f5cccb540fd01845f32adf1aa12b6366359654d8fd902e54638d3a08e32188a4

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 02:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 33KB
Sample260822-devnkazgre
SHA256 f5cccb540fd01845f32adf1aa12b6366359654d8fd902e54638d3a08e32188a4
MD5 cdb01e32a97d1dd781891fa52c3b83c5
SHA1 a845cb66cc40ced420f0eaf3799f596f5fae276d
SHA512 08fcfff378027afccc3185c761bf696bfcdd0f5f3fb33fe60a6163fc537ebdd5b3b22aceed90546afae7b6902ed188562cdc526d36934d63e7f42367d21c5408
SSDEEP 384:C/6NFkRbBVPSBf1i/TSifGsfXq2zaSnDg34bF0CrI0AbGS72wB4:C/6w1SBf1qSifM2+oDdjS5u
TLSH
T1DBF2A51E960110915933B3B8AF9B1A0AF72B4137C20289A87EFC53581FB5D4A75B2FCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318409588849887"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{42F8BC35-515B-4B0E-8495-585B59CA18B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
728	msedge.exe
728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3916 wrote to memory of 3932	3916	msedge.exe	86
PID 3916 wrote to memory of 4404	3916	msedge.exe	87
PID 3916 wrote to memory of 1412	3916	msedge.exe	88
PID 3916 wrote to memory of 1412	3916	msedge.exe	88
PID 3916 wrote to memory of 1412	3916	msedge.exe	88
PID 3916 wrote to memory of 4012	3916	msedge.exe	89
PID 3916 wrote to memory of 4012	3916	msedge.exe	89
PID 3916 wrote to memory of 4900	3916	msedge.exe	91
PID 3916 wrote to memory of 4900	3916	msedge.exe	91
PID 3916 wrote to memory of 4900	3916	msedge.exe	91
PID 3916 wrote to memory of 4524	3916	msedge.exe	92
PID 3916 wrote to memory of 4524	3916	msedge.exe	92
PID 3916 wrote to memory of 4524	3916	msedge.exe	92
PID 3916 wrote to memory of 2468	3916	msedge.exe	93
PID 3916 wrote to memory of 1940	3916	msedge.exe	94
PID 3916 wrote to memory of 2468	3916	msedge.exe	93
PID 3916 wrote to memory of 2468	3916	msedge.exe	93
PID 3916 wrote to memory of 1940	3916	msedge.exe	94
PID 3916 wrote to memory of 1940	3916	msedge.exe	94
PID 3916 wrote to memory of 2072	3916	msedge.exe	98
PID 3916 wrote to memory of 2072	3916	msedge.exe	98
PID 3916 wrote to memory of 4364	3916	msedge.exe	99
PID 3916 wrote to memory of 4364	3916	msedge.exe	99
PID 3916 wrote to memory of 2448	3916	msedge.exe	101
PID 3916 wrote to memory of 2864	3916	msedge.exe	110
PID 3916 wrote to memory of 3164	3916	msedge.exe	111
PID 3916 wrote to memory of 2756	3916	msedge.exe	112
PID 3916 wrote to memory of 4608	3916	msedge.exe	114
PID 3916 wrote to memory of 4608	3916	msedge.exe	114
PID 3916 wrote to memory of 1700	3916	msedge.exe	115
PID 3916 wrote to memory of 1700	3916	msedge.exe	115
PID 3916 wrote to memory of 728	3916	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9e8d6c188,0x7ff9e8d6c194,0x7ff9e8d6c1a0
