11245a826c0c8c449782f306ed023dd21a107faa3d5049013139bdb9e8ceb22c

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 45KB
Sample260809-ajf47a1sfx
SHA256 11245a826c0c8c449782f306ed023dd21a107faa3d5049013139bdb9e8ceb22c
MD5 4a37bdcfefc8b21f6e5dff89c10cde29
SHA1 7f878abd5eb4819c593c50ede678c6ecf9517ad1
SHA512 96849f298adb3038d78a3c3a4e30050d9efb1c6da22dfca71d905acc643bf056a6a6a74d55e495f2045f70fa592f3a67cd5b9b8b789bcc54c6da9a82ee81a18b
SSDEEP 384:sDPmFa4r/ZdSZUaAfkWUAZOWVQqxEHkN8tRrHWRY+70u1l3qtaqtHqtRqtoqtSpv:gP8Zdyp6UAgwQrcVNuonjg6dJ+b0vLB5
TLSH
T12623EBF2554C147B3A5A9FA9A064F318E1A7E634DF059A9AB2F66058C7C0FB3097331C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5068	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307080673828079"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F59256D6-36B6-4B4F-8E82-17451A05FB5D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 2472	4308	msedge.exe	86
PID 4308 wrote to memory of 5068	4308	msedge.exe	87
PID 4308 wrote to memory of 3080	4308	msedge.exe	88
PID 4308 wrote to memory of 3080	4308	msedge.exe	88
PID 4308 wrote to memory of 3080	4308	msedge.exe	88
PID 4308 wrote to memory of 5072	4308	msedge.exe	89
PID 4308 wrote to memory of 5072	4308	msedge.exe	89
PID 4308 wrote to memory of 2056	4308	msedge.exe	91
PID 4308 wrote to memory of 4528	4308	msedge.exe	92
PID 4308 wrote to memory of 2056	4308	msedge.exe	91
PID 4308 wrote to memory of 2056	4308	msedge.exe	91
PID 4308 wrote to memory of 4528	4308	msedge.exe	92
PID 4308 wrote to memory of 4528	4308	msedge.exe	92
PID 4308 wrote to memory of 2656	4308	msedge.exe	93
PID 4308 wrote to memory of 2656	4308	msedge.exe	93
PID 4308 wrote to memory of 2656	4308	msedge.exe	93
PID 4308 wrote to memory of 2260	4308	msedge.exe	94
PID 4308 wrote to memory of 2260	4308	msedge.exe	94
PID 4308 wrote to memory of 2260	4308	msedge.exe	94
PID 4308 wrote to memory of 3896	4308	msedge.exe	98
PID 4308 wrote to memory of 3896	4308	msedge.exe	98
PID 4308 wrote to memory of 1684	4308	msedge.exe	99
PID 4308 wrote to memory of 1684	4308	msedge.exe	99
PID 4308 wrote to memory of 1376	4308	msedge.exe	101
PID 4308 wrote to memory of 2148	4308	msedge.exe	104
PID 4308 wrote to memory of 4920	4308	msedge.exe	105
PID 4308 wrote to memory of 4488	4308	msedge.exe	106
PID 4308 wrote to memory of 4224	4308	msedge.exe	114
PID 4308 wrote to memory of 4224	4308	msedge.exe	114
PID 4308 wrote to memory of 4256	4308	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff88f74c188,0x7ff88f74c194,0x7ff88f74c1a0
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,4877399990943334584,6167338728905543200,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,4448454217961290614,6275175996605989238,262144 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,2794053976430748583,9797592109293216738,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,4557102794924470188,9995462576490765737,2097152 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,3932402802720592691,3301888926651321993,2097152 