0201ffec95bb0971c028b3fb69c1a6d24a6d6aebe8b6d9f85e151213dadb5929

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 30KB
Sample260816-ppwt6aar5v
SHA256 0201ffec95bb0971c028b3fb69c1a6d24a6d6aebe8b6d9f85e151213dadb5929
MD5 7afb0420d8fadbfc6b490ed91d696439
SHA1 23c8cfc925671a7671a1081d52f1909e544c21e2
SHA512 d84b2f6ef81f13b647450dcc42f9b29e371b3265e640f3a4b113980958c644f0c842a59d49ebf76aa4465fdb7aaad4dff8215f2f412d25ba5d5e737a2f213f0e
SSDEEP 768:mR/W8Zdyp6AX4c8Q8OZEr48F+iNrJ+b0vLBkx6y:EnypInOar4FORkxH
TLSH
T12AD2F931A1DD00673F5EC7AD8170B31DF56A9635D706BBA5F0FA20689694CF202B721E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4528	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313570861681406"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{47ECF47C-6112-4266-871B-C55B5EDEB47C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5048	msedge.exe
5048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 4904	4460	msedge.exe	85
PID 4460 wrote to memory of 3940	4460	msedge.exe	87
PID 4460 wrote to memory of 4528	4460	msedge.exe	86
PID 4460 wrote to memory of 3940	4460	msedge.exe	87
PID 4460 wrote to memory of 3940	4460	msedge.exe	87
PID 4460 wrote to memory of 3820	4460	msedge.exe	89
PID 4460 wrote to memory of 3820	4460	msedge.exe	89
PID 4460 wrote to memory of 1980	4460	msedge.exe	90
PID 4460 wrote to memory of 4192	4460	msedge.exe	91
PID 4460 wrote to memory of 1980	4460	msedge.exe	90
PID 4460 wrote to memory of 1980	4460	msedge.exe	90
PID 4460 wrote to memory of 4192	4460	msedge.exe	91
PID 4460 wrote to memory of 4192	4460	msedge.exe	91
PID 4460 wrote to memory of 3040	4460	msedge.exe	92
PID 4460 wrote to memory of 3040	4460	msedge.exe	92
PID 4460 wrote to memory of 3040	4460	msedge.exe	92
PID 4460 wrote to memory of 3288	4460	msedge.exe	93
PID 4460 wrote to memory of 3288	4460	msedge.exe	93
PID 4460 wrote to memory of 3288	4460	msedge.exe	93
PID 4460 wrote to memory of 4228	4460	msedge.exe	97
PID 4460 wrote to memory of 4228	4460	msedge.exe	97
PID 4460 wrote to memory of 4228	4460	msedge.exe	97
PID 4460 wrote to memory of 4588	4460	msedge.exe	98
PID 4460 wrote to memory of 4588	4460	msedge.exe	98
PID 4460 wrote to memory of 4588	4460	msedge.exe	98
PID 4460 wrote to memory of 3516	4460	msedge.exe	99
PID 4460 wrote to memory of 4732	4460	msedge.exe	100
PID 4460 wrote to memory of 3516	4460	msedge.exe	99
PID 4460 wrote to memory of 4732	4460	msedge.exe	100
PID 4460 wrote to memory of 1588	4460	msedge.exe	102
PID 4460 wrote to memory of 3972	4460	msedge.exe	106
PID 4460 wrote to memory of 1680	4460	msedge.exe	107
PID 4460 wrote to memory of 4824	4460	msedge.exe	108
PID 4460 wrote to memory of 4980	4460	msedge.exe	109
PID 4460 wrote to memory of 4980	4460	msedge.exe	109
PID 4460 wrote to memory of 5048	4460	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc57fbc188,0x7ffc57fbc194,0x7ffc57fbc1a0
