8581c14070415b87e440c1119f77e14902ba8cadfeab07d6712bfb5f24328138

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 67KB
Sample260809-ph8v5sen5x
SHA256 8581c14070415b87e440c1119f77e14902ba8cadfeab07d6712bfb5f24328138
MD5 1be601ccbc086f03b077f100db8b91b2
SHA1 0524961a4de3556a1c7be6d24ba4a072b1e8cb27
SHA512 8d263b8c3a746f10d7b6d0a0fec348c2e12a535e901675137262e565378c8f640a06e7c78f608ca85d6e6dfc569df9a3f4a7357c506929410d43a8e777c88d4e
SSDEEP 1536:GnvP0f/Nwp6yO6n6Dvu6e6316dA/6s65q6b6ga6d6l0Q6V6cgw666wGEwEyA:+P0fFw7soAeVyI
TLSH
T11B6332AA929A2033543232414D950AF5FF85C237D78983553ABE0B875FF690CC47BDBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4944	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307516603197440"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{36F302EA-3FF7-4462-A22B-6ED0DD9D35BB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
672	msedge.exe
672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1572 wrote to memory of 2788	1572	msedge.exe	86
PID 1572 wrote to memory of 4944	1572	msedge.exe	87
PID 1572 wrote to memory of 1500	1572	msedge.exe	88
PID 1572 wrote to memory of 1500	1572	msedge.exe	88
PID 1572 wrote to memory of 1500	1572	msedge.exe	88
PID 1572 wrote to memory of 1288	1572	msedge.exe	90
PID 1572 wrote to memory of 1288	1572	msedge.exe	90
PID 1572 wrote to memory of 3716	1572	msedge.exe	91
PID 1572 wrote to memory of 3716	1572	msedge.exe	91
PID 1572 wrote to memory of 3716	1572	msedge.exe	91
PID 1572 wrote to memory of 3636	1572	msedge.exe	92
PID 1572 wrote to memory of 3636	1572	msedge.exe	92
PID 1572 wrote to memory of 3636	1572	msedge.exe	92
PID 1572 wrote to memory of 1532	1572	msedge.exe	93
PID 1572 wrote to memory of 1532	1572	msedge.exe	93
PID 1572 wrote to memory of 1532	1572	msedge.exe	93
PID 1572 wrote to memory of 3036	1572	msedge.exe	94
PID 1572 wrote to memory of 3036	1572	msedge.exe	94
PID 1572 wrote to memory of 3036	1572	msedge.exe	94
PID 1572 wrote to memory of 1200	1572	msedge.exe	98
PID 1572 wrote to memory of 1200	1572	msedge.exe	98
PID 1572 wrote to memory of 3344	1572	msedge.exe	99
PID 1572 wrote to memory of 3344	1572	msedge.exe	99
PID 1572 wrote to memory of 5024	1572	msedge.exe	101
PID 1572 wrote to memory of 4960	1572	msedge.exe	115
PID 1572 wrote to memory of 960	1572	msedge.exe	116
PID 1572 wrote to memory of 4612	1572	msedge.exe	117
PID 1572 wrote to memory of 1348	1572	msedge.exe	118
PID 1572 wrote to memory of 1348	1572	msedge.exe	118
PID 1572 wrote to memory of 2184	1572	msedge.exe	120
PID 1572 wrote to memory of 2184	1572	msedge.exe	120
PID 1572 wrote to memory of 644	1572	msedge.exe	121
PID 1572 wrote to memory of 644	1572	msedge.exe	121
PID 1572 wrote to memory of 672	1572	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x244,0x248,0x24c,0x240,0x2a8,0x7ffd51ddc188,0x7ffd51ddc194,0x7ffd51ddc1a0
