02ebad096c199f4c94f477edf575333af4c0210e2142eada76c5d952383e2c64

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 143KB
Sample260818-g3682sysat
SHA256 02ebad096c199f4c94f477edf575333af4c0210e2142eada76c5d952383e2c64
MD5 f7fd650f16f2185ef9b5f64ffc753404
SHA1 d7b8fb2a459e90c69ba8fc78727c5627d436a36c
SHA512 92efc2d83a80ae3b3dd5730074371b472178e224ae790dc1bea6b9c6e06dd80ce3fa762ac2201944c5dade023b58fad3ff6826344a49c7cca0a07f8267765302
SSDEEP 384:qXnnXCWG9AzXn9CclaTiFXC9hP2i9Vwy26LeLGLIL/LC+vLTUAxN01QkL904GlxW:q3XFC9hi3UmsGl8asVdTvFP
TLSH
T103E35537C38C03AB83F744D6E191EB56B8924570D81611E0AFA9C766E7DC97AE8070ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315077837525536"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{6875AD1D-4EC6-4DE7-A0EB-E3885EAC9964}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4600	msedge.exe
4600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe
4516	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4516 wrote to memory of 2076	4516	msedge.exe	86
PID 4516 wrote to memory of 2656	4516	msedge.exe	87
PID 4516 wrote to memory of 4720	4516	msedge.exe	88
PID 4516 wrote to memory of 4720	4516	msedge.exe	88
PID 4516 wrote to memory of 4720	4516	msedge.exe	88
PID 4516 wrote to memory of 4572	4516	msedge.exe	90
PID 4516 wrote to memory of 4572	4516	msedge.exe	90
PID 4516 wrote to memory of 2772	4516	msedge.exe	91
PID 4516 wrote to memory of 2772	4516	msedge.exe	91
PID 4516 wrote to memory of 2772	4516	msedge.exe	91
PID 4516 wrote to memory of 1776	4516	msedge.exe	92
PID 4516 wrote to memory of 1776	4516	msedge.exe	92
PID 4516 wrote to memory of 1776	4516	msedge.exe	92
PID 4516 wrote to memory of 5004	4516	msedge.exe	93
PID 4516 wrote to memory of 5004	4516	msedge.exe	93
PID 4516 wrote to memory of 5004	4516	msedge.exe	93
PID 4516 wrote to memory of 2768	4516	msedge.exe	94
PID 4516 wrote to memory of 2768	4516	msedge.exe	94
PID 4516 wrote to memory of 2768	4516	msedge.exe	94
PID 4516 wrote to memory of 3708	4516	msedge.exe	95
PID 4516 wrote to memory of 3708	4516	msedge.exe	95
PID 4516 wrote to memory of 3708	4516	msedge.exe	95
PID 4516 wrote to memory of 4912	4516	msedge.exe	99
PID 4516 wrote to memory of 4912	4516	msedge.exe	99
PID 4516 wrote to memory of 3564	4516	msedge.exe	100
PID 4516 wrote to memory of 3564	4516	msedge.exe	100
PID 4516 wrote to memory of 3712	4516	msedge.exe	102
PID 4516 wrote to memory of 1616	4516	msedge.exe	114
PID 4516 wrote to memory of 1788	4516	msedge.exe	115
PID 4516 wrote to memory of 3212	4516	msedge.exe	116
PID 4516 wrote to memory of 4944	4516	msedge.exe	118
PID 4516 wrote to memory of 4944	4516	msedge.exe	118
PID 4516 wrote to memory of 4600	4516	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff6b8ec188,0x7fff6b8ec194,0x7fff6b8ec1a0
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,4991864341451403685,10841253808058304073,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,8526459906362367654,6676792665804705018,262144 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,16014610601524910790,14819279538555986745,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,11785133085704391605,4870402510425350355,2097152 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,14109049583256048218,2724996604968331518,2097152 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,2350811350181062701,12278515195659181257,2097152 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,17135785551213776559,8640850492992753024,2097152 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5112,i,8664387757159347591,9360279401043708367,2097152 