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,18293327525338700292,13731364404609094464,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,8837038915547688153,17679236153931877866,262144 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,12236398388926608324,17684241983622833035,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,9677568477232770151,4121502380438516701,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,16910582178753577649,3041903477634122082,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,14957702590965724301,1218519368422096201,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,11180804785518035691,13583799329728242788,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5016,i,1304104188931236434,310542615163728556,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5268,i,2216791546402891814,12080525513213373861,2097152 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,10817097567652359321,1077299607109033597,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,12686590540401652065,3800425398725411132,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,9444773427480054607,6497707482028072595,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,9444773427480054607,6497707482028072595,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,5687099129636101281,4114423544060716967,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,4340842797688704620,17921840727820947249,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,14332458985621038904,1093674328675488143,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,6283781309098072269,12628995398982543150,524288 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5440,i,10999243740062270222,740649049059163953,262144 --field-trial-handle=2272,i,13263357183456316988,14540108335638530753,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5020aa9b-b870-4c21-906c-a0dc5288fba1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5020aa9b-b870-4c21-906c-a0dc5288fba1.tmp
Size 8KB
SHA256 17acb808f046bf1a939eff79b195f7f39acf00b43a91dc75244cdde49d2e72f9
MD5 a5a4ec0831a4dfd7f4fdfc440ee8fdad
SHA1 d6f48fad4e62b12321ed142a562442fda7d980bc
SHA512 9707c23789478d8c320f1a9a0a7becf8f1d4c3de7eb40430fa857af364d17a807f02f958873b7043ad4723a0d7951239b4942771ee40c74a90aeff3c63798ba8
SSDEEP 192:JONa6JkR6QmiUyjyF+RNX+Fd10IeRfFaVcXq8aU6:JONa6U2rF+RNkd/AGU6
TLSH
T1451209356C786C7B5EA26945F48732035FE5916BEAC93F80D6DC1E1C01DF6AC130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d50f3cfa96a1802d324b79bfa599e4b1361c9f1c00ac56ec15e8445d7c53051
MD5 5f2a2275369afe96dfe04cc058ca16d0
SHA1 d60d75d888d9711386b71ca1227782abac3706b6
SHA512 763d05e3b59192cefe6ff5a478725ffb316dbb4982ae2ea49d31e8f4063b4488d98da7902db8da2d3e05fb0bc882bbf9df7e702a0e3ae5aacdb7393d5b149512
TLSH
T17C71E63B0139885CE353C23186D682133C7A4EEAF5C35E4570E05B7E65823F2DD1268B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 22e4615f7e703c7689b9f4b11fb52e6a31198c61c5bd675bda59964c98bb0570
MD5 f3142f7b4f222d752a712c1342c7ed16
SHA1 da6b2f7518f128ed4ce4d135f1483d8892903a09
SHA512 820d31561eefa507300acf09106be1b28357ac1ce931e0ba37ac1b7792e9657e144292aa0020300a1532b87170992da431997b97ea6b9bff0fab32b46297b191