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,6352364288092371905,17637857921128587676,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,12100010440497846311,8611706037011595563,262144 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,6385982703741364459,17382546273747262366,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,11850029121801234048,17389729204878353321,2097152 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,2764131613790259048,5135738730308648992,2097152 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,8231874238088023513,14825032537895378967,2097152 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4044,i,9268754516689923516,124413307723811399,2097152 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,10931411491482817854,16129580263428182532,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,11931663366671282438,16042417164102809690,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,8327689837063301102,4905592321056929298,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,8327689837063301102,4905592321056929298,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,16356772872177529267,4424892682691702951,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=572 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,1742074933914031980,11522404169922841402,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,12426809139027345516,16995103103487691119,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,11111048430610526197,13203619167868889470,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,2284041890526191866,13970193010219716102,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,5411349102832932921,6691526517408486200,524288 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,7274331434933808670,13169008958943846202,262144 --field-trial-handle=2292,i,16508033469748105728,15280930804571212185,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:672

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6130c8553b6b7a2db7b2e45115438707d58889218f67855fd135e735b457363a
MD5 12be8df10fec41dbf27a25c1c279b0c1
SHA1 33b90875d0895cce19bba03a50342a2ac338b0cf
SHA512 048871038871b434c649aecafc4bbbe60a8a78f34616d97c98e037db9c3622825294e8f24d0f7f5626a5b30b862451ae61f9803a791c84140586e516e5f58d6d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T136B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 f41e8f3bbdee0d285c23d9ff3421933cee93e5e01ef6117dc4c5209d6534e65a
MD5 7800ae28791b54f8dd04ddea8c2280f6
SHA1 8158d68f00c6beefe6da1f79a392506a670e90f0
SHA512 236e98b440c706f4053a11a55a87649efc480254cdce2812a7254663a7ccc41721a6b68711c96eed5d05c790a6d6e045f1a41e33611d6d92a1018c6f28192101
TLSH
T135E0D8DF56E8C99D4D02A547B06E7F14C892700FDF4CC4DE2A04B5C6964040463CDAAA
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 39319e77f3b695bf717b671f5543efe0346ea6e3e0301a2095bbc650e2b54b7f
MD5 0e5cea5d04f11bfb65ae72fe685e6c74
SHA1 5b4a4e324e39de866069b736f3c8aca6519910d8
SHA512 2c128eb80a9e021cd726d0a0dff7be421e4b46d5fc041d0b15652ae228995f0178a8c94cfa8969dcbff8e77a8eda2fa192d48898836479cc3678aeeb48f0cfd6
TLSH
T1F7812F35028E0091C75EA2B9FFC10300F772A2EBFF97AD76C492A97C980375C850AC46
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585196.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585196.TMP
Size 3KB
SHA256 a01d7c3bf3f478fdc21e9893528b4ac3a9b3b82a212f4c8be674f556bff2fb90