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,17461997721196618918,10695070226956100549,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,12176485962114237303,17441703717257162175,262144 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,14360364360563130740,14009355664545056572,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,13986672217771531161,2505854762854800167,2097152 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,14121576503023864711,15256233694446580488,2097152 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,459353043849940288,17696745403575067375,2097152 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,8088861244493747575,4237365499901977367,2097152 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,12893773063842835474,16542416495264810968,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,9784565174625637543,17827082627186518498,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,8286396594964590578,11451121541043935491,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,8286396594964590578,11451121541043935491,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,3080655307790145754,10825204683687713073,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,275856199342802460,1590518777772476487,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,4215566254502503690,9712747826878691728,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,6781309921427688729,1309404170812241332,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,5425814261480826794,13652180324391020006,524288 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5132,i,17721056570377889847,1678934482241517976,262144 --field-trial-handle=2248,i,4068464979366688088,12777082476596564470,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 063bbb33d396c809beda45a9424f5c27b28dcd3fba7f2c42fdbce1f9baabdb8f
MD5 022076d9758f0692b7e13bddcd07e67c
SHA1 b331712c00e76ad8a3e21842bbc02a37cead250e
SHA512 99c4a3b8dfa7db436cee2171b00e03211f39836ff9fdf500fe046b0e2e944291d340b3b42a6f2727c8c2ebe36afb0b8d61bbf580be35955b01aa0c27bee79c5c
TLSH
T1FE711A580696499DD3503230EDEE1F5671318BC42F5B8E023F74D8BC95257F789E28E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589a09.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589a09.TMP
Size 3KB
SHA256 81dffdb0aa95f0eb40445deda89c1e9dc25e2f7f2f8fead1a5221bfd679810ca
MD5 2b29478085f960589121f155962dfad9
SHA1 2c320ddae7b7f2efd814f73ce148cff4067bd603
SHA512 dde9fb809ba1771c2849f2ad9ac2396d0d1a49b2b37209bec510559d6c037e1cd72530e6dff887081b1c9be695a7c663df56b891e89ddf4ea8a8f5df824dda0d
TLSH
T10D711A580A96099DD3503630EDEE1F5A71318BC42F5B8E023F7488BD95257F789E28E4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f2af32a-cf55-4f13-a205-6ddc77892b3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f2af32a-cf55-4f13-a205-6ddc77892b3b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0848980baa9fd2e13a5d6e183b863c54dd839c16886e0a4ccf2f2aeae56a20db
MD5 fd3d69ce8889d3e04000e9274763c22c
SHA1 ca3e23a798dd3af90058a19205421a376854dfab
SHA512 c960d48d2e1b64b8f2b706166f29cd4da65e595e14e7b21e473947d83e0f071e33ed96c9740e818c443079a1f887a2a13389d3e7d2c1fc976da3fccaed1052ca
TLSH
T1CE115BB3C3D5956E891116F06A24AE2BCF1D0606421C7C5989D4FF2BD3E3065D10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bcf2204f76a3a6c8fc0836e72300931093e3cf10a1a0757e6e5002e2c3602eb8
