fe193c66f2087ba94e23734a118111d3b0e4ad5fbae51da371794c46726e59b7

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 18:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 226KB
Sample260808-wyx7xaeh95
SHA256 fe193c66f2087ba94e23734a118111d3b0e4ad5fbae51da371794c46726e59b7
MD5 59995ab98402a02f6a1a0122b7bfc164
SHA1 225673c84b1a6bcff26f3351189cffb1a442a339
SHA512 c4bf69c0c9c7af069ec764ad8275052facbde5827c2797bd9cee36accd2ac141468451285d79c129e92c48f65b2589013c6070826b22e74e1b3c77bbcf2a24db
SSDEEP 3072:n0/fYmRkVvSkbv8o7+wy4mPB0gFwT+o+rzktYD:n0/fYmRkVvSkbv8o7+umPJRuYD
TLSH
T14134409F3191403C5E5A867AA4A23F3DB2FBC58E83111D8B416FBE929AC17D1071297F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306868859771246"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{8AA8E2EB-6DA2-4AA3-BC5F-7F79CEAE8B46}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 3984	4324	msedge.exe	86
PID 4324 wrote to memory of 1644	4324	msedge.exe	87
PID 4324 wrote to memory of 4136	4324	msedge.exe	88
PID 4324 wrote to memory of 4136	4324	msedge.exe	88
PID 4324 wrote to memory of 4136	4324	msedge.exe	88
PID 4324 wrote to memory of 1904	4324	msedge.exe	89
PID 4324 wrote to memory of 1904	4324	msedge.exe	89
PID 4324 wrote to memory of 4744	4324	msedge.exe	91
PID 4324 wrote to memory of 4744	4324	msedge.exe	91
PID 4324 wrote to memory of 4744	4324	msedge.exe	91
PID 4324 wrote to memory of 4640	4324	msedge.exe	92
PID 4324 wrote to memory of 4640	4324	msedge.exe	92
PID 4324 wrote to memory of 4640	4324	msedge.exe	92
PID 4324 wrote to memory of 204	4324	msedge.exe	93
PID 4324 wrote to memory of 596	4324	msedge.exe	94
PID 4324 wrote to memory of 204	4324	msedge.exe	93
PID 4324 wrote to memory of 204	4324	msedge.exe	93
PID 4324 wrote to memory of 596	4324	msedge.exe	94
PID 4324 wrote to memory of 596	4324	msedge.exe	94
PID 4324 wrote to memory of 3408	4324	msedge.exe	97
PID 4324 wrote to memory of 3408	4324	msedge.exe	97
PID 4324 wrote to memory of 3168	4324	msedge.exe	98
PID 4324 wrote to memory of 3168	4324	msedge.exe	98
PID 4324 wrote to memory of 560	4324	msedge.exe	100
PID 4324 wrote to memory of 4384	4324	msedge.exe	109
PID 4324 wrote to memory of 1772	4324	msedge.exe	110
PID 4324 wrote to memory of 4380	4324	msedge.exe	111
PID 4324 wrote to memory of 2112	4324	msedge.exe	113
PID 4324 wrote to memory of 2112	4324	msedge.exe	113
PID 4324 wrote to memory of 4972	4324	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd954ec188,0x7ffd954ec194,0x7ffd954ec1a0
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,5852719297612387603,13562096405126415561,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8162195894435997297,15323344601730943577,262144 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,375381593538761384,5049534215011642701,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,11832614914202509715,15932641981927897397,2097152 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,9494792782262351510,7492874638449115150,2097152 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,5865642113586277213,12893802604958523996,2097152 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,15603380121859543807,5693444427074761238,2097152 