17f9016f4a3e4d0088f7be3ce2be83ae32da2a0310247423094e10c5d25f75f7

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260807-pkg57svfqc
SHA256 17f9016f4a3e4d0088f7be3ce2be83ae32da2a0310247423094e10c5d25f75f7
MD5 79092c61f4501228aabc9595e6ad14e5
SHA1 8a9b56c3042ecf9e6ecd42d84e7ec5837c8f341c
SHA512 af8367916daafbf07fc6d0d75a59db00fca151cf4432d257de496d7cc7ea15b15c6aa39a7417961a5851af2ff6219c200cdf7ce0aa8ebd6ce8b41c130b5a3431
TLSH
T11951855758458C2D3333423C6E7DB10CD28AAA7AD168CCA1F6C4736F1EC0FA681671AA
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3988	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305790430695878"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{694A1F0A-6DE0-47AC-8D73-6845C42E9BE7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3264	msedge.exe
3264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4164 wrote to memory of 1016	4164	msedge.exe	84
PID 4164 wrote to memory of 1484	4164	msedge.exe	85
PID 4164 wrote to memory of 3988	4164	msedge.exe	86
PID 4164 wrote to memory of 1484	4164	msedge.exe	85
PID 4164 wrote to memory of 1484	4164	msedge.exe	85
PID 4164 wrote to memory of 4396	4164	msedge.exe	87
PID 4164 wrote to memory of 4396	4164	msedge.exe	87
PID 4164 wrote to memory of 60	4164	msedge.exe	89
PID 4164 wrote to memory of 60	4164	msedge.exe	89
PID 4164 wrote to memory of 60	4164	msedge.exe	89
PID 4164 wrote to memory of 2080	4164	msedge.exe	90
PID 4164 wrote to memory of 2080	4164	msedge.exe	90
PID 4164 wrote to memory of 2080	4164	msedge.exe	90
PID 4164 wrote to memory of 4508	4164	msedge.exe	91
PID 4164 wrote to memory of 1268	4164	msedge.exe	92
PID 4164 wrote to memory of 4508	4164	msedge.exe	91
PID 4164 wrote to memory of 4508	4164	msedge.exe	91
PID 4164 wrote to memory of 1268	4164	msedge.exe	92
PID 4164 wrote to memory of 1268	4164	msedge.exe	92
PID 4164 wrote to memory of 2356	4164	msedge.exe	97
PID 4164 wrote to memory of 2356	4164	msedge.exe	97
PID 4164 wrote to memory of 4904	4164	msedge.exe	98
PID 4164 wrote to memory of 4904	4164	msedge.exe	98
PID 4164 wrote to memory of 1896	4164	msedge.exe	100
PID 4164 wrote to memory of 2472	4164	msedge.exe	109
PID 4164 wrote to memory of 1312	4164	msedge.exe	110
PID 4164 wrote to memory of 2164	4164	msedge.exe	111
PID 4164 wrote to memory of 4452	4164	msedge.exe	124
PID 4164 wrote to memory of 4452	4164	msedge.exe	124
PID 4164 wrote to memory of 3264	4164	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffb5435c188,0x7ffb5435c194,0x7ffb5435c1a0
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,11601872787532165909,15508193389976922309,262144 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,3784314594359323467,15011512513299130227,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,14886473534643372422,141128353830378055,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,15773149382300087107,14343284553846007872,2097152 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,17487298243373200616,13380752563349442781,2097152 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,7081371917498235645,11488378156558549470,2097152 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,1977657305743863520,8507075017553199259,2097152 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,6396502573802154949,15960306004962246123,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3400,i,445643877578586302,196859820543096839,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,2483742377411611314,379437595889406216,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,2483742377411611314,379437595889406216,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,7414042657002245379,3120305693983566064,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,14527353458703288264,16723399590378294329,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,6685542587916088405,10422868493490055998,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16312402009548379196,1794493564466481329,524288 