34f4b5a8771970e79c8623b590b976410fe8d6cc5ef3db5a72b1541d889907cf

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 67KB
Sample260809-pflb3axdpf
SHA256 34f4b5a8771970e79c8623b590b976410fe8d6cc5ef3db5a72b1541d889907cf
MD5 8e329bbc642d11b8aa2d8709856cbe5b
SHA1 c62e508225dac44df114fa4dbe6df01291852c6c
SHA512 5985e1c1ed047bd2e7c96b36b81ea47134db18aafdebe578c310cce984402d85e46165a54404d84661a6eaae70d4384a23066b11815fd8d0b0256c02b3e0d430
SSDEEP 1536:L6acmRiBmgT0cTrnbO27kF5ypDz1nT8xZMpm4wvSAIXuTVo6Yz:L6acmRiBmgT0cTrnbO27kF0oZMpm4wvi
TLSH
T1776385A157B04CF5797F833B5E44A2189627E902C90977E5B0F3D294758CEA60AE3B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4764	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307513852252651"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{AB4993F2-F1F8-487D-AFFB-2D38C418D027}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3440 wrote to memory of 408	3440	msedge.exe	85
PID 3440 wrote to memory of 3696	3440	msedge.exe	86
PID 3440 wrote to memory of 4764	3440	msedge.exe	87
PID 3440 wrote to memory of 3696	3440	msedge.exe	86
PID 3440 wrote to memory of 3696	3440	msedge.exe	86
PID 3440 wrote to memory of 3200	3440	msedge.exe	88
PID 3440 wrote to memory of 3200	3440	msedge.exe	88
PID 3440 wrote to memory of 2220	3440	msedge.exe	89
PID 3440 wrote to memory of 2220	3440	msedge.exe	89
PID 3440 wrote to memory of 2220	3440	msedge.exe	89
PID 3440 wrote to memory of 1436	3440	msedge.exe	90
PID 3440 wrote to memory of 1436	3440	msedge.exe	90
PID 3440 wrote to memory of 1436	3440	msedge.exe	90
PID 3440 wrote to memory of 4048	3440	msedge.exe	92
PID 3440 wrote to memory of 1560	3440	msedge.exe	91
PID 3440 wrote to memory of 4048	3440	msedge.exe	92
PID 3440 wrote to memory of 4048	3440	msedge.exe	92
PID 3440 wrote to memory of 1560	3440	msedge.exe	91
PID 3440 wrote to memory of 1560	3440	msedge.exe	91
PID 3440 wrote to memory of 2172	3440	msedge.exe	97
PID 3440 wrote to memory of 1092	3440	msedge.exe	98
PID 3440 wrote to memory of 2172	3440	msedge.exe	97
PID 3440 wrote to memory of 1092	3440	msedge.exe	98
PID 3440 wrote to memory of 4888	3440	msedge.exe	100
PID 3440 wrote to memory of 4936	3440	msedge.exe	104
PID 3440 wrote to memory of 3060	3440	msedge.exe	105
PID 3440 wrote to memory of 4892	3440	msedge.exe	106
PID 3440 wrote to memory of 3532	3440	msedge.exe	107
PID 3440 wrote to memory of 3532	3440	msedge.exe	107
PID 3440 wrote to memory of 1760	3440	msedge.exe	114
PID 3440 wrote to memory of 1760	3440	msedge.exe	114
PID 3440 wrote to memory of 1652	3440	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffcbbb9c188,0x7ffcbbb9c194,0x7ffcbbb9c1a0