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,12238508628934103420,16709705894410040888,2097152 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,11299041152216670633,15401539089931710191,2097152 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,16712232844507939754,12463603243068300533,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,11924499228992063946,15696310749776043222,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,17047737977552937059,1420604103542649615,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,17047737977552937059,1420604103542649615,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,9095508610285643739,16698095729869737359,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,3383420133008547942,13256434754836783631,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,7853441350740166809,14410090620911890469,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,3306067211298643852,13857160416831018629,524288 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,10446247771327614250,12771245417333331168,262144 --field-trial-handle=2232,i,4204540395888061464,5254926856816410734,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ed54168e9bd9b049b307ad0198c8ff96fedc239690683bbbe954b5b6ccc78d1e
MD5 e13f095bcb4b9c0f4556bd8310cd4c8b
SHA1 6f2ae1857ed820a530bece8a02541eb1eb26db43
SHA512 391fa95533bb7b534e5cf1ef628f7178db1ff4a768c5f98f0211d091434bef89f8aadb2e77a3b24168c58577d469227622dd559bec9b2751e416ce9e380714f1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T123B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e405f5e7ae53d99a9a8f62f004e8367e27c4725c22e033448b908854ff0522bc
MD5 3bde032ec2c3e40252e59dcfa28dc7de
SHA1 d5d0436c5dccec3a4acbc36ff5a97c9ca64efa96
SHA512 1059043f70ad87481d2486db7531cb7c45b5fdfbd8154bcdfa85801124d3ebeeadcaed96ccdd808ce8e7c5477a3f7086af51ceb878d8733d0fb9361389324c8c
TLSH
T172613B3501A113A5D7900572D0E36E0139738DD94EA7CF2E527FA7FDE635BA24C2E058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589d83.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589d83.TMP
Size 3KB
SHA256 0eaa42d37fb75158b8ecb40fba9f5ff75021ece8d2017e980dbc847d12dabaf4
MD5 87c58a268c0b5dee0f92d061eefceff9
SHA1 2aca8301f5ef12e28655f0a44509e0a1b0d3d151
SHA512 a676fda2e14c7016fcd5f14f19c2815d77029905aee4e151f978cf9b01782b82ff945c62242e62293bace00d0f779ba6a3ebdde8fb75f79b88365e7960e6d569
TLSH
T12C613B3402A113A1D3500672D0E36E0539738DD94EA7CF2E567F97FDE635BA24C2E048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 40d431e034d7af8372fae1db93353f1c6953ad256ce424e7c5bc7dea4159c60f
MD5 f10e8d9e00f34f3a10a81881df3da631
SHA1 bdf84da8b1f6423aeab4f637324d37be4f9f7789
SHA512 fc7a416b4d1d59b5e15a8dbd79ad1dd7a9d7df9eb04390a0fbcb683c2b71ee69a174e06676c25db70bebb12f8d21a839a51e342b5bea139878fb1a3a3f43a226
TLSH
T173117DF3C3E5856E891116F05A24AE2BCE2D0615821C7C29C9D4FF2BE3E3075D00195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 eb26039fce9c450395a36516e0841686820687b94f2a4ee8abfa921e9c0e96ea