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5436,i,15382026439453463666,10135969680758414021,262144 --field-trial-handle=2292,i,8609408043957737652,1940849290709374818,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1cc4f157408751afb4160f5e2d21a6959745c10f213064da548341753b7cbf8a
MD5 55f111fd3618eff49346bd86436c426b
SHA1 5e92267e8d6d6f3cc4b256ad823b1121f8c09796
SHA512 b111b3b444830d5cc366b3db9dcc45c96fb56eb052628a13d762ed491ff76b9d795b128f3a53fd59e0b714e553f6271aebc21643bc6b533fd3e39b40ea68bf82
TLSH
T14E51B5340D118865D760CAF1A1F0E24F7B70FAF2F873DEEA545354326A1273183D6298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5927d1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5927d1.TMP
Size 2KB
SHA256 3bd8822c140ec6d918f34c0494e7a68020af52c475164533433a64955dbca810
MD5 d534a6e0568ba506221b6d5c2e4332d1
SHA1 f9aa5bd5d026d3f898dd1d4010035b7c3c6951c6
SHA512 b6c36ff8612834f5ee38a0408a4be13eb9b6320e15a60cd718f7bd15a79f97af72c69cbe3ff4e4e36a6c05e9af984ea3f7acc4414bff9d58c31527f32a1a89d7
TLSH
T1EA51A5340E018865D760CAF1A1F0E64F7B70FAF6F873DEEA545354366A1273543D6298
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 474bad1aea0581a304fd28866f99fd6f34441bd38bfc5cc910e6c0abe1a54cec
MD5 9e9572f1f6c0f2e5ad2666fd8144f090
SHA1 1fb8e739bc09399f1410af60688039d5d4989ac5
SHA512 07638e64fd9edee1453e83c17567e594332013d7a93352c6584453e91fe1dcb9b2ea3cf1334eaf55f0de015f576f48377183bf011b1cbfe293a9091562b20550
TLSH
T19E117DF3C7E5856E890116F05A24AE2BCE1D0506821C7C29C5D4FF2797E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 69b637147b8d9ac405ac962afb3eae3c6e2fc7d95d9bcf22cdf1c26c99852d9a
MD5 f30f559cf46ee7c638e3ce3acc6f3378
SHA1 a750fc6c44ed4f10f0dbf85c642da2db61727bc1
SHA512 ee74cc88a29e0c73473fd3d65741923f1c313605f0515dadd1d8982fce3360c5696f005f206cf4ba48e12225a4fc566d3f2b20c558b4cd356452c3a57962efb5
SSDEEP 192:sxZOR5yM/jK1Ml8Mk//fWsmCPC+9IdpdsHW6+WNGY9IKl2EIgrJ:sxZOZM//fWsVKZGHbGc9
TLSH
T14D42F8016B34A977CCCBD209FA55BF53D6F8457292900E58A9FCCA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ce16ea2bf79bbe377ab8b5f83f5459015dd69d661db8b8af770cd6ba8150ccef
MD5 03cc5e8a72db11840ab4274cd824bf9c
SHA1 3a6e2a1b96239187d04253ac7f73dbdd67d3fb4f
SHA512 50fcbf2c60952e48016c92769af5cf73792aa09d737ab0bfb6c23bd38e198fb7147b05244e8876ea4d2ea5c5ffb792c59f5c372476e63dae3c77b636fcb10abd
SSDEEP 192:sxZOR5yM/jK1Ml8UQOk//fWsBCPy+9IdpHsHW6+WNGY9I/I2EIg54J:sxZObql//fWsgaZMHbG6O
TLSH
T1AE52E8526B34A9B7CCDBD209FA45BF53D6F4447292940E44A9FCDA1C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a68178f8d505c6d7a110a684db66a7502d4cbf473716c266c8b9ab1732e4d0ad
MD5 62adb73f3054a0a92657f68a99b6784d
SHA1 1457a15067fedb2eca32de47f988822bd1d13bc9
SHA512 cff3a03a41ee366c12f4c580c9dedd95dc4d871202cefe85707325de62026d3ddf0a262d37ca4a8351a1bccef0573a82e7a65b3dadd3a09b7eabbaa784d57d93
SSDEEP 192:sxZOR5yM/jK1Ml8Mk//fWsBCPy+9IdpHsHW6+WNGY9I/I2EIg54J:sxZObM//fWsgaZMHbG6O
TLSH
T1AD52E8126B3469B7CCDBD209FA45BF53D6F4447292900E44AAFCCA1C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ed8fadfc263294e26556f63972bf5a1fd6df6e0c8f9f8fff8453059a06718962
MD5 6c444d9cd957a9b1d500da1f34f9d056
SHA1 51841b51d93546986bc87514023ee51302e5c2a1
SHA512 8300285bb8fdfcd4efd285789e28bf508b37df04291729de329d5fc4507e445d151e70b1c8dd9f46d1709d75dda4c8cb2f7eba31adeb4c1c33a4b80eb93d5a10