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,3504567883898919314,4708991051632574807,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,3831207585384909857,18311973713120445614,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4010688587004200772,4132175586768255825,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4010688587004200772,4132175586768255825,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,18301074871390161647,7689378000692061972,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,16891799274141629469,9169163377667211232,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,14013625359343852808,11276713953299890260,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,8862854963131423193,14311342976231405414,524288 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5172,i,16670536982045478191,368902093500242343,262144 --field-trial-handle=2288,i,8306386701865973406,16530151346784713287,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 193bb4e3d1be7041db0a77b5976cc48e5a3953e7c7c9d839bc36ee2191023445
MD5 3cbf42d15eb21576e6fdb7547fc19879
SHA1 86ccb2cb282c05dc770c73514c007bf3122c4490
SHA512 de224aab0b75a86e6bff0f315e481b4e35e624dc18bb172ca8600b1ba833ba53c42adbf6ccc425d5215f5adcc3e9af7b7be9e257c07a7766648391b60a9c1346
TLSH
T1D0615F3B8612C1A3EFAD4133DCD245D738BE88D9F6132E9A129E19BD360571CD239369
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5605377292050c98c89d50d132feecfcd99c8c68723fd7c474ec4c46cdbc7a9e
MD5 ea2ca092c1c23bcb408fcbb192e351b3
SHA1 9fed14779c0aea285194aa583e9bd1b90f8831e4
SHA512 522839493f5b37f5b487fcf66413249254fd4989eb5b4e6800ac655bfa7192bcf1441feb3b3f822d267e541901e5ec3984a418655ac7b6cdea3afdd019dc9a8e
TLSH
T19B319BB783E446BE8A1556F09A29AE1BCE2D0117436C7C1689F4BF2753F3470D00269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 17d8090938559df672c9aae2ecf6604c035817329f72217a82730b1772608034
MD5 e1dc7ccb7e717a4aa0779a240ea767ef
SHA1 b4bfcbbc88f855745471193fc201556ec352c4fa
SHA512 2f7f15ae34e37e87be52ec105da06a3db777794d2b72bb4117905a5a84f4fd0739a833d0b9d43f784edf31bb5b24d842d653c337f8f17d6b00f4ca993c4e5299
SSDEEP 192:sxZE9Rhkw/fasm28sIdpdxHW6+WNGYCkqdcgIgrJ:sxZE9Mw/fasm281rHbGZ19
TLSH
T1E022C8526E38A97B8CC7D219BB15BF43D2F95032A1911E58E7FC961C08E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6a5053e69fce33c6ae5bc7f077bfc135635cedfb9bf0c6eeb94e1f0dd877b3f4
MD5 d49e0769be8ceb066beaf807acf8ad92
SHA1 c506d12440747af3b58e54c47dc6d1d00a129d30
SHA512 eeb28bcdb33fa1ac795cc3de2272d26ead4bd49302ce75ed0ed774e5e24a8a44d21429b043673606c003ab8d9048fce6f9ff71a360dbeff116d144dc0beb3d7a
SSDEEP 192:sxZE9Rhkw/fas8V8sIdpdxHW6+WNGYCrmkdcgIg5KJ:sxZE9Mw/fas8V81rHbG/1M
TLSH
T13F22C8616E28A9778CC7D219BB15BF43E2F95032A1911E58E7FCD61C19E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 667885f603917ce37bc50cc0b1dafe7a59940ba6307169f630794ec4973ed44b
MD5 1236b9bfbe50b2481d828e17f2c7c7c0
SHA1 c5e52e6a14495251c37ac3ba76aba873a8b22e3e
SHA512 c883895bca5f3c5fe5788ce3b25779399f0b13d15b1045208e17c72b9cf64a26f4b289327b2a19f5a8e80ee7b6a01c9bd1036a673f739cc63d2d9c5b2ddaf5a0
SSDEEP 192:sxZE9Rhkw/fas828sIdpdxHW6+WNGYCkqdcgIg5oJ:sxZE9Mw/fas8281rHbGZ1e
TLSH
T1A822C8526E38A97B8CC7D219BB15BF43D2F95032A1911E58E7FC961C18E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 188f9515a8a0fabbcb690edf41d84b8094eaeabc8bc08c16a364efba93de896d
MD5 f22efe164877d45ae310950b47ac10ec
SHA1 23465bc50caf42ade427a79b21a2225fef6d8534
SHA512 48369af7cdb8cf29c09f0fcbd2f78ab3d8ef9ebe99f727c86dd4afb2d9f78c9477f7725f4d61180de89668934ee2a6550a440d13ff42f687b65a27be832828a1
SSDEEP 768:IcqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrXroE:IcqbUj+WvSCs6u1jaaZLbWrEE
TLSH
T104C2F93B340CCA7E4F801E9DDD5A6F972E9802C7A7588D4447FA994C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c4d87606fc794b180969f055588ba41853b9a7e5b712923c8b60207a5475ea67