MD5 b5b3cbc32cce09275dddf633c559ff74
SHA1 28a385c79f14dca810a275414d0772e1bc25af8f
SHA512 1085f71883632ba70e185efe400187baebbf364ffa224b0cf64b1ba5a2f125f91e2182e0955930644fc77c2d9e0a1e5c1ee1f05188828289df211f0d9d1c30a0
SSDEEP 192:sxZ1RlyM/jK1Ml8MkO/fpsb0aDxIdpdSHW6+WNGYwKB2UIgrJ:sxZ19MO/fpsoQ6EHbGk9
TLSH
T19542F8116B34A977CCDBD209BA55BB53D6F91433A2900E54AAFCDA0C04E6AEC230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ccbd23231471c985336d74002b86effbedbca6f09205583ae5487629105980ef
MD5 71091df858f6807d2f2ddbc9a5add1db
SHA1 215f4c4cfff3a1997593bd8b30c341ec7345ca81
SHA512 6260639dc7517dcd656ff852b6ad59196a561235714269f8d104380f335ecce3fd46685d1bd680b65ba8a1752d513569d6571a64f405226668f8175c09721869
SSDEEP 192:sxZzRlyM/jK1Ml8UQQkO/fpsK0aZiIdpHSHW6+WNGYwAi3UIg5QJ:sxZz/qjO/fps9+LyHbGQK
TLSH
T19852F7116A349977CCDBD209BA41BF53D6F5143392901E54AAFCDA0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0f569c3dd42509d34123c64d68880b0b3443c14911359311b57fc284f9f750ef
MD5 6db622b575cafa64d0623136c81594e1
SHA1 86618b2337e74f813f14fef06f2df5208b0d0e0b
SHA512 947e2c3c7d0e3b1374b75e86971ebccedf2df22ddcd759e9fa3668e6423fd2b000843289a084ecc0e167fdb7d627fd905d3e1434db6addf02a492bbc5250f53c
SSDEEP 192:sxZzRlyM/jK1Ml8MkO/fpsK0aZiIdpHSHW6+WNGYwAi3UIg5QJ:sxZz/MO/fps9+LyHbGQK
TLSH
T1AD52F711AA349977CCDBD209BA41BF53D6F9143392901E54AAFCDA0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d16b18d3a118f960166c946eee370ec6bc596e89a6e1de5d7034f0ca3a28e3b9
MD5 23a9691925292783032f43ee244322ba
SHA1 214bdd256914326e636736bb8ab8eade214f1e24
SHA512 dd3346a2c8b3a6ed916299b40fc8d2313185794798c3f19d3a40e5ea626c0b8c36714158eb861050c141625e38814122ef2d5d94524bc174cac850e8384d2f30
SSDEEP 192:sxZzRlyM/jK1Ml8MkO/fpsK0aZiIdpHSHW6+WNGYwAi3UIg5QJ:sxZz9MO/fps9+LyHbGQK
TLSH
T17652E711AA349977CCDBD209BA45BF53D6F9143392901E54AAFCDA0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d5e5a20de4159c8d267c5f44ab844d9009b1b94da930d9a5da3c80cb69f1a632
MD5 e2bdcd5e23637d0092f468c20c8c7edf
SHA1 bdfa4d58c1420e1060559271a065f28737ae7558
SHA512 8ecf5215863fab989f35940a0aa7ab4236d16c1990c9b0c40703b7e282ec57ba2b60c446caa133b5b9dd657da4eaf0e549d8ecb64a154cd9ea154ef20c33212f
SSDEEP 768:3o4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dArohHcgann:3o4jeXmWvmKLEu1jacPLZQdLCT
TLSH
T125D20A2B240CCF7E4F844E5DEC2AAE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 44cebf4c5d71d0cee1a8b07ff61c5feb218614710f92b8225aac5aacdbad4ec6
MD5 4ba55c6f560f253b898a23cd898bafa1
SHA1 75204fc89773d919004784c2349e0d46e401c26c
SHA512 0597c87fd7b5bcfa2c94d6046af784d8c26af231ac9214188a246046b5916e1f2f18c12f11a19578967cab28d8f37c040dbdcb69279e53287ad78b3f350d8064
SSDEEP 24:KdQf3kVaadCC+4SO+lIjY+Kitham+1EwuSmEMt8ofyXYiflO/aUdo0Q4gM+DIjK8:KAJIdKawQvy1bI1KYcgMEIzKZy0zy0
TLSH
T19491A04170BB06423DBE6B0C9394CA6A97427463341CA52B7BEA40B21F6BE650DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593937.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593937.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 194234670a8bcb9b629dd8876bd12d541b6adb4e164981eeb4fe8235372206ee