MD5 ff28f07cc6e45fb4bf5d32fb26303446
SHA1 bd99f6b8d15fbd0a62d95e6b346cb16c0166f866
SHA512 53ef973ee073864653d89162674ce186dd7d068a31b5d9cd12500129df6050a9cff69428676cb5f81438b1b10694d33ba4b1e29be4403fa78dba3a2cd1117fa4
SSDEEP 192:sxZ7RpyM/jK1Ml8UQgkHg/f+sO+aIdpHIHW6+WNGYLhD2FIg5pJ:sxZ7fqzA/f+sO+zoHbGr1
TLSH
T1D952F815AA346977CCDBE20DB951BF53D6F8047392950E44ADFCCA1C04EAAED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4aef3ca351444428173ea43cf01dea0b6c5f90c9031389eecb5b905076fd85db
MD5 fc1b7269a5098f85903baf58f70f94ef
SHA1 e029f7981cca0f429cfbf608a9e6b6b888c2a497
SHA512 32822d42cec258273271644fedc1c6b70722cca0a9ca40cdbbf804a22ed4a1c03a2de9b1b5b3ab93b1c1a2bfedd0296931fa63b26a3456c15d7bcdd6e7608dbb
SSDEEP 192:sxZ7RpyM/jK1Ml8MkHg/f+svbaIdpdIHW6+WNGYLzwHFIgrJ:sxZ7fMA/f+svbziHbG39
TLSH
T13B4208156A346977CCDBD209BA51BF53D6F90433A2900E44ADFCCA1C04EAAED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d81212756ecb6048dccb8e75fc49a88dafb793c7d9ed52da06c19ee9780b4eb5
MD5 02acdee41ae66e797e52726b16b43590
SHA1 a7254923ff46385a8326f01b04e1f053da5b79c3
SHA512 731ac5557f1cb1e0c4f326cf416c9f5e84b119b4130b72347a7b77bd1a2adc3b8616317c11496dc113e88f6b9333cf716e59dc171c25babb2582593de06abef5
SSDEEP 768:IGs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNnroccL:IGs6pD1WvxzWju1jahILIsN07L
TLSH
T159D2FA3B680CCB7E4F841E5CEC2A6F967DD801CBAB98899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 467049b63a609eda1eea4998bbc9778ef6113ee9ab7d33b24f35a2d3fe0dce4e
MD5 2831acb684ca534b528622c32989441f
SHA1 175b8558d96ba7b39312b6dcae0bfc49e0f7ade5
SHA512 139c7bfdda7bea8c9e9ca9692d3ef997d77318149c75dd0a7bf206f6847f7289cf0624988c1ae2c587ea30fa4e366eb31b3c33c2d5cacc10040265426bea95e0
SSDEEP 96:KUAAKtePe9OKW06aMgKtS6ioK3K+qKcKD63:iiRlHWr38
TLSH
T162E1281231BF06123D7E6B189255877B8B92B563301DA42B7BE940714E6AE380DFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e05bd829-69c0-4de8-a34f-6ae4177be490.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e05bd829-69c0-4de8-a34f-6ae4177be490.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2eab3ee147fb3e95b97f232668df3e540864ceeab489d11a98d1d283640016a7
MD5 1b257d8694a657ddbe9b74451c1eda47
SHA1 b732e26aac5924c0f9479d5f0c7d907d94f59eb9
SHA512 7bd67752dda8b831b5ddf70678e2583128b153db14317c15ad1ebe228bfdc5171a001505382c505e9d3bc09c9c0ae49c563bfb3c67967854889165110bdca37d
SSDEEP 192:uSLsNzUQzmgkGU7+3viIQmiU1ngTD4atb0sO2b/H5EUbMhqimUI:RsNzUMfDdWsa9xOsHeBYUI
TLSH
T13E42FA366838AC775DE2A145F5873627DFB8006BDA8A3F80C5ED5A1C01DF6AC234B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6c14c5fa6c90220a2a82ee7c7efe7de74e53d26d0ed7a7f1fbf1fe99fefbe91d
MD5 7778c2af84fafbafc10a1fb247f47e7f
SHA1 99f2561e8a9fb661bc663aa36d8efe9e1639df9f
SHA512 d1c35d708ddbfde7f4d750b727a5220783f5a7325e3b7d2fe2fd88988cfb59efb51fe88958be1813dab1c5380d96aeaf80bd78a5dac258282df1b69daf551deb
SSDEEP 192:uDLsNzhQzmgkGU7+3viIQmiU1ngTD4atb0sO2b/H5EwLMhqimU8:AsNzhMfDdWsa9xOsHe1YU8