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,13780208542500033407,10271392619509812494,262144 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,1022832420202209527,13435461141807410221,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,11080215914729611528,18286297358241142089,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=1932 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15517061413901320946,6496360356941994088,2097152 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,8264330834425703269,13504809670340359064,2097152 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,3349821559514205414,1799708932019538429,2097152 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,2692779124012925444,105315380928516157,2097152 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,4716462898660152371,17779168296758212408,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,3570180994759787449,10438584178111020203,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8837013985315525315,15945263478145102373,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8837013985315525315,15945263478145102373,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,5770215649086416554,4513879305132369915,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,15378820781830267776,714361593232144665,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,204797350221054949,238655921305826153,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,10863485439968756453,3211926067837671311,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,13535517947898946216,1609262407264420275,524288 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,13345524975928067475,12849311166944991956,262144 --field-trial-handle=2256,i,5349340790173492540,12469640278165189691,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 940d17921bde8de627e1df6a2514c8b3fa162d125a077e8179f39b5b8c9051cb
MD5 8f1976d278f5f3878b71e37366030520
SHA1 2e1a106c74408bccb299bfe5d6c47bfc6830d443
SHA512 8bfb55b62052ebb4ad84ddc2856f84c4fd88e93032fd4fe6b83405a4748dfa127f9c01d819995bc08a7b34a940622e650868f0b9546ac5df1bc6c24f7018fd3f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T1FAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 dcf0a07fbb2848d956e992d17c8f146c9a37e148f676e096c581f790a8b02d49
MD5 352f18ab580410d660afd2ccf94e40a0
SHA1 aa7971dbe33a1f3bfa4ddd11b0ec1faaa820ed3a
SHA512 05ba44b7f50676ddede6153e68140e56bb112930afb73de052a3160e9ec678abe75b95ee97b381ff0d3081a2da4fa474fd916e3a311fbd76a4eef43253bac39c
TLSH
T128E0D88C23B8C5F9094299C7F3787714C2907089BE5DC8ADF245688C754040293D48A4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a3fa8a5acc95a754f82bc0527ae1a83c2e2d0c2ea3cf2c5d431ced8333c868de
MD5 7f2578bd94b6186516dcf818912c3ac2
SHA1 ae08b88cae0f7785451b51fe44670ac4368ab8a1
SHA512 1491d831d87282bb5a37fad38a55532e47f1fd1f6d1bdc7cd94325982e4ed975635109e3f71a06336d78aeb5d5517e9540640105e7f33347c25493327acde77d
TLSH
T1DE712C2952FE075DF3262272F1D95A1434F3679B0E937D4E11A88F7C2536B348DE5809
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586973.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586973.TMP
Size 3KB
SHA256 4a1bf432b72744bc0df225a803df1f40b0fd9ddabea2a2b80a1bd51144e3b51f
MD5 92bd507c9815f336dffd3230873b6bba