TLSH
T13F7188BAC3E887BE881162F05A256E2ADD1D455B422C3C578EF8EF4B63F1471D20259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6d8993981b9156ec2bfa28e3ceb7660da4916d7cb795712d62d4cf2e1ea863fe
MD5 bb09dfa6ce63527ce523a021f27b0e3d
SHA1 97379529be6edfa52acd99fca9287d6bb70c1975
SHA512 f69deda7d085cc036a9dbe88deb9793550790d0137e83b8768d0ae6d8ed8a04a992edbdcdebe9883fab1c3e74f26f5811b1260fcf6a6768dc71d0e9fff6e975f
SSDEEP 192:sxZpRtyM/jK1Ml8MkS/f1skGKuZIdpdYHW6+WNGYIkA9C+6IgrJ:sxZpFMS/f1sk/uy6HbG9C19
TLSH
T1E242E7056B346977CCCBD209FA45BF53D6F91472A2940E44A9FCDA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 932533bbeb77756d0d099a7499248cb78b8983c353448b431bbe6c71cb929ec1
MD5 e8837bb5cd770c30fff3761bea4ee7a4
SHA1 79f0d001f5c1844202e4d820f04e2a3a3a3519d8
SHA512 83aeb6abda24238550f1320b1412063d85ca9b02faff9bd0172b5ca1136618d0098d14b2829ef4ab6810f03af2752419d03fa1cbf5988ff246e9b4864ccd0ef3
SSDEEP 192:sxZpRtyM/jK1Ml8UQmkS/f1sIGKSZIdpHYHW6+WNGYI4BD9++6Ig5AJ:sxZpXqNS/f1sI/Sy4HbGS+16
TLSH
T1AD52F7156B349977CCCBE209FA45BF53D6F9147292940E44A9FCDA1C00E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c2278bd45b64856002d6f2e19f04083527a246e75f571f8d254eecc0792f0665
MD5 c5800e21e3bed424b0677240e469ccdd
SHA1 a4684aed293f040d1ed5b815844b6c86790bbca4
SHA512 d2065cf73d10264560bdaa973afc97095b178a0aaf27ad6247e75490deff7b42c613d99b536e9937818ce4f1b3ed240b6c9f9f54eac995de20d4d4056fa9f6a8
SSDEEP 192:sxZpRtyM/jK1Ml8MkS/f1sIGKSZIdpdYHW6+WNGYIKA9C+6Ig5AJ:sxZpXMS/f1sI/Sy6HbG1C16
TLSH
T1E352E7156B346977CCCBE208FA45BF53D6F9147292940E44AAFCDA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c01fb04ec9b6d264c6ffe29b0490f5672cf301b7823d96719cb45dfeabe4ba53
MD5 0e83965bcf414a951c8bb832376de622
SHA1 8100c62a485ba715aba33040e50013929f9afd21
SHA512 539e663c3e1298c132456b1622feb0f13439110000eca22f9ca698bba7f833fb530840b0a655b99ef4a90a8134c3f78ff727e3ca62acb67771c2162794215f4a
SSDEEP 768:4ysqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9VroE+2:4ysqxXlWvJD6Tu1ja54LAs9uEp
TLSH
T1F9D21C3B694CC77E4F840E6CEC266FD76ED801CBA6988D5447FA890C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 047e2d7a75659e2b716fff1241d03fe583eb3d26769b46945d572fd8c8ca6f6a
MD5 b8d1ed1f7eb63bbf02af2b6333bbac0f
SHA1 746f22e35888b8185dd57980b08926e51d425f37
SHA512 986981eecab962e5b1e1e87686936190ce4b6812f5d1e77bb3827bb5729ec0f14915094aaa4cff01764925668203b8bfb473ba81d70daf191d17e8babd0b5e70
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyJ2IXK7KEHyh5CIfKfqMHy5WInKPK8YG:KYbaKYIKa2wK7Kui5CAKfqGqWgKPKg
TLSH
T149D1EF46753B02427CBE294CA7FA96378F4232633419A46F3FB851A65E66E110DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe584159.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe584159.TMP
Size 149B
SHA256 80e1db6422d886f7375d10bf90650fad94683f855633a324868f380528cc820a
MD5 7100457f40f2395ab846ab598d30f192
SHA1 7fd604db9c7a7632210ced92c35992b10faef547
SHA512 bc9be40a8f83a56341ab430a2bbda295985c180cfd044368bd33a737a38118bf8857be3d8b2c71b23b29a8e20ea2393244e128bfabfb798b8d43b6fd7ac999c1