TLSH
T1EF3209366838AC779DE2A145F58736279FB8006BDA8A3F80C5ED5A1C01DF6AC134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 bd51bc539b1b71ae19a5aa8a35727f8e4cd6d9633ea3f49c69c3009b694d2962
MD5 8695bd236f42dbbe8b6b081592c652c8
SHA1 f144b50fe90b5627a1fdc4a2a7e492249f38f729
SHA512 74e766702e002d250f5c3d1a2024acfe925c0a98c0f48c10f8d3924feddedee4d74c22735f0126bc2d58edcf30cb5a84e390e7e942281817bd2d5a918425d4af
SSDEEP 384:QiFOsNK8TUNTUlIlUMfDdWsa9xOsHeyYUI:rFOlwgp41rOqeyYUI
TLSH
T192620A336868DC7BADE6AA85F94A3613DFB400A7C986BE90D6DC590C01DF1DC134BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8fa1de5946da2ad2601174ef34114a7f6f7acb8bcdb6e6b773a2460b9b33eb14
MD5 5b37225857e89247f84bc2d3086d161f
SHA1 14cec0e709e68e8e32c974a3226869f6579c0084
SHA512 fe373be25f348ea813e1653f1daa8761a0db872ac691ca106844cd619776426ba1d52e89336feef44e485559581345c0978dc12a7d312851821eb223178370b9
SSDEEP 192:qONQ6O7+3hQmiUynMLGttb0sO2b/WgGKrU6:qONQ618IGt9xOsI4U6
TLSH
T18202E93578386CA78EF2AD45F68727279FA5107BE9952F40D9E81E0C00DB65C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 62d38fd8f4b48bdf6e22f1becba54c258d137f6d1c0e9d3688e5c334327510c4
MD5 5d56e405af4e8fce526d43e3a4dcde54
SHA1 6a2ecf8fb1e9a9b83cff6668a75042c7ca317d28
SHA512 c05f44fa3d42941816b2a36143d1e2dcc9106fb1032380370a273496edff83dfa350a17abc78ac30bdb774f2cfb4cc2d7568b82c50cece9936bf62b2e0061af6
SSDEEP 384:QiFOsNN8TUNTUlIlUMfDdWsa9xOsHeiYUI:rFOkwgp41rOqeiYUI
TLSH
T1716208336868DC7B9DE6AA85FA4A3613CFB400A7C986BE90D6DC590C01DF1DC134BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b3e26a071c3044554277cf87b27ceb040b5693632287e89c8d870ac8804f52c3
MD5 b1b85e5bdb82373e7f9c194fff51f8ae
SHA1 bde9497966f68cf84820a78dc3b108c734a3fbb3
SHA512 ea6cd5129b6de8b0b7d091fb316b83094fd382f1dbe8c5152509f06a3f9e9aa5cef6f235c5cd6d0ba5fc07c69b9db8c747ec538dd293b908c15e16b218a843b2
SSDEEP 192:uULsNzUQzmgkGU7+3viIQmiU1ngTD4atb0sO2b/H5EwLMhqimUA9:VsNzUMfDdWsa9xOsHe1YUA9
TLSH
T16E320A366838AC679DE2A145F5873627DFB8006BDA8A3F80C5ED5A1C01DF6AC134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 00d4c814ae6e7debc534e5bd062cdde39258a6087ba8daee876e16a256512cd6
MD5 462ebdb93dde0d180a6b613ad3b183bf
SHA1 05a0a623be41578e6c8a39991b3662ca073d7631
SHA512 12ea4c1639597e6c0541f71e272b2e0d78d5c5f3e34c16709f5db4bd559819746ce4b4afeea0f4854f64ac18291345676e8348ea5df8edbbb9040269b07d4f2d
SSDEEP 192:AONW6O7+30QmiUynjL8ttb0sO2b/H5EFcNhqimU6:AONW6C8X8t9xOsHeyYU6
TLSH
T1BB121A367868AC675EE2A545F58736278F69006BE94A3F80D5EC1E1C01DF5AC234BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cfd7d043f85991f40cbd99f4480c723d29174ee25f0f8d78e93b2635c28b3123
MD5 be4373eb60d898d57be5b48468c2f1e5
SHA1 5cdbf40627aa8715e43be5defb28827b12fe25aa
SHA512 04ff7c2b1133a33a36f4bd3698657d1727420b85c866c1a5036340a9d76a45562f516fcf0281147fc8c46c12342b2e73f46b1f98b3f13cfe1a8b864a5b508be5
TLSH
T1DB41F899B6F91048B7B36F56ABF6A9AD447EB8772E06D45D00110D4F0A62B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download