MD5 a6fef0fad32fe98814e97115fde700c3
SHA1 73abbe9fcd0fede41c15ceab66cdd94c58d47811
SHA512 713b633d92f2c438d92b80128a3836baa04baae9c1c3b0bb7d1914317419a3c7f98ff80737ec8862e7d083cb89afbd1b60f9851f55e54c64914e75359a0d5ff8
SSDEEP 96:KcaEK3qu2FGK2gzy/Qc6MwjfA1SB0jKp6Buj9iq94QgQO70Y+IE:y71P1W
TLSH
T12591B34A343E8A702C7E644DA2A195270E423262701864BF7FB892661E7AE111CFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8ffa39794f0360b1dbc9d789f72a90122a00c7fa97310a0e3225f87303e04d41
MD5 4285d3ba439342d4c87c7f8a34e260c2
SHA1 88841adb7018208acec55a3a289d8215911124bd
SHA512 37a8918e19fc7765bbc36c1e560c66e252ac5af05a6f452dbbc5c80e96c99640c004b3237f7a356bacd3cdea5fe0cac7a81f583ecaca1c02bae739cda35ca187
SSDEEP 384:nZcIhsN8izYQPOEa+Rdrg+2zkrnTKwBODNZOCjKDr:Ph6fNasdglzkrnewBKZOoI
TLSH
T1D6927D725C786C779DE6B555F84735074FF89073E6C92BA4E6EDAB0C00E9698130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d91c1f61273dac37fd270fdf959791dd2e57713a0e8061d3c6d46e8e1e37b1ef
MD5 e932db469e229b042f68175ad1bb085e
SHA1 cfd83a1d8f8533ff945ee34fdff89c209b9d98aa
SHA512 ed1b6cebd410a7464a35116cfad9b706caf6a5c36ca3d3ff1f5db21432cfafeeb862ee3ec28827adf7c497796e0acd6a6212f3f7c4830459d8a696dddb592746
SSDEEP 384:8ZcIhsN8rzYQPOEa+Rdrg+2zkrnTKwBODNZOCjKDr:qhvfNasdglzkrnewBKZOoI
TLSH
T16A927CB16C786C779DE6B555F84735074FF89063E6C92BA4E6EDEB0C00E9698130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8222c531b7cff1521b5dda5df8d3bf4056dd97a2973229f3b63a926e5ef7f77e
MD5 ec7623175bba8acf2be0b503fab5bb32
SHA1 9c1513303b18852ea93eaf5ea930193b6c766e25
SHA512 24f5a2355c70f89fbf646b74ea90e4d1170342bbe33ad65dbe8e9d159d641bf10fea96b1954c8412385cf790ea1f7ccc62fdf71615da366a5e3b6bd882fce6b1
SSDEEP 384:9ZcI2gzsN8rzYQPOEa+Rdrg+2zNrnTKwBODNZOCjKDr:l3vfNasdglzNrnewBKZOoI
TLSH
T182927CB56C786C379DE6B555F84736074FF8A063E6C92B64E6EDAB0C00D969C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f560dad7fbd362445a05bf49bd53ad8afabbad457e36d9f5a2bb49a9f83ff32
MD5 a44b7107dd8ed2b6a84489ca2669b34a
SHA1 345405107cfc9e6069e84ec142de783640502269
SHA512 d10b0893fbef3e72bc8d3eabe5f1a5336b3483384b0c44f4fdb6966bd6128cbea2161353af6ff5b8d1df3d15f2b584c18386c195a14d588fce3d34fb70fde37a
SSDEEP 192:vON46Db6QmiUyGmHBa+j36+FdCuRgbvU6:vON46uSHBa+Rdm7U6
TLSH
T1A702D8356C786CB79EE26E49F48727275FE4203B99962B54DAD85F0C00D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1dad2722676e225902c6ace1e6b9917f98c2551be6af7f87047dc676894e520a
MD5 08c7f3927fc9144a1b42c54ab13c3198
SHA1 130d10d8d991fc668764d60d4fe1c8d1b36a51ce
SHA512 a247da6a3355730c42478bca7c693237b7e57b458f651241b8f399c31ecd3ebb278231ef01f1727534a284ee280b0d7787fa8130227f0796078b67cefb2333ba
SSDEEP 192:mONF6Db5QmiUyTmqBa+j36+FdCkQ60+2zAwNzGq/U6:mONF6frqBa+Rdrg+2zxrU6
TLSH
T1B11219366C786C7B8DE26954F48736139FE45127DA8E7BA1D6DC5F0C00EB66C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f009a3ad-24ef-4a00-b544-ba0760d161fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f009a3ad-24ef-4a00-b544-ba0760d161fa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04b33b2fe7ca0e9b6f3e8dde42c80413e6ca53639e257b24e709aa10af51dfdd
MD5 aa2f981aa63b3e3344850436b5ffc673
SHA1 d193b008b552a3f48a2afec9b3a448ec8631d788
SHA512 b72202f5f13031442322d359f755c89b4dc35f2e68ca2fb0884c9bc2d84edfaa175f6552ce729755810a64466d5d61a6e68807ecd7189ec708cc3faae819314d
TLSH
T127412668AAF91108F3B77F5A9BF2A5AD487BBC772E16D45E00120D4E0A22B00CC71737
MD5 SHA1 SHA512 TLSH

Submit Download