7a806016b54023de171120a90ef04e0f9fdac3ceb3e143119fed5a0ebda68a29

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 25KB
Sample260808-amf9csel2v
SHA256 7a806016b54023de171120a90ef04e0f9fdac3ceb3e143119fed5a0ebda68a29
MD5 3b43e871079fdff63a980e3677c0c0af
SHA1 907e40f3c6ee8a7a7272349ab47903c205612646
SHA512 2ab97404792d1992fa56dbc58b146d8bfce9125032f580013556a5efac0f400a2502cb8bba44f86ce8e5112c10d2038637c278ca80710f42d22ba8dca05fd74e
SSDEEP 192:DOsCsd97q4/B5JIjTMYtNYJACRIqKfuFs5rbooeHlDG6oBDbIO96mzOpTDYrFIad:D+qbIs4NVkDGPDbIOJ8n6WRJCmAkajx
TLSH
T12FC22F33A700087F8E0146A6B3A5AF3D195760BDA2125758BDAAE8F755C13E4943CBCF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1308	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306219859379277"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{B38F58E0-817E-44B1-A20B-208D47159DEC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3316 wrote to memory of 4580	3316	msedge.exe	85
PID 3316 wrote to memory of 1308	3316	msedge.exe	86
PID 3316 wrote to memory of 4536	3316	msedge.exe	87
PID 3316 wrote to memory of 4536	3316	msedge.exe	87
PID 3316 wrote to memory of 4536	3316	msedge.exe	87
PID 3316 wrote to memory of 2612	3316	msedge.exe	88
PID 3316 wrote to memory of 2612	3316	msedge.exe	88
PID 3316 wrote to memory of 3940	3316	msedge.exe	90
PID 3316 wrote to memory of 3940	3316	msedge.exe	90
PID 3316 wrote to memory of 3940	3316	msedge.exe	90
PID 3316 wrote to memory of 4712	3316	msedge.exe	91
PID 3316 wrote to memory of 4712	3316	msedge.exe	91
PID 3316 wrote to memory of 4712	3316	msedge.exe	91
PID 3316 wrote to memory of 4012	3316	msedge.exe	92
PID 3316 wrote to memory of 4732	3316	msedge.exe	93
PID 3316 wrote to memory of 4012	3316	msedge.exe	92
PID 3316 wrote to memory of 4012	3316	msedge.exe	92
PID 3316 wrote to memory of 4732	3316	msedge.exe	93
PID 3316 wrote to memory of 4732	3316	msedge.exe	93
PID 3316 wrote to memory of 4248	3316	msedge.exe	97
PID 3316 wrote to memory of 3420	3316	msedge.exe	98
PID 3316 wrote to memory of 4248	3316	msedge.exe	97
PID 3316 wrote to memory of 3420	3316	msedge.exe	98
PID 3316 wrote to memory of 3272	3316	msedge.exe	101
PID 3316 wrote to memory of 5076	3316	msedge.exe	106
PID 3316 wrote to memory of 4164	3316	msedge.exe	107
PID 3316 wrote to memory of 312	3316	msedge.exe	108
PID 3316 wrote to memory of 4364	3316	msedge.exe	109
PID 3316 wrote to memory of 4364	3316	msedge.exe	109
PID 3316 wrote to memory of 2092	3316	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd8cfdc188,0x7ffd8cfdc194,0x7ffd8cfdc1a0
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,10192163311232011950,14395217261950774504,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,5946349336251699687,865506243266866797,262144 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,4483893271298887701,12239355921779457662,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,7389399088327661505,13666389092665724185,2097152 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,14840936641303619816,16257211251943374237,2097152 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,11341329009586793201,9206749198277202756,2097152 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,10683567893841586143,9612125775398368467,2097152 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:2