SSDEEP 768:qjcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNNroYg6te:qjcv21wWvu+Z+u1jaeFLeRNmY9e
TLSH
T1A4D20B2B280CCB7E4F845E9CED2A6F8A6DD801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fdfa6851d225e5c4237571ea9c2ff7b4e30a08eeaf9ff4e852f3e950544da2c4
MD5 c8db5719fed53c1b0e33d29c99f97cbc
SHA1 04cd4620ee0b6e7b42aa5fbc6e1f51c4eb8aba15
SHA512 a3cd13079d93a64f3edb5738e40d76673d54c86e4f713ef15f1ce7e43e402d977ff7a239f1552d223a5100aec9daf799442a98df7162c61da0e95ebd11a25c3f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDygha+IOKb5azq/WbKni/kbTgYbyqomJCKv:mTdBJVnygnsAqR
TLSH
T162B1E436733B1252397D694CA29586374E8132633818A4AF7BFD00A54EB7E216DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c337.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c337.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 df1447d95fcb24fc17c898ab75e1152661f3a8964d153c7195d42c36bd75f09f
MD5 060a7c2204fdabf3822fadaf560ff6ca
SHA1 cc6a6063e135168a1d60923e0299db2e29d143f4
SHA512 eb6adf377637886d0c05884e0e065e0eb464f615476f4c51d363356a9ffe2dba53b6fe202bb7de42d0c23d575281593806694133329718044a9aaf118a1f986b
SSDEEP 384:GZcIhsNGpqziv59e+CLOztKrf5UrzXSWS:UhWAcTOztKrSCWS
TLSH
T1E3927D716D346C3A6AE6E544F84A36178FF89077E2C52B94D6DCBB2C02DB15C230782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b7552f8cbd4ce2930e77faa4ca6c132c67ce636f3a5203767030e9f22e2551a5
MD5 31931815a21fbf999832cc27af52f710
SHA1 27cfa7ab61d94e95e2c06169753d843fb50825e5
SHA512 429ddff24bc6b32394d10236c185a03a5b7a97fa905429ae2ff2bc6f1737ca7543d473caa50350fed99ee65872b80d52df7af8fd332ea11aed65acc6c68471f8
SSDEEP 384:uZcIhsNG3qziv59e+CLOztKrf5UrzXSWS:MhgAcTOztKrSCWS
TLSH
T15D927C716D346C3A5AE6E544F84A36178FF89037E2C52B94D6DCAB2C02DB15C230B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 830632935b6ea7c11e19280c3db11a2026935a74270cc3f2271f3c200e4e7eba
MD5 fe1835d711c3fa22b288b4c84cddf2f8
SHA1 dad45e1a4442d75c1676d868605e7f7def66ff86
SHA512 a2c053ae96ae878d53c86b592f4cdecf5b0e3e5a225e18c82041a58589427f5392b96f20981949ae8aac42839d4a82c7a86c5caf1c0c05f14ba966c318ca771e
SSDEEP 384:CiFiZcIJzsNG8TUNTUlIl3qziv59e+CLOztxrf5UrzXSWS:JFQprwg0AcTOztxrSCWS
TLSH
T11AA27D725D64993A6AF6DA44F94E32178FF88077D6C17A94D7CCAE1C019B19C230BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 10408f79b8752bb210ff91b80d860950f9bf3bd2c76183f302cd294d11187edf
MD5 a582bd449563acb9862f4fe5e7dfe139
SHA1 6832529a49a2117221775038f882ec659d060d0a
SHA512 a91469bc3fde5ac893822a377920682b3bbe55e503e16046f6801f5d17bdedfbba148587fb4e87faf868fad0eaf581f8532a77a14e1eed80f1f746764aa55374
SSDEEP 192:JONl6v+YLNQmiUyPqZh+CGWOFmRMus6ArU6:JONl6vz/zZh+CLORXU6
TLSH
T17702E9356D682C6B9EF2AE45F44737279FA8217BE6912F80DAD82A1C01D774C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c5b1aa49a981e522f96c9e4882c8b6410dffcc4b7feacb9d9012e53044af4d8
MD5 4955496c7d6fbdf5eef3fd865d9807c6
SHA1 68fce3fb1a3748e0f6f7ce900897c94fa6d92354
SHA512 cc641aaa47cfb6c4cd154953f3cb4b57097f222a8ba7d4a43bcebcf8d904722ae1c970f9fac4148dd5af64360868ee9d439c362f37191c9cbc451276af09e7d7
SSDEEP 192:BhONH6v+YL3qQmiUylqB9h+CGWOFmRetBCH6iqSU6:/ONH6vzyXfh+CLOztGrU6
TLSH
T1E4120A35B9785C7B5EE2E984F48736179EA85177EA857F80C6CC3E1C02DF65C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2af99adc9244e4c2c80d5f4467824c4fbeae076d56fcea66e6c343f6729e6319
MD5 d792ada79ffd8d421565d650c7d357d4
SHA1 33aa1cb972d64695a43dc9b3eed2adb3a5f2e991
SHA512 166f7844e5325bbe4fac9999da9c75f0ed1f6dcec68d46ce3e93af43fb4a81493e59cddf33e92b3432f3428d17f2fe1420f8dd8b3819cc891b3c3f8914139024
TLSH
T17941F85DA6EA1118B3B37E16AFF6A86E457F7C372E0AD45D10110E4F0A22B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download