe5af916db8
SHA512 6067abdecb6c617ee8980ee7cf7862ef00e63ad4b978f8b05bf19f7276c0620a513b617f89122bfed25b99349bd6149dab67ac3fef2c892962a07e7e06022f6c
SSDEEP 192:sxZ6RJkk/fnscxw2yQIdpdVHW6+WNGY4X/tiIg5UJ:sxZ6wk/fnscxwtxDHbG6W
TLSH
T11D22C8516E38A9779CCBE20DBA15BF13E6FA5032A1911E58B6FCD61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 01b8edaba4ce46a406fd2d50b6e09f7089f8ac0b33da04c7579f491252b93dbe
MD5 b81c16bbb4a920f6be5db3f4c7a2f327
SHA1 351143e9453fb5c3f18ae36f9ad16b3ef8f57c51
SHA512 d85154348937d9578869a4e99b7cb96da601cfbd9c257fb7d5d67fdfb1977e36d28aa038789fa9001d997fff0ae413db6e00ddc8a29a7f7cb658d11d73ade66b
SSDEEP 192:sxZ6RJkk/fnscxwuyQIdpdVHW6+WNGY4wrtiIg5+J:sxZ6wk/fnscxwFxDHbGXc
TLSH
T1BE22C8516E38A9778CCBD21DBA15BF13D6FA5032A1D05E58B6FC961C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4fc2968995bb4a0036f60fd37a36ef22a042168300ce01eda0ab9a56ae6d4fbb
MD5 b44fda856325239729e3948e962f3a2c
SHA1 c69d5eff1df4e5b327428d4b5076e50497173ba5
SHA512 fe1b27547e45e8b9884aefb636bb1c490833588b0616abe5c6cd01c39366c25b01caff1544a7301f85f39f70cc3a0b6e0547ad28a3eaafd30f86a4f12adc7a5c
SSDEEP 768:0vqirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTnro08UnT:0vqirTNWvx7jru1ja5ALocT0fUT
TLSH
T100C2EA3B640CCB7E4FC01A9DDC5A6F963EA802CB5B949D4087FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e4ab9b801496d11840fe03244ad9b6c279a0e6b98a2738734d1b28a5d70935ad
MD5 8afcb23321720dd2c39290b261f593b1
SHA1 406696db7fbed3335cb884d5ee987bcf86774528
SHA512 df7c84bff64f9fe39dd7f7a48c5def6c28d3efa168c115501f897732289140053bf068445bcf99c5d6c9817b68c8c00bd88736a73662d0c0d587a0c9cd14a31c
SSDEEP 24:KdPfWdUaRdFVF4Rt+4IjxFKiiha/F1E3VSm/M681+yXYRfcHuaLdzfn43b++Ij7f:KkMIvKRWcDyZOIfK3qwfAIXK92cTyK
TLSH
T13891920271BF16027D3E291C9151D7A74B47F1E33454A42FBBA851AA0EAAE240DFCDEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594cce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594cce.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 fb2d6a85caf63aedb557ca461b72824a75e15e24d710e09306730decad403738
MD5 2fda4c188695740c80e9dc6ccc3fff8e
SHA1 b397150e210a13719b594cd02c53c7d935a25d5b
SHA512 d68941c6119df3b237a59c9805cf16965a566b47078cfe9fd16f5917e1b20fd0df5bae2c4d54f4c21836138805098bdefbea9d258a0d32ee8c43c66e5815966b
SSDEEP 384:UZcIhsNzGz+izdCkMrSEUBeRs9JKgqijUry7:ShhBDEUTjKgqmUm7
TLSH
T15C929D315878297AAEE7B545F48B36174FF89027E7C56FA0E0ED7B0C40DA598230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4fddb31ba96ea68fda9dc951b8b5c546cc82686b89dafec55f98943d691377de
MD5 50bc79f6d39c53c866afc373e7195c6b
SHA1 2df71f2590e4a8a048676da5c711e461d1cba1e8
SHA512 49c56c6e3c4e5e37c3b53b50766ff14007330b0e834fff60154bf6308872a0f3ba9ab7383fd6036afa172b2f1595c33787a3ece009aad882874bbf6a30e4c337
SSDEEP 384:LZcIhsNzBz+izdCkMrSEUBeRs9JKgqijUry7:ThGBDEUTjKgqmUm7
TLSH
T164929D315878297AAEEBB545F48736174FF49027E7C56FA0E0EC7B0C40DA598130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 df810a95d21e0d1c6e3a8f6054bb709e527fce7e882db22b4d815642ecaf21e7
MD5 c01b3ac3983e9a1837237bb9083ba9d1
SHA1 a5fd13d2fb4e297b216eb5daed570ec540ba4071
SHA512 84927f7fbf5c69e979dc25dc22ac6e6b93510f051f64e772ddb03fc912c0cc83be1936348ae713b1c8b3d552efd2bcab0da8dcd619210420fa18cfee0bc05af2
SSDEEP 384:kiFiZcIMzsNN8TUNTUlIlBz+izdCkMrSJUBeRs9JKgqijUry7:/FQwYwg7BDJUTjKgqmUm7
TLSH
T185A27D324868957EEEBBAA45F58A32174FF59067D7C5BFA0F2DC6A0C409B19C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4c0c52f5de75f78587cc5cfbbba49837c892a1d404c9b7b91817c7a5392620ae
MD5 d8d3ff5e544cd9c1c0a7b2ae16388a52
SHA1 18a3bc2d8f9917abf476fbf0d3e9e4714db94eb7
SHA512 d0630fcb9ccacbb34834573c1faa0944c77b1fd3db20c9748b2ed89dfb931b1e81ca08f550362392b73976a49354e8429cbdb082f7aa77f8768a6569accdd2ba
SSDEEP 96:ZqONkoQsjpfmUTmDK5ih/cIPURHl8h4otop5P85D7BhPwivh50xy0SFYKcAxMbsP:gONo6kDfQmiUyGFZ903B4QiSW2+U6
TLSH
T1B002E73568783C7B8EB3AE49B58B37275FE5113BEAD52F80D9E81A1C40D725C1707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9e15e54f2437aba34d4a6357eb8db871d17411cdaf685f174bfc4e5aa963f45
MD5 6aa9a52d32aaf9b0cbd4dd42deabc341
SHA1 fd1e53167b563cdc800bbd43683011ddca394afa
SHA512 e684639b06903d9f8783f48ad37bcedd37fa67f1fbced0e950bb555ff6a76fd56bd5e860d00948dc6f6db9413863023882c86784a64f41ddfac4dac8132d1039
SSDEEP 96:yqONkuQsjpfmUTPK5ih/cIPURHl8h4otop5P8W6D7B0Pwivh50xy0SFYKcAxMbsl:JONu6kqQmiUyl8Fe903Br9EhcRYquU6
TLSH
T178121831647C7C2B6EA3A945B48732174FA68227EBC97FD1E4DC261C40DF29C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4da551e635566886bee77b757a73ab6a1c556b81e7f62e76e12e8dfd885c972d
MD5 84038c0a8f33403589a077e0b8c72949
SHA1 e1640a22b08cbf1b23a7db0f54dfc63937e64ec5
SHA512 17ff4731e8421c4ccccc509571cb4ad107864db67d514edfe1d2a6a2e15169ab10edafad4be7af4236afec06aba0f4f17c29ab64d5a7bb9b04997f338a1c0a27
TLSH
T118412759AAFA1148B3B76F1A9BF6A96E487F79372E06D45D00110E4F0723B40DCA1737
MD5 SHA1 SHA512 TLSH

Submit Download