MD5 d14e3339f999705680c6cf7c39e99a11
SHA1 32bab3f1da73b27a0b9554f5d58bc353fac7bb1d
SHA512 abba25a082d2d0c443c0896693c1b21f9ed69c5a0f35089a67c92da413b63eb1ada698fcf0513baa30d1c05a8141fbe0b435021d4415d8d88a062ced07175193
SSDEEP 384:OZcIhsNKdxOpOf+DO5YShxJr1FpnTKwBODNZOCAKDh:shs+WONThvpnewBKZO3q
TLSH
T1A5928D716838AC778DE6A545F84735138EF89163E9D43FA8E6ED7F2D00D669C130AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 37138e65ea4e98ee6e890c13a810a016a834fdf59dfe7c05a0cb0c01e27ea2c2
MD5 f45cb6a8fa6e511cfcbe10f018109017
SHA1 02504b05fa542eb3503c601ba740fc70806daa97
SHA512 c6d5a177ca752b358c7feae718f423fcbd44e4560e4a56a75e806cf205ae7ba0696ea3cc68c3141235c12aa6bdc8dc0febaaf83c461b3a1fd8ce0980e8443016
SSDEEP 384:yiFiZcIn6zsNS8TUNTUlIlIxOpOf+DO5YShxJrxFpnTKwBODNZOCAKDh:5FQSnwgp+WONThLpnewBKZO3q
TLSH
T193A27C725868DC7B9EE6AA85F94A31038EF450A3E9D57AA4E7DD6F1C009719C130AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 209a8bd1505a24a5448917188f2e3c635feb30c9a7434f908dd070b3fc676611
MD5 a482f17ce9daf5031584a5233e6bb478
SHA1 0529b52a8205280c7f96b92bef4a831e2c7eba0f
SHA512 ac3d84bec0ed3a73453916040c26fbc8668c89cc9d57f1d034ac3142e1c2a15fd5219a4f3cf7d42ae8d7fb238552ec1c0a69a705e627b6d386aafde8a2d3a4c0
SSDEEP 384:AZcIhsNKIxOpOf+DO5YShxJr1FpnTKwBODNZOCAKDh:+hR+WONThvpnewBKZO3q
TLSH
T11F927D7168389C778DE6A545F84735138EF89063E9D53FA8E6ED7B2D00D669C130AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11ec3d5564151cf1ade5a0000930733804f9f691d306ec2eb2638e7efc0506e0
MD5 fe7ec198ae2b57cf6bc41bdf9d3398b1
SHA1 006771634e19657342bc66b072158136363e5a3e
SHA512 1e691b875bc138edd8fb3b442277072636e8d254d6543d6f4d254c4eafb081ce2439a6d5d651852cabd22e71e1bbc1552ca1ac2d9def4142fb392111ce0c361b
SSDEEP 192:EONt6hZ0QmiUy2YXpc/+jVlO1TY55wOZanU6:EONt6oCpu+DO5YA2YU6
TLSH
T10D02E93568686C778EE2AE45F48777235FE4112BE9956F84E6E82B1D00C779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 50aa3e732fcea8a42a52b034c73e2929ffcbed11a4fe3be30d9b0d735727bb03
MD5 6458872ecb46000252a37f3ce305de6c
SHA1 b0411655c6343c3dca2dec08e7b890eea77ff723
SHA512 855279c977d10d18e09fbd274afd8ba18b1f815beba7566665e749030575602c60f20491426184bc31679b972b2fef6ac6d94fc58ccf21575e6e6a403713c261
SSDEEP 192:HON76hZyQmiUy2QXqc/+jVlO1TYSbFuSJry5cOqxq4U6:HON76aGqu+DO5YShxJr99pU6
TLSH
T167121A356868AC374DE2A581F48736138EE5512BED85BFD4E6DC3F1C00DB6AC234AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de778473-398e-437f-9127-448c275f7ac8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\de778473-398e-437f-9127-448c275f7ac8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a6b5c2545ca5df1069429a4a79eeab4658514d4fe2c36fec6f654f340c7e8b62
MD5 a4ff62c86621dcd2ad85288fd517cec5
SHA1 bb027b4cfdfe05bd47630ae87171c2533fcad923
SHA512 2437d47c58a1aca34a270e10cde82b741c2394a743f23b404fefdb37c451117fdc767a25c4475836982093861f3443f24e9ada95e13b6dd5cc4f9a623b76b53c
TLSH
T162410C5CAAED0144B3B7AE16AFF2A46E487A7D771E06955D10510F4E4A33A40C872B37
MD5 SHA1 SHA512 TLSH

Submit Download