5199eaf839f2d191a3519e1a59ba0615611931b2e9705692d2ce719db594a6f9

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 39KB
Sample260808-ph6e1sfj21
SHA256 5199eaf839f2d191a3519e1a59ba0615611931b2e9705692d2ce719db594a6f9
MD5 3de8ce965049a8d45f586525470d90ec
SHA1 2d0dc9578d76c04b1e81dbe157dd4d1c5f67d673
SHA512 3056a617df9ce98d81b563732cd1619a5778626fc4aa6b7a6a1985918518650aaa3d4d5ff6ecd2927e4b671791a2f5b833e9155ce3af3b491ada6b28a55b9a69
SSDEEP 768:83+303qnyvWoZdypDsTEtOXvPwAKSBRZ5Y6LJ+b0vLB5:83+303pRypITESXwAKSBRZ5xLR5
TLSH
T15E03C772E47800773B5AC7E99066B32CF6A5A50BCB069BA5B1FC61585794FF700B320D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2172	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306652538597454"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{7A119F4D-A9F4-4BBA-96B8-F72EC9AD242C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe
3132	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3132 wrote to memory of 1324	3132	msedge.exe	86
PID 3132 wrote to memory of 2172	3132	msedge.exe	87
PID 3132 wrote to memory of 1620	3132	msedge.exe	88
PID 3132 wrote to memory of 1620	3132	msedge.exe	88
PID 3132 wrote to memory of 1620	3132	msedge.exe	88
PID 3132 wrote to memory of 3868	3132	msedge.exe	89
PID 3132 wrote to memory of 3868	3132	msedge.exe	89
PID 3132 wrote to memory of 516	3132	msedge.exe	92
PID 3132 wrote to memory of 516	3132	msedge.exe	92
PID 3132 wrote to memory of 516	3132	msedge.exe	92
PID 3132 wrote to memory of 3208	3132	msedge.exe	91
PID 3132 wrote to memory of 3208	3132	msedge.exe	91
PID 3132 wrote to memory of 3208	3132	msedge.exe	91
PID 3132 wrote to memory of 1760	3132	msedge.exe	93
PID 3132 wrote to memory of 1760	3132	msedge.exe	93
PID 3132 wrote to memory of 1760	3132	msedge.exe	93
PID 3132 wrote to memory of 1608	3132	msedge.exe	94
PID 3132 wrote to memory of 1608	3132	msedge.exe	94
PID 3132 wrote to memory of 1608	3132	msedge.exe	94
PID 3132 wrote to memory of 4308	3132	msedge.exe	98
PID 3132 wrote to memory of 4308	3132	msedge.exe	98
PID 3132 wrote to memory of 4308	3132	msedge.exe	98
PID 3132 wrote to memory of 4964	3132	msedge.exe	99
PID 3132 wrote to memory of 4964	3132	msedge.exe	99
PID 3132 wrote to memory of 900	3132	msedge.exe	100
PID 3132 wrote to memory of 900	3132	msedge.exe	100
PID 3132 wrote to memory of 1108	3132	msedge.exe	102
PID 3132 wrote to memory of 704	3132	msedge.exe	117
PID 3132 wrote to memory of 4056	3132	msedge.exe	118
PID 3132 wrote to memory of 4604	3132	msedge.exe	119
PID 3132 wrote to memory of 4656	3132	msedge.exe	122
PID 3132 wrote to memory of 4656	3132	msedge.exe	122
PID 3132 wrote to memory of 4780	3132	msedge.exe	123
PID 3132 wrote to memory of 4780	3132	msedge.exe	123
PID 3132 wrote to memory of 4464	3132	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ff8c6a6c188,0x7ff8c6a6c194,0x7ff8c6a6c1a0
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,12531215672303912368,14666654721572758691,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,763304357109083300,14674903622113816082,262144 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,5347144294300518069,11541253113022866307,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16494566354418879282,17160883948023499909,2097152 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,813936377443166669,3554573218173068463,2097152 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12671576292855765410,1849386280247944865,2097152 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,968221150125904356,13000117433789383773,2097152 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5076,i,113067730391525756,12653382041632758670,2097152 