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,7909072540685351138,12999526520712444746,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,17977500230762544745,15980438657907832000,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,16807727805524224305,15706458181103345624,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,16807727805524224305,15706458181103345624,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16088393599802048649,12037208803495892328,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,10902141246296146263,8522946416775561410,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,8160994424309677832,3238190872835330683,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,1790233343818496574,11964591111532770160,524288 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4524,i,6469273254951567475,17692242242744975178,262144 --field-trial-handle=2332,i,16274681896728682813,11905502272149339329,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4600

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 337373c4da28ee3002914faa7f66bd64bd0d39f2478ab28111896aef3d732e8e
MD5 1538b94629725dbea32dff25f55639b2
SHA1 133e292c7d10ee2edc74eda507e40b826be644bf
SHA512 ace9ab652f654068c864bb79cea4a34770b9e3e2dfeab9c984cbcd6625ccf3ed273271281737948f7076a7204abb9af1697268a6d42c8b81e2eed910356306c4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1DFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9a9649245c12e695ff727bb0a8e35582086d5175e539a8ea57eaaf3836e54c16
MD5 aeabb451580b0dc2f3315282057ef180
SHA1 0f0e26a6623a6d843b191b96389ac591da20b496
SHA512 9455b87b6c7e06b01b47cc1ebb009f0d94948b1495a21cc737288b5a614a1300dc09e41e6498dd062522920fc86b764f3755d249b41568bbf6341a0b5e57bfb1
TLSH
T15A71A3360A53426CE7670332EBC2D52A727186E6FA3F5CED24D0587C4D0B3F18266967
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c60a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c60a.TMP
Size 3KB
SHA256 0220c88e52c56e1b0d4702b216b7bb842b1733179d9beda40805be9ba0103586
MD5 aa128abfc1909ba5816a2b57df1e9171
SHA1 2585937a12fa5e2f1b50e9d4f192e6f7f34cf5e9
SHA512 15e9e2db5d5eae005dad5bbf8bb29fc833e0ceb3634127d580d1b52322145b4cf1f568bb1b29b8e05dc21b21830b4b727077e09348a5da2636ab0f7dcc85d6be
TLSH
T1E67193350A534268EB670332EBD2C51A727186EAFA3F5DED24D0587C4D0B3F1815A567
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 31d9ee64538d403f3c4e82e0012dc10509d5a195e616bbae43283dd22efab770
MD5 8a111694010899ccbfa5e9cc633869f7
SHA1 57f33c8af6f5339bd3c4650210fb302e0e33c46c
SHA512 799b925df2a0b48107323f9af6d45b710955c267f31d2bbc1cb22057e66e6c68856d53dddfec37781864f64ec3617fbd4cb286e5a9645f6ce918dbf1bfae40a7
TLSH
T1151189F7C7E596AE8D0167F05A24AE2BCE1D0506422C3C568AE4EF2B93F3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 93a3921d31604c6dd7f9febbd85b13a873d26c765e02cc2e83a6efd43fbb9c13
MD5 0931e0b7515a083dc4256edf8045135d
SHA1 7b39900f0ca4cfafa803fef32b8a4bb685fbb9a9
SHA512 7de44702f0768969ea908aeee2e66fd2316b9ebb05c3385dc1642af7db1297484977ecde5f176de5d72d5ebb126f4d7738e955501864c31729513d07d0651f66
SSDEEP 192:sxZQRtyM/jK1Ml8UQa5kB/fJs9CFRl/NQIdpHAHW6+WNGYzzV99LIg56J:sxZQbqzB/fJs9CFf/3gHbGgE
TLSH
T17F52D7116A349977CCDBE209FA45BF53D6F9447292900E48AAFCCA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cced40ab99fa1f21403f722194ae7a7a517bc79dea4d684224db5544c961d0a0
MD5 62dbc42ed50078a4e8a0029085cc94dd
SHA1 dd8b6944a7af8cead55700f1de328721e622b92a
SHA512 3cb361b23691eff2880793b999efd599ed250991cecf741da6a504e7b1dfa839512e6d08faab0a93598a4564c39a0de2c444b0688d43212e44f1c7553f2301dd
SSDEEP 192:sxZQRtyM/jK1Ml8MkB/fJsCCF3l/NQIdpdAHW6+WNGYzQ29LIgrJ:sxZQbMB/fJsCCF1/3aHbGy9
TLSH
T14A42D7116B34A97BCCDBD209FA55BB53D6F94472E2900D48A9FCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a9ff5a2197d49ec8b2c489963055ad1c104eee865448c2268ed86dc6ec84a053
MD5 353a0b7733b018bcda0bd64f933030f6
SHA1 d72ceb585e58a4106855acd0bdcbfa11b7972a0d
SHA512 070ee82d8fc230af91346c06a5e4a5dfcd336610de60ec01c692c5dc723a4b3c2ba4bb722d0355dd5009c8747230611f4b909d174cbf972e30c2ac61d7334666