TLSH
T109C02BE38BB182477B20A8C51030504E984FDF494DC0C9F4D441F043307C232C00A451
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 139fc6986675eab287dd18b914c06cfbcd705ffcf81c6534c219bbc8e93c1aaf
MD5 da3bdf741a239f10b9176000f9d59c92
SHA1 6112efafa0918ca77b04a88cadaefc08485bbc64
SHA512 aa8b168d10c4b147bb95dc33237503e9de120bd3b4b126f996b2f54764d024beb23741471c87e489d7dc41ef173af046bd03b5b3eb81b289aebff8c7448e9503
SSDEEP 192:wLsNIUzQECG6GkRbtqQmiU1v9I4VRNX+Fd10IeRfFJSRXq8aU8:GsNIUzlClbQ33VRNkd/vGU8
TLSH
T1623219396C386C775EF2A544F4473603AFB4516BAAC93F90D6EC5E1C02DB6AC131B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c290ad5d1e5137571c3087e5b2a6761fc8b7cd77c11528a5a46c9511195fed91
MD5 025749c2c79cd51976c827adcf39a072
SHA1 1198ab36d8210b7ff6e5d35f54bc0682de582df2
SHA512 fcfba2fadbc00b66401a41553c71928135bcd09f408749c93a39a97174eca4bff548501ed2a4159105156583bf78ed6c5614caaa1490c9b76f99751acfc4f736
SSDEEP 192:tONu6JkRtQmiUy+yW+RNX+Fd10IeReh3UPR7U6:tONu6UrYW+RNkd/FUlU6
TLSH
T16602D835AC382C7B9EF2AE09B58B27135FE5117BBA992B84D6E81E0C01D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6868abf46eda886badcda7846ef5a3cfbe9b6cfa56db03ba416bafc3df898d08
MD5 2b4c977b71446c0ecc826a5646c8ba79
SHA1 403a028fd390e8e0015d2a0be40ec13d94e174ac
SHA512 9b126fba352dc5c54745a807b137f8a8655a47a12eff89ef82fad9c307cd56cf5f1712d6e5b69eaf01445875a09e048f18a91b29b6c84f21c6e2ce2f24b4be52
SSDEEP 192:uOLsNIU9QECG6GkRbtqQmiU1v9I4VRNX+Fd10IeRfFJSRXq8aLqyDJzz:XsNIU9lClbQ33VRNkd/vGXDJzz
TLSH
T1B0422A396C382C775EE2A545F44736039FF491AB9AC92F94D6ED9F0C01DA6AC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 25bd0f6659530933f7fbd155a66b8b4bd3974f8a3111d89bbaa4338893ce5890
MD5 33c20d0985ba040c128a453e18db3433
SHA1 abc7399cfdd50b32de551a8c630773af64f0b8f4
SHA512 392129d49db3fce2264bb3aaad7a941bda9acccf52e0569f763f1acaef46416016c701cb0b5eae33f15ca55f046190a56d4eeedccf64795551e8d9839ee16977
SSDEEP 384:YZcIhsNIUTlClbQ33VRNkd/vGOOPrXLpe8C/8BD:mh5ElHkdGOi9PLD
TLSH
T1B7927C75AC382C776DF6A945E48722035FF8956BF6C82B84E5ECDB0C02DA6690317C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 4d1f87517ab9a8b8a7a270227039ab2f65569d98535d6ac44f4e941c2d9e395a
MD5 e34077c920724fa71a9ef4a75d231996
SHA1 d012556cd60830307cc46ca49357b8e6d79e33f4
SHA512 d4962535632c20801ac96fc495b28cbeaf2067cfe171fe5443e01ac095b1a513ea1dbb71256e6d6c629f16ff8c0f3fb6e8a02b7aaac61079107e6902e5b24dc0
SSDEEP 384:OFiZcITsNJ8TUNTUlIlTlClbQ33VRNkd/gGOOPrXLpe8C/8BD:OFQTYwgWElHkuGOi9PLD
TLSH
T119A27D765C685D7B6EF7AE45F94A22039FF450ABE6C47A90E6DCDE0C01DA1AC0307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b3814ec2cc528696eded18b3759a959149322be174e24dab3d9366fe68f2324a
MD5 734bee53e532c41513987264af4ede7b
SHA1 9e71adac93b76a9f92267613df30c6ffae2942ad
SHA512 1af62820ba85928de783b49987cd8b8d166ce391c69b94eb4ebf477249f6f459df9c06f8ae49a660625482a86fc9184fb3474f9d9a18cd5d219882855220fd90
TLSH
T14C41294CA6FA1148B3B76E5AABF6686D487FB8332E0A946D10110E4F0A33A00DD61737
MD5 SHA1 SHA512 TLSH

Submit Download