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,12044069027459878412,17867201328493670857,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,9370943041495548671,6960818192283661551,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,8282326971303587068,16072484546998141092,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,8282326971303587068,16072484546998141092,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,10324961945933642315,7845147996532859041,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,10762825389113212810,12805944202329026422,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,15397528290130387553,8522677206283735678,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,5224250928790186380,1783785522841254793,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,10443196775281766439,5681954323790622398,524288 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,5056554936241264295,3582029851870565763,262144 --field-trial-handle=2248,i,587801777996338822,5993067397244240660,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e135ba1b60f6fb77a514314277f4f958e5568abf7884d3a7667c61b4e0ee58d0
MD5 66732f82243ea7803447b9ab9b4ecc16
SHA1 ae1e9780c8b6dca02e7c9565c5dfdd95ffe9131f
SHA512 d640d8e42d88672bedab026a092846449f6f5d9fab08e56a7972705a68203830001d490f05575c2ac9e5523386d6a7bff97c822f36876b57e34b50c6a61a9917
TLSH
T16C71F61A02B3A387F362323CD4D34A13F3338488697B4E77468088FD3A38B21972562C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e589.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e589.TMP
Size 3KB
SHA256 97c1feeb1b5a9c2cff3a65f187f2814c87e68276dc6c425315c6657f2b7bfd89
MD5 28d34a1a828a47f06a7bb4bea528e2a5
SHA1 dd2a0e048fd167bc9e80dbb69ff22e766c9c09af
SHA512 7d8877006adedcc6c935c0263181e442be47363ef9c93a9c0834289470d5466f2d323dd80b61637561273fb51c33be2de344cf22455e9a09f19fcf848b12e98e
TLSH
T1AE61B42A02B35797F322363CD4E30A13F3738488197B8D77565445FE7A39B22972966C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6f9f3f88b5f45163dba63bd9686a5861b826a201f2f12464848f6fae948852aa
MD5 4dda37a56c344893d95557a750704b88
SHA1 6cf647875819a5087e9925ab93637950513be9da
SHA512 479749063af46eab13521148fd8396459cba4585b08009b47c5756a7e2a19fb33782fea3d52a4e60edd48eb4da1c6ad491dd726001cb049e3dd57c54421e09ae
SSDEEP 96:DKOKtFCVHfFEeQT54zL8lXEaE6ewr0hnrzuOwQ:D5KtFEHieQt4f8l0aE6ewr0hnrzTT
TLSH
T1E1919AB6C3D8877E881112F05A35AE2ADC2D155B42283C568EF9EF8F63F1571E10269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 647d16fdfc2c20ea770c5fc61ea27bba81a0bc9c5825c6856e8405ffee0371a1
MD5 f93d4460e633c26708c8d9ecfdec0540
SHA1 f2739fd95e3c7cf72c926fb91ade7463ac052cf2
SHA512 2ed22e88a49160f1efca5feb8803f21d49aca3ba45b015545bf66d9ab01c05bfae84025234a9681dbac05b028d43644109444e972a8ac3a847ea59e2db25d13d
SSDEEP 192:sxZUR0yM/jK1Ml8UQckZ/fYsNd2IdpHnHW6+WNGYwgzF/Ig5DJ:sxZUiqnZ/fYsNd3HHbGMD
TLSH
T145520811AA346D77CCDBD209FA52BF43D6F5047292900E44AAFCDA0C09E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 70077ad27de99ccce2148b06ad90bf3b6ecfdf1fb8ccb42b7e5c9aeda85e4164
MD5 703a8467a321cb130e0de72e11424cc3
SHA1 543ccb0fe6b11eaa8e290072f843cc83d0e88ce9
SHA512 59fefdf94fb118fce921fc622b713b57ee7cfb74a444016c89f9eec35dd77c0a2b3c23cf272c95e718b2d70000f540f36115152cbedc9883523fc6406d02eb4f
SSDEEP 192:sxZUR0yM/jK1Ml8MkZ/fYsh52IdpdnHW6+WNGYwKG+/IgrJ:sxZUiMZ/fYsh53xHbGA9
TLSH
T1E542F911AB34A977CCDBD309FA557F53D6F5047292900E44AAFCD90C09E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 891dfa452564571b903adcd29997ffbd1cc7dccd4ee889dd9dba5637c528a809
MD5 66b1c3871a7cbfc5b6c6a437b3269ade
SHA1 73f269a4e8eb46230759fceb7181daf2598c6e9b
SHA512 66e70e73a2b6c4775cf049add3b476c568a19eb89356b50bd0ec12aea83cb0ff4a8803c8545b4cbd92c359ee281b6a8ff567494aa0e8e5bd7d2c447cf8162875
SSDEEP 768:2T4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dZrohTccqaa:2T4jeXmWvmKLEu1jacPLZQdSmcw
TLSH
T16FD2093B280CCB7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d51c79836ac10044ec4b8832f6ec3516ca8ad788cdad4e0cb9911cd331897f75
MD5 f3456fc82fa97eb69bc1ec6b26a0830a
SHA1 16ff19250a7c7fdee191be5493d3489f319f59c1