SSDEEP 768:0LW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjRroILCiTY7:0LW7kf0Wvqidau1jaa5LA3jquc7
TLSH
T175D20A3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 877d3a7d144244c0dcb6466ce45f8d522b237148cde226df8c51c0ac33511213
MD5 6aac59ec74f4800cf267fba9bcc47492
SHA1 3d4c64066f51720666a4b81d44877477dc829db8
SHA512 de6afdec02a05a370bfb615129145c81a5ac23065fe5951a3720eb46dd42a54fa5f5ae3682f2ea48e7cfa69942c5e6cf3207236a10695864baa787c2c9c349eb
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbEIfKFmc3yZ8ILK9Kc1HI1KIUl:KIbCKcbEQKFmeK8gK9KeHqKIUl
TLSH
T105917746753B16023CBE2C48A356C6364E423193386D68BFBFB940621DA6F124EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595cdc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595cdc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 23b428ee63f449cea96436b31d013ca4e16c7891a1f195de81b01bf5d42621cf
MD5 b9e148c80c67935c4558d26d8daa4996
SHA1 ee42c1c65cd0a0ba0a6dde00ca68faeb584a67e6
SHA512 5748d213628bcdd184aa42028de2806efe6cb194144fcb61867d73a4067c1592e4350db0a21ebaeba5d160dd3889d2df43f35d7271702ee050f3cf2664ab88db
SSDEEP 384:qZcIhsNbkQbGOb6I7uuPdlhCEJrdiySllYJTfY81FZkgfBuU:IhkbZTj7hdiZuTH0aBuU
TLSH
T103929E711C74A877A996F189F84A3B074FFCC037D3C86A84D6EC6B1E01EB5980317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 be64c0a9128d3285fcc226f9177a4be5cce0128fb9fb92356c6dc86b8b9171dc
MD5 97b7688529a9b7507ad8afd05849d44c
SHA1 a5480173f98cabf883f6292c5fd5573d3f137d95
SHA512 42608150ac2791c8a74245f20c39e1e016402d6f354d881fcf77ac916e89224aecbb5e0bdeb119857facce2a768b310bdd4f3ab4e9fff6760475c0acb5541358
SSDEEP 384:ziFiZcIqsNl8TUNTUlIlNQbGOb6I7uuPdlhCEJrWiySllYJTfY81FZkgfBuU:eFQqAwgkbZTj7hWiZuTH0aBuU
TLSH
T1A4A28E724C64D87BBEAAAA85F94A36078FF88077C6D5AA80E7DC5B0D01E74D81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a64c25760f0699576dc31b1009606ec4d98b10b0c760fbe9c98da453b62d04ca
MD5 2ed74f885307c3878184892901ee1083
SHA1 90e33ac573cc07afdb442aae8d8b37e0b9b6a448
SHA512 1d5b96ee47f54ab6af1862f94912fb2c5c9b7c2672826753e0780af146e3e3b48bf68e6c8b9a4708b24bd202459fbb7d62dec172e9f9b5fc3b0dea178e69db86
SSDEEP 192:MONB64BAQmiUyd1cW5GBPKDv+FdGEIaDBrU6:MONB6eA+GWAdlxRU6
TLSH
T18702FA34AC786C7B9EA2AE45F58637175FD8113BE6C51F44EAE85B1C00D764C234382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 77878739c3fa572eb84bb5ef76ac95d726e4b235b42ca72cfbacad731dd5f207
MD5 e4bbb3d53938e87c831bc327339adee4
SHA1 0ea5dc5bc34c020d51b3cbe90ee3114c67332481
SHA512 4ce2397abc38f4db73b2ca065957a6927de9166d40dc60296f521b4eac324d5a2bbb2c5f7dadbbe1dea92a119a4524c874d12c39612eaf289a8054849554d4cd
SSDEEP 384:SZcIhsNbNQbGOb6I7uuPdlhCEJrdiySllYJTfY81FZkgfBuU:ghxbZTj7hdiZuTH0aBuU
TLSH
T18C929E711C74A877A996F189F84A3B075FF8C037D3C96E84D6ECAB1E01EB5981317826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d430b233c25539e4f012cee7e6cfa1fe03e37ae4609539c0474289fb55a9e4d1
MD5 d12669cecf8742389fffdaffd88d9097
SHA1 a5943feacce65887203bd6c9ab98e18c30a169f7
SHA512 768dc8be5d903f9e33f4deaa632ebf13422971206387caef7366bb202f16e4cfd08e27bef8cede8083f0c955cca991e055a31188de7da1abdd55865c9bbc231a
SSDEEP 192:dONG64BOQmiUyEgch5GBPKDv+FdGE1VFC1SJrqWwbqNU6:dONG6eKDjhAdlhCEJroiU6
TLSH
T1F7122B35ACA4AC2B5E92B585F48736135FE84137EAC57F84E6DC6B1C01EF69C2306817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf6e98c7-dbea-42b0-953d-67f2f7fda5c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bf6e98c7-dbea-42b0-953d-67f2f7fda5c0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fccd7d2fca875511fd5799e219f9fece43563c9f60517cbbabb8b78de34d459b
MD5 01ce8379c182b4c7d0bdf30e0514772b
SHA1 22964bc0cca514d56f94e735fc082e8d3f7ca2f0
SHA512 938dd776c9d62c83d4d1cbcd18f396e3fa4746696b0489a85165e33e3df51835790920d7566d7ed53485726bf1052a6c4834377c49a9dd03b620b94ceb4da86f
TLSH
T143411858A6F91109B3B77F5A9BF6A4AE587E7D673F06955D00110E4F0A22B00C862737
MD5 SHA1 SHA512 TLSH

Submit Download