MD5 57c6b57a4149efff9d8a727e2f73b3f3
SHA1 f47e5d63f030ff8bc3bd3beda6248b28d575f64d
SHA512 1b448ad85844117a16df9970be936e442f4636ffaf43f407bb62cc9b95b8dfea7be43cc7ef279978b5d2fc1572f18ef3d6900b03fa09fa619906bf1412e57e6c
TLSH
T12D811E35028E0091C75DA1B9FFC10300F772A2EBFF97AD76C492997C990375C890AC45
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a2ab3f4fb83c6f127612b1d719ace0c28210331fdd14a93b0369768156709bee
MD5 d56342db0b68555bc027adb9ecf0b83c
SHA1 23f6b9432d8a1ba221c505f0d33ca6b17bdb7a34
SHA512 ebcc8456c0ef269c8b8eb3023f12e0c88f8ea562593148eeb87cae80fa228769a43ba5352ab101878077a6a72d1669b58652a7f5511935ce8234efadcf00d29d
TLSH
T11E117DB3C3E5856E8A1516F05A24EE2BCE2D0506421C7C19C9D4FF6793E3475D00295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8259d941ab59f4298afd0bf81d8e7f51fc3f748f27ee9f3b0c54b7136b326aa4
MD5 7c6456590113e700877d5e1b1c92b7a7
SHA1 4d491da3e729cd05ecb582205eb8899b591debd2
SHA512 3a634136532db3b709b73f19fd06298607b04e16090bd663170b2f0236cba1d4ebfa94a8facf8264c9a71d663c1537b5e6b8a3be6c93fbcd770107da92679883
SSDEEP 192:sxZDRvyM/jK1Ml8Mky/fgs/xQyXIdpd1HW6+WNGYzQDNOIgrJ:sxZDtMy/fgs/xQZnHbGs9
TLSH
T1E942E7116A34A97BCCDBD20DBA55BF53D6F9046292940E44A9FCDA1C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5bfb81e25af67924262d6f33d41cde4253410f9740ced02809cd014581095994
MD5 c32fb526e867e623ed7333f98918a951
SHA1 06a320c167be370a8bfa76282e5d98ff9925ae12
SHA512 0c5e7db28c6be3cd0c111ab9e58d98c8c11171285ed2a62e1a1678bfed80606f7fb33cb7d25f83890b12d05889d7eef93e2eb7366854051acb190f7a62d4542b
SSDEEP 192:sxZDRvyM/jK1Ml8UQ9ky/fgs5LNCQyXIdpH1HW6+WNGYzHSNOIg5hJ:sxZDtqWy/fgshYQZVHbGeF
TLSH
T17152D711AA349977CCDBD20DFA51BF53D6F8047292940E44AAFCDA1C00E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7ded57cb5a8f86bc799cb5ce4f6f41b0ee5f668ceeda71376d06b6fc06792b6e
MD5 5d5023fb9bcabcc53b58dd36803b5059
SHA1 6a319e415f2394a892516b1f2a465b0c4c066772
SHA512 d69bc74076879444177dab9e191e63969712470bfdd41667d2622109eb5da27e32f68bedcf6cbdce87f031f810e4ba0d9ffc3e89c84443f1274fca485c3bc4ee
SSDEEP 768:VwW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjeroI3i/Y+:VwW7kf0Wvqidau1jaa5LA3j1I+
TLSH
T1CED2FA3B680CCB7E4F841E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2781d9dae388058d8d0e73524d566aec144bb99384c7c825da45bbbeb3518ce
MD5 63a50de44b960708abed28e1fb65f018
SHA1 e69ca2d9d82a619887773a213feb446cd1bc5610
SHA512 7cec8913c18a495a56a8118c96860cab7febc3f462a64dd10d777054362ab20cb711375648d895090f13fe77e3af083d323b268928fe392d3863fb78b66b63ae
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbaIfK/qA7yy0TwkaeykCehPIhckK4BQSkME0jBaxfKZ:KIbCKcba0K/qmOVGKmcxogKh7
TLSH
T186913043743E4612387E2808A67685668E4272A33469A8FF7BB904611F77F150DFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 447b57d1aac901a72531f57fd48480b039f5e8ac1f5f9429727e06b281116793
MD5 64ba08bfd4fb031cd38edace51619419
SHA1 06add84f4270b9103934ad3c871e1e4758c09882
SHA512 ae97a9b6841944a626501f56aae9a8009f63c95358440a6a65a9759f34650644054f496fcb9204feed274db631189d13ffc75a1d2e3024df7581c922b4de0fe4
SSDEEP 192:uHLsNb1QQWsHBbWrQmiU1eip4aGBPKnn+FdGN9Q8XFC1SJrgdNkq+ZjqCcE:6sNb1hWshbiH23dMjCEJraw3cE
TLSH