SHA512 4f7a3c74139f943998bde905b46049f21df469fa78c01455c034848c3b9e52be8b8c8fc7b807dc97d2e1cb2a717ef3b205d873897673b4b3aec99589f9e5b5ae
SSDEEP 24:KdKf9G3asdAc44o0+rIji4KibhaU41EioSmWM/8qVyXYof/sdaCdK6W4KG+dIjAB:KAzIhK0YMHy1JIhKa88u1I9K2wQvyP
TLSH
T182911F1775BB42412C3E692C8765A6269E4276A37029A87B7FAC40B10E67E104FFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58940d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58940d.TMP
Size 149B
SHA256 36f8d4f506e8fc51f263ae5e08421ebf6ab0093648d130b2a4e970286c77cb45
MD5 f9a1b3ce9e57c84193382197ef93ddd5
SHA1 aaba6bc184eb9342367a5011dacc9eff1144604c
SHA512 0108eadf8aac3cdbf3e26c49c4fbb75ab40ff89f70979bd3d6336787a7f6789bc186fe827360775f5f3c5678b70b1814f576c836b3697eb4e6fd447860d9fe5f
TLSH
T142C02B770A32A1033F20E5C55039010C986F9E884CC0C8F4C446F4C730B8622E1F23B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0f6d1fb34c314508dcc10124389965aaf845e0517e91706a8e84f2829f5dc9b5
MD5 ff7eb445f2a7a73ac43b7b8fe3a2eb57
SHA1 31f39f1757fc322bf3f11e5a8fa0cea0656a0cba
SHA512 22b9e03acd1b599034371603c04d5d072ee46ed8842795ae0ef13b700eb327292496e200b0d7f9ddd8987d1e5d858651ed5a375a8320abe8142a104fe539d62c
SSDEEP 384:ZZcI6zsN+Brh9ZEf+2/d9Y45JFtolnTKwBODNZOCCKDL:xSfxEbjtolnewBKZOR0
TLSH
T18D927D319C38AC375DE2B605F49735134EF89177E9D43F94E6EDAB1D00A9698231AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ce9c5b82ccbc3eb148790e4569cdeb55fc80dd20f35a1d5dc81eb861ee10809d
MD5 687ccfa80504e4eef11558e933b9a1e8
SHA1 61137ea8f44907c419fa8957b854938539fc0a69
SHA512 20216171c03caca61bc3b3a62032dcfbf575026f1b78ddadf604555431d1207487824fdb71c316d4a875efbdfb8f8239b7b3446483928e882c209f3b48916d23
SSDEEP 384:EZcIhsN+Urh9ZEf+2/d9Y45dFtolnTKwBODNZOCCKDL:ihKxEb3tolnewBKZOR0
TLSH
T1A5927D319C38AC375EE2F605F45735134EF89177E9D43B94E6EDAB1D00A96A8231AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d419e0eabf05173010adc6e89b2a7d09f4c3781c8ff6be89ab3b310da8b8d63e
MD5 c553e32a49276f4df41657704b0183bf
SHA1 386493b03dc40ea4c2c9d6000183f57275d64b59
SHA512 dc6bdf7dfdd5d0ea48e92d2c68872829388287a3032c2fd5c94cb8b2ac9b2a5cae17833e7e478f4feb198ea623d22a6993cd293420f8bf3b9873d8796d655af9
SSDEEP 192:EON+V6hZ0QmiUyq8pc/+jV40+Fd9YDJ5wOZt2eU6:EONw6oqpu+2/d9Yk2tdU6
TLSH
T1DF02D935AC686C778EE2AE45F48777135FE4112BA9E56F84DAEC1B1C00D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9691ff664f629c8851061c6c084db0137245667ec21a0929719515dea8a267bf
MD5 875503e06c7a41eeb3a4d11bb48c9904
SHA1 d01186013fbcf45f941c7174f98f55153567792f
SHA512 0b5c64df1896270f6732752466364cfc286774d96ed5ac9269d23551bc71882a966ccda3d0f85aae6b47d90705c2d11d1170ab2fc0b0376bb26b7831fc80a05b
SSDEEP 192:MON/6hZNQmiUyU8Ec/+jV40+Fd9YD804NO5cOqtjrq0IlU6:MON/6v+Eu+2/d9Y45h9tolU6
TLSH
T19F12EA31AC68BC275DD2A641F09735134FE4512BEED57FC5E6EC6B1C00EE66C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 400df4539fe608b78aed5e9a326842e6508c3aac55c6c969040905daf868b1b5
MD5 44f724e8f4ec9b94a592373494b1d695
SHA1 1ca4391fd71f47c083ca487d61d369b2e9c53fde
SHA512 369de4b21b006f0978bc26cc5313c87437d8cd90bcfa66e9f79f338889984ce1f1ea45ab00e4272cebedc2623cf6949b6d4db74d361bc0a317492e62c742bae9
SSDEEP 384:dZcIhsN+Brh9ZEf+2/d9Y45dFtolnTKwBODNZOCCKDL:FhfxEb3tolnewBKZOR0
TLSH
T1C0928D319C38AC375DE2F605F45735134EF89177E9D43F94E6EDAB1D00A96A8231AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bc29344-95ec-4f18-8f95-d3521a320b67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3bc29344-95ec-4f18-8f95-d3521a320b67.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e2f747cf8c58114bef6a87e48a7b363ccd987c3233c7bd229d6feadc28661353
MD5 383713eb7f5ae554c4c27c9243d8eb73
SHA1 eee9ea655f914cbb9338f43aa34fc72bccc8195e
SHA512 0e5bb94df6492c7fb8c20a662cae39679918ff77b1268797fdb2851c4cacc8ad77aff453da57f264121c7a55cac10264b386c783291003016e7e1ce42f7f1578
TLSH
T1EB412998A6FA1048B3776F56AFF7A86D487ABC772E06D55D00010D4F0A32B40C9A2B37
MD5 SHA1 SHA512 TLSH

Submit Download