SHA1 56ed111ff28d7e8a3e053194cefdb53cc9a1974a
SHA512 a12f7eeab43718ccf8d90442046789a0138a730513f1ce1dac9af1afd1fd3073f25c69b6232c46a7ac613b53054f086dc2173cb6f0e8d1f644e95e553afc16f5
TLSH
T198712A2952FE079DF3262232F1D95A1834F3679B0E937D4E10A88FBC2536B348DE5409
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6e32f210843520310da6afa8089bed1ba2134d83e5fa4881a11b194f46fb0d0a
MD5 69ec0a80c0824f53bb50839f881a320b
SHA1 17a1768312044e0c253195956df09513496c598e
SHA512 f33104defc92df67f4c8bc5e0c1733be5cc78a241b34fc241ad9118394fd36f7954539145de17209444a69db2e7882f8aabd27080c6aefbe555bbe4cb6627a7a
TLSH
T13A31ADB6C2D5877EC85516F09A25AE2ACD1D054A422C3C2AC9E5FF5B63F24B0E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 eadfdd52fdcec1af0eef7e4ba8cf9dbd6cf6f1080385fde8974b666c364def0a
MD5 b07d3e4bdff5f86ee40daadbdc3ff193
SHA1 77cbcb4d520caeff79299677361edcf76ba33bb5
SHA512 e02905a718f0adade27a8d81752b85bae114c4fbecb14761bfc060efa200386741c535b01c408c833674b02fb2761ac7f187c6bfc34cec0bf76b0bea85ac2de6
SSDEEP 192:sxZaR6yM/jK1Ml8MkZ/fesY6OBIdpdnHW6+WNGY4wjMyIgrJ:sxZaEMZ/fesYZq9HbG89
TLSH
T1F942C611AA34A977CCDBD30DFA55BF53D6F91462A2900D48A9FCD91C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6d749b24040f74dce6f9544454b9f71bff08ad59497877d5e7ec301e005bb63c
MD5 9b26cdd0026df20d7c6ab59c74995634
SHA1 66f1fa62954a4018d4b760b9c11ab6203a39d300
SHA512 3c0c2fa007bd9d5d497165c934c21ad16957cff9c606b251eca70d27aeb9a17b0c695d9dc4550fc0bdeb4cc8fabe7f823300ff786e7bde788c9c04f584ef8fa4
SSDEEP 192:sxZaR6yM/jK1Ml8UQckZ/fesE65tBIdpHnHW6+WNGY4x0AyIg59J:sxZaEqnZ/fesEStqHHbGY1
TLSH
T14F52D515AA349977CCDBD20DF955BF53D6F81472A2900E48A9FCDA1C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7d7959ecd16b801f4e995148f5e2dfbd7c5f7d4eff0dbb23f74e78ec98bcbd18
MD5 b36be635cd2b9395d5416ac07ef2703d
SHA1 155def81cff697254fcc8797df4d4c8b2c046e36
SHA512 889e8b26839c3bbe831b1f7ee1ea81994752c0201af7c5ae42bd0096ce220237ee46fe09da3a3701b0741d1aaadf74c2ce9d60c408542d83b9ab574f8ac6b191
SSDEEP 768:GI8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdproIkCUnf:GI8iJPNWvx76ru1jahALocdCGUf
TLSH
T137D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1074f7590f39bab3ce20a2cc85fe20ff40249a92249abf55a15965cbe0c5676f
MD5 7505305d1da942e4b26456a056315e6b
SHA1 657f8b363d8ded7d5d23c1491497153c7818d1da
SHA512 27f4a01d5a3ca39cb4fecea00f1c47baa6b372724c356b00d0e018f19c788c18ed49aa26d3fd5da2a24a386c5d5ca66e3d216fff4dbefba4e08391f0b7aa2923
SSDEEP 24:KdXfu1Mapdddt45V+AIjptKiahant1E/9SmHMC89WyXYtfo7Sa3df7z4Lv+CIjnK:K0YIjKlqcbyRyIfKnqonLIJKg4cbyr
TLSH
T18591670B70BF02513C3E685C92A58A1ACB8276A33158E42B7B7940F15F6BE254DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19c3bcb3-db18-4672-8b0d-8618faed59f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\19c3bcb3-db18-4672-8b0d-8618faed59f6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b434092bee3146dad8ced028b35ba6e49386f9bcb9bff6fecfaf69516bb2d073
MD5 885e84d1382c10c39cd477d5a75265b6