T10E422A36AC74AC3759A2B255F54A36039EF84167E6C82F64E6DDAB0C01DF3AC2317C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b769dceb886e27f602b1627be32a85a9222303fc164aaa1d0eae014c15ca614b
MD5 9c6b06e290ef0cdcb4f7f2b739841f8b
SHA1 ade05fde918a2bd7b6e5fa1138504f5bd9ea746e
SHA512 77f3becac6ec0fe5e95a4530bb3fedd6cb67a34c84acd2bd526689a84fa854e39b27b8a86664ab8258ec75d86ae8ab6df9fdae040444f0a48df3b81c5a094f5d
SSDEEP 384:YqZcI/zsNblhWshbiH23dMjCEJrLwnTKwBODNZOCYKDW:77Dshwk6hLwnewBKZO7N
TLSH
T1FE928D719C78AC379DA2B155F84676075EF84073F6C82E68E6EDBB1C00EA69C2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 418d1c3c30659627d1381c9e11b7c419759f86b6cd4a3190b7f3baf5b5dcbbbc
MD5 bb5b75861bb7ed03ce7e5145fd5cd057
SHA1 a919b98a650c29de6403a4a2cbf471f3dea279e0
SHA512 9b7d3d714968a091d485a64fef2d7e005de9ce82ae837edef91a7927386717fc438dbc971182d5e56918952817c6c3a0183c20f1bb8b7dbf838f5cf6aa252f55
SSDEEP 192:MONt64BAQmiUyl1kW5GBPKnn+FdGN9Q1aDTT8U6:MONt6eA6OWMdMR38U6
TLSH
T17A02F935AC796C7B9EB2BE45F4863B176FD8103BE6945B54E6E86B0C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 9df8d0ced432097ec09c7c46d90ef376fa036fe04b88b6332b4a2a4494f7a1aa
MD5 292be3ae4f697918a35cd7075014641a
SHA1 48255715423e3b738854e86b9046cc4ad67d07d4
SHA512 83a1e738cdb9c48f63ad916e834eaaaabf5d5d70af7f74aeaadc2c1d5e89ff3d964f170a9a6aeadac9f57683ba9d20fd857d6ac662aaa47f72129416b9925afe
SSDEEP 384:VsNbEhWshbiH23dMjCEJrawnTKwBODNZOCYKD9:VYshwk6hawnewBKZO70
TLSH
T12A725B759C79AC778D92B155F44A36039EF84077F6C82E64E7EDAB1C01EA69C2307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4bc71708142f03e962f3d1e314823f956768b1ca691498bdd4943685fc9b3ec5
MD5 867fb884beed6e541505f1971c153125
SHA1 0ab6a89b9088211747a9a91d5339479077ceee3a
SHA512 4c64e2fbd989b94502cc86762f129ed1c8c173a3cf744870e600499cb7f079e1484fbdabdc216d61300168d1c94f97758c3bc6257c2fcbeab00ff63c9bc67e65
SSDEEP 384:aZcIhsNblhWshbiH23dMjCEJrawnTKwBODNZOCYKDW:YhDshwk6hawnewBKZO7N
TLSH
T131928D719C79AC379DA2B155F84676075EF88073F6C82F64E6EDBB1C01EA6982307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 76d3d07cb6627fd2fa261525d316594e67df8830e1c8a2b33076e3189d5f0ca1
MD5 399bcb16b2066caf546232ea3f65ef85
SHA1 1adc565c11d9227d773e98193d659e5b10c968ed
SHA512 8f2e6f4ac626a00a8e875196f827e8a31c3fe1f5aaac4d941778caca08d9c769fe2f4db9093d80fc950be0db6ae1b7637be4e6e2984d4f1134b1c79d100a9968
SSDEEP 192:tONe64BJQmiUyLki5GBPKnn+FdGN9Q8XFC1SJr1Wwkq+ZU6:tONe6enJiMdMjCEJr5wU6
TLSH
T15E120A31A875AC3B5D92B555F48736035EE44127EB897F90E6EC6A1C01EF69C2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75351e15-6ed3-4f57-aa8f-879d6d69a0fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\75351e15-6ed3-4f57-aa8f-879d6d69a0fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 777bdc640811f8722433312052a79c778416b6ce7b7d69929f6d935b16b6f179
MD5 3c7118c369c902ffcaeb7ac9de4c8c98
SHA1 a4efb3a9341c8a21197c2a711f7a9f7cdea3addb
SHA512 8a1774bba8bf075f5680a64406899b7d40f80c9958a4c26cefa1c673697269181ec25ea22439d94cdda9a02f64284011306f7455989e233eec0d6f9278c80589
TLSH
T194413658B6E91149B3B36E4E9BF6A86E487FBD372E06D45E00110E4F0A22F40C961777
MD5 SHA1 SHA512 TLSH

Submit Download