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,7284713992157226153,11753340099084804514,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,14211666239118974805,3325831630470268080,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,778174016999436554,13195272907338093245,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,778174016999436554,13195272907338093245,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3171485737040211335,4420329035740469310,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,2966356266857545844,503010302937856334,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,1851255984207301477,16396769357973469075,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2960,i,8374287839584781598,3246461207259537336,524288 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=764,i,3288833462044460293,1900310897430903600,262144 --field-trial-handle=2368,i,2881539908208327016,16238168831714054423,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 987a8409b500944c2e91e6f0b356beba7853fbf9bc34127cdcac87e36a5d159b
MD5 711b7276ab4cac5c7d0662623628b4f1
SHA1 c0b08a2ce958cd6b3cf43b1b606bddac6f416c76
SHA512 53334798f71067d33c5ea1fc8c14893238cf2be2d4562c934fc37a0753148ec6d84178d601e10f62955b9a3059a4dc075f4e1a5620c5a7ef13184470d069a6e8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T188B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

2f9c379a-4b14-46e4-8c13-00c1f0fdc694.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f9c379a-4b14-46e4-8c13-00c1f0fdc694.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 696daaa1658bceceacc0d6e0c6a3b4851dd3f8157dbf591719ac459b89b3ed9b
MD5 b9606a30bebbfab02442165c86d90977
SHA1 1ced884c474bfad55f7adb795f90af84faba6c4a
SHA512 a4acac058a644bba0c0ed6939e2001abd66bd8dc2db9ebf39efe4ad683e76cfb582f467e349253a370313f71efbba44a071dcb42252d61dbd1dd2621be8bc2d9
TLSH
T1DD61A218069219F4EF4D4231D1F1DAF27D31809EEAFB9EE1B1841C7FAC05F45A10A2D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a8dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a8dd.TMP
Size 3KB
SHA256 60be807cf0559f2c5ebcd3e6de81291ec7a5fe523b4867496354e38f4e25ca31
MD5 ab815cf189e77bb4e86c25739ad6513f
SHA1 74e23e00b305e70d87e6da8008f251a28d23a88c
SHA512 914662b9753a239e9c076d76c3e888e8ed8057f3c215581101f027a7d44d102187891120576466d4a55223ca62ecd5544fe185c101f7a16887f63f65f11765c5
TLSH
T132618159065259F4EF4C4231D1F1DAF27931809EEAFB9EE1B0881C7F6C05F4561062D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ae50222557f3322698487dbbca922cce3067108105216e19474385d776eb2e2b
MD5 21e92406967a07a0329c11636026b7ae
SHA1 cd7ad7c97b2d7afefbb74f8cc99e4011d5b4ca50
SHA512 7e14c658b52fa2e6a963c30a07739cccf92c2540408c48745cb280832fbdd7774d5f23f7732a3b91a7933fd0183cf2a960ceec390638ef7946e9277f4d8ebcac
TLSH
T1E531A0F7C3D4866E895592F09A24AE1BCD2D050A422C3C65C9E4EF1B93E3075E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e5a41e1f10143e0774409b3fd765e7c1605dc6c7b189547bb443a780c661a741
MD5 707c88e34dc5f8243e04deab9bde5903
SHA1 00e9b3891cdefce1407ae79a9b12e156320aa2d9
SHA512 8b50a924ba183542cad9923d33d41e865dc9ade21d1a7cc0a6be90fc39efdc3704402c3a6065cf65c9125bde01fbcd59b2de6b9641c69d0175e60cf537a85175
SSDEEP 192:sxZqRAVyM/jK1Ml8MkO/f2s2QFEdpdvHW6+WNGYHjhRGIgrJ:sxZqMMO/f2s2QuNHbGd9
TLSH
T11942F811AA34697BCCCFD20DFA557F53D6F94572A2900E48A9FCDA1C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c2081ea0cb3fc08f6f0d4a55c222a6980b98eaa17827e904fadc643d234935fd
MD5 7fdc02baf766c318b793a88e867fe9f0
SHA1 df821cf8fcb2828f097fc6d3e091566ba6ae5a17
SHA512 fb4efe8b47660903f6b0d77f44ab8ec585ff5b274cde93cc9f45b4f69c805a1f6589f7c2ad205b7bc9507405acc9874db4aa7cd84946b5ebab3197d4eef91368
SSDEEP 192:sxZqRAVyM/jK1Ml8UQakO/f2se6FIdpHvHW6+WNGYHK8ec0mGIg5DJ:sxZqMqpO/f2se62PHbGH8GBn
TLSH
T1BE52F715AA346977CCDFD20DFA517F93D6F54472A2900E44A9FCDA1C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e7e4272250dde0b4017f2b2978727ed7cb0ec1914a2ccf41a892710c04f4b2c9
MD5 97aaff2ec198e09b54495ad5f07aa7be
SHA1 3afbf12abe598634e5ec942b2a86b3289bbd91c1
SHA512 e1a08bab3d5ed30a9296d94509145c7069ea05b766b59f340d7763773ec369b2c7ae0a0b23ad30886e42eebb840ce35f73d9d614941f83c188a939a9d916e44d