SHA1 570412fdbc2ed64fcb0173f43e2714deebf423eb
SHA512 39e0bf9c10cc960f13c20b410513b97e13a7a5c3efcb558c93e32a1405e906c2e32bf2f8e38c7c4ae6319f40050e9693e97e4efdb80dea7fe7d55d780e8ac124
SSDEEP 384:dZcIhsNDJFw1zW+zkywmf3vnTKwBODNZOC3Wy:Fh8wZDX3vnewBKZOCWy
TLSH
T1F0927E71683C6C7A9DE3B549F84B36078EF89067E7C42FA8D5EDA71C00D66981307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 38a838bf0375d1bc4d87679703e89a579a6ba3419f7fffe6fb2fc0e6d2d72fe3
MD5 6d56b5e3c39f1e51cecf979776eee4dd
SHA1 df6d03366b336398905b9b6406a7f629abf89ef9
SHA512 0a9ccce4f31b811b243e005e3ecab5133642fed35722c69a7ba4a0bf4f042779381d6a0fa4d42d56d9cc19eef289f8c75e55b18cb9287d9a85ad97df87004b87
SSDEEP 384:d1iFiZcIfzsNd8TUNTUlIliFw1zW+zkywmfWvnTKwBODNZOC3Wy:aFQbQwgMwZDXWvnewBKZOCWy
TLSH
T1EFA27E72587C987BAEE7AB45F94A32038EF49067D6C46BA4E7DDAA1C00D71D81307C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7d136710f38b61a114f087c69fb5b77587c06c6b801164a1d5ec944a31ed0191
MD5 3222351cb9910fa49d4d1735f84e9812
SHA1 b4f151468a6fd9a8325910f8494be4be67951813
SHA512 790e11be535d4f3cb31cbf6ecba2361b1f5b85da47b683ea76a6da8782150fb231127dca8f5125185d43827edea7ff652d422ac548e1d2eb48b16614571a54ee
SSDEEP 96:ZqONkrwQsjpfmUTmDK5ih/cIPURHl8h4otop5J5DtBhPwivh50xy0SFYKNAxOYo3:gONw6kDfQmiUybzZ903iow+Qio90oU6
TLSH
T18F02DA3568786CBB8EA36E49F44637275FA4116BEAC52F85DAE81B1C04D765C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a3451bbfa57e9f76aa9d43b30a07eb9c34699e5fc73c759ae6b887a608cd4e5
MD5 8e1128660e93f6f663a36aa1b05e240d
SHA1 a17974c800075b861548fb0eb2f74a76c9d57f2b
SHA512 8eaed495aecd2ae84f37b886ddf6d1ddbc74e06cdaca415b710cdf6b75d725cc424b1238918bcc217c414cdcf5a826fb30f9a3e23243fe8d67a8724b81e65760
SSDEEP 192:dONG6kpQmiUy8zh903iowmcEJncR0rqNU6:dONG6G/h9ywmfKvU6
TLSH
T1AF12393264786C7F9DE3A946F48736138EA48127EBC97FD1D5E8261C05DB29C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3717a0b406036037698157f3c097e9ac10adb9ffc603db0c13d514a6f0305a93
MD5 dfd4886b84d1d3e25a0a4985e3620f67
SHA1 431906d813ef1d4ceb461e9c54ef21e10fec8e15
SHA512 17883cab9e9ece3fed19b0e4991604bba8ca59d02399856dba2a305f908f7c224563b5e70cf119a8785cb711862d1ab32141e273d3ebfb7eaffd755c6dd7fe0c
SSDEEP 384:QZcIhsNDiFw1zW+zkywmf3vnTKwBODNZOC3Wy:uhLwZDX3vnewBKZOCWy
TLSH
T1E4927E71683C6C7A9DE3B549F84B36078EF89067E7C42FA4D6EDAB1C00D66981307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95cc3ebb-cdfd-4e7f-a164-1e81ddaddfd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\95cc3ebb-cdfd-4e7f-a164-1e81ddaddfd5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4238b8fd8be526d060df2d8a5a823fda9ee6a0ec64626c5c9f019876a1c27098
MD5 20f69f4fc8419587e1daa622248910c4
SHA1 2cdf644e3a541eb2105cf2065c41935580a1e420
SHA512 dd43258e1577661e031cef8a25656fa12a0935ab1578f6cf65b02e44ad0f8f33e1bbb6bfd06d98e3336f6b35438a0c3b0d9ec51aef3f2ebc187f548c2952ac80
TLSH
T11A41E658BAEA1104B3B76E5AAFF6A86D487A7C372E4A955E00110D4F4632B40DC72737
MD5 SHA1 SHA512 TLSH

Submit Download