SSDEEP 768:gHUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R/roVY09:gHUZYTMWvg0Pou1ja7eLZmRst9
TLSH
T116D20B3B284CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA894C03C72EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 afd78d3be63bfcb33138b559117d80fe55e625220fd74876192712a32026cbf8
MD5 1673bcdd0eb9620ff5d32ebdd4300e35
SHA1 c88699d8681c746852330eb1b59885932452015c
SHA512 9538ebceda34ef4a37ae0bd7ef5fe52bec6b7c8fa65d6cd054d858ad10672628fb64ba20a93ec28d08f19bb59127140c2f0e4651d2c74ddea37751bacb96d016
SSDEEP 96:KA1eK2AUe4KLSumpCKaMFjGKw0y+JGKCga:Eq75nlNb
TLSH
T194D1761630BB0B073DBE2A09A65497160B8171A33115B42B7BE904B35E6FE384DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594423.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594423.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 27986b859b05859e77a411cc0031be3b05273a1efd05d896485b03085aa714fc
MD5 47043b49c2553a8bc245bffcec7d024f
SHA1 a0840fdb47d85c176388c255a14a01741c4756da
SHA512 99565d74a07b2c8005fb250716fcce5fb90150fea57995f31e0a325c468235d67bedafe0f7ef5ef12a4f110fcb9273b7e2f492410be5d58ac9d817bdd94f53d0
SSDEEP 384:OZcIhsNWcv+naEVp8zX5od+8OGQqdDfnTKwBODNZOCK:shgyhVp0OFOGLdDfnewBKZOR
TLSH
T1D4927D7168386C739EE6F149F45732078EF89167E6C43F9491ED6B2C04AA6AC131BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 0cf4c45d6790cb5bb8b63ae396e2b7630b06340fe8d9d3204fe25bbfcde7b354
MD5 f9075d77000d8fca70988263ed33a9af
SHA1 f66478f0fb9314619faf5a2736abae1173cd8fbd
SHA512 4c52d5207de6cc8046f1d09a6ca3fcaa3b93377df6ae6919d6efb5f9065e29a3e4ea1cfae64077d10a2aa480ad7d72a743685bed1a98d9dd61fe67cf5e6afa25
SSDEEP 384:iiFiZcIkzsNW8TUNTUlIlLv+naEVp8zX5od+8OGQqJffnTKwBODNZOCK:pFQYrwgxyhVp0OFOGLJffnewBKZOR
TLSH
T160A27D725C689977AEE6EA48F95A32038FF841B7D5C4BB94E3DD6A1C009A1DC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ad98f560777db72ed2a8c7068e94b437af49818cd82e2a08df862fabf130f464
MD5 2aa59a1f2775168d042a97a463c7782b
SHA1 5e44e48db74905ebd3f8b0f325b982d3632e92d8
SHA512 6af972031a0c74447c2c583d8eb15812fcc931a47b7ff546dbc7b369b6e5269cbfedd5e188e97c4486904ac9d0908ffbf457b79966f160743129c8069225807c
SSDEEP 192:yONS61VWQmiUyP6gGX5Obd+joOpmid/a63upU6:yONS6WLgGX5od+8O43pU6
TLSH
T18902D735A8687CB78EE2BE49F58737135FA8217BEA546F84D6E81B1C00D765C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b2c256bd52ce3b337d8ce27ecea6d995f19d83d841a5fcfb67a69eff8f54948f
MD5 cee015cde0ee0509ce20b91ed32f8cff
SHA1 57b8d8b25b9874d534efe5eed563823221d8ee54
SHA512 163d753c5f6b2b2338a05f43fbcd84588f3fba9938ef82e11d20cc4fdd929a3651499ec84397f3dc1a9fd07f113c5dcefb451d00c9b2507984220830e755822d
SSDEEP 192:tON361BWQmiUyMVW6sGX5Obd+joOpmiO83qbjJBqiU6:tON3625VzsGX5od+8OGQqpfU6
TLSH
T11C120932A868AC679EE2B549F48731039FA95167DA847FC091DC2B1C05EF6AC231AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 11e30c9aad4304fce49c22f63af311e3f978b36fc9633fcae51ffb4448764d3c
MD5 355fcf6c80ddf1338396ea39e33447cb
SHA1 71ba7fd08f7ea5dd013db8cd14e256f8f0ba78dc
SHA512 a56abb6a2153b29a130f6d04231f8139baa9c1e39d0fb2c70e53196ca82f8c2c835d890d2a3e3e0a524ff8d03cd9d9e2c76702440433a8be95c3640abe21315c
SSDEEP 384:eZcIhsNWLv+naEVp8zX5od+8OGQqdDfnTKwBODNZOCK:chdyhVp0OFOGLdDfnewBKZOR
TLSH
T1BD927D7168386C739DE6F149F45732078EF89167E6C43F9491ED6B2C04EA69C131BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c62eec7ba37947e0787b0dc831d141483b2fed79da3a8347e22d56099e460058
MD5 918728a962c7700748c614895700d3cf
SHA1 e122522f9349caa34cc5521a2db3ca8ee0894c1c
SHA512 2ed5734ea3fc57542614b2b73334e04505f271a5abd0ab550f6643966646276d8b588bf028d80f41a94aaedc97e4c91d976219d065f5883d2a12f30e71cd81ae
TLSH
T1D541F65CB6ED1148B3B76F46ABF6A8AE487E79372F06C45D10010E4F4A22F408DA1B37
MD5 SHA1 SHA512 TLSH

Submit Download