8e4248f3915466cc7b5f46f5b7d0ed0f4177610cdebf6ae5266ad01279b62857

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 50KB
Sample260827-g1659sysbx
SHA256 8e4248f3915466cc7b5f46f5b7d0ed0f4177610cdebf6ae5266ad01279b62857
MD5 f138d617b0b67934b387b59cc1be95ca
SHA1 c8edf97b2317a8158531d7cf9de32f6893a2728b
SHA512 d2d7da52b592d4ac1ba24e32bf10a127782ab832fb9e66b7fdd693c3382545f03560b7a5dfb0888fb7b1e14eda1a2942888eafd15dae5cd3b6dbc451ea498508
SSDEEP 768:gZHpUWJuZdypMA47TaWtIbGSgjJFhl4XJ+b0vLBOCg:We0OypOaWaGXjJFf4XROCg
TLSH
T15233C972A17041267A5F8BFC9166F269E668B601DB0B5379F4FD50A88AC87F3097331C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2380	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322850469545648"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{373012D8-21EF-42D0-9FDE-1188020AD15A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe
3892	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3892 wrote to memory of 3280	3892	msedge.exe	87
PID 3892 wrote to memory of 2380	3892	msedge.exe	88
PID 3892 wrote to memory of 3764	3892	msedge.exe	89
PID 3892 wrote to memory of 3764	3892	msedge.exe	89
PID 3892 wrote to memory of 3764	3892	msedge.exe	89
PID 3892 wrote to memory of 4324	3892	msedge.exe	90
PID 3892 wrote to memory of 4324	3892	msedge.exe	90
PID 3892 wrote to memory of 3956	3892	msedge.exe	92
PID 3892 wrote to memory of 3956	3892	msedge.exe	92
PID 3892 wrote to memory of 3956	3892	msedge.exe	92
PID 3892 wrote to memory of 5108	3892	msedge.exe	93
PID 3892 wrote to memory of 5108	3892	msedge.exe	93
PID 3892 wrote to memory of 5108	3892	msedge.exe	93
PID 3892 wrote to memory of 936	3892	msedge.exe	94
PID 3892 wrote to memory of 936	3892	msedge.exe	94
PID 3892 wrote to memory of 936	3892	msedge.exe	94
PID 3892 wrote to memory of 472	3892	msedge.exe	95
PID 3892 wrote to memory of 472	3892	msedge.exe	95
PID 3892 wrote to memory of 472	3892	msedge.exe	95
PID 3892 wrote to memory of 4364	3892	msedge.exe	99
PID 3892 wrote to memory of 2272	3892	msedge.exe	100
PID 3892 wrote to memory of 4364	3892	msedge.exe	99
PID 3892 wrote to memory of 2272	3892	msedge.exe	100
PID 3892 wrote to memory of 4040	3892	msedge.exe	102
PID 3892 wrote to memory of 436	3892	msedge.exe	111
PID 3892 wrote to memory of 1712	3892	msedge.exe	112
PID 3892 wrote to memory of 1900	3892	msedge.exe	113
PID 3892 wrote to memory of 3464	3892	msedge.exe	114
PID 3892 wrote to memory of 3464	3892	msedge.exe	114
PID 3892 wrote to memory of 4288	3892	msedge.exe	115
PID 3892 wrote to memory of 4288	3892	msedge.exe	115
PID 3892 wrote to memory of 3420	3892	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffefc57c188,0x7ffefc57c194,0x7ffefc57c1a0
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,10081834493882313646,13742256344690390671,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,15832566180250416730,14215829008491772084,262144 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,10211262004864336187,18137687463987297723,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,14503273019090328942,12346287843602865306,2097152 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,13114019659077674035,1684976867356640954,2097152 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,1000341597588988642,1185466282735454854,2097152 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,5881167151731928685,13097562699553129182,2097152 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,10832505126361326035,764512800184165572,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,4642912438412598721,2514512556636127992,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,3532620978528186520,16346560126843985871,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,3532620978528186520,16346560126843985871,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,5538402311148411035,5380073166312341585,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,14434482995071920972,309338813656880732,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,12927281753983677532,3708238277632072066,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,13983775235353023752,18312554731857599371,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,16687416125327412352,15036347699867527671,524288 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,9319173410561965413,1317530402049225063,262144 --field-trial-handle=2284,i,15450435251829942143,14297464276139395765,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 234206d7d6b98540479713db3092d19403a00bb4f588a16e8769acddb369170b
MD5 3ceef55dc2332a2231aff2aa33a5e3c6
SHA1 bd88c1e32b930670e0b43b6dbd5675c9d1193162
SHA512 cc30b4c07a903bc49f65399e593018c9f337a9d41df9c211015088cb47c0588b3422996f4da65ca7dcf0e5f0481d638ef13774c7d6656d28ad1175b538de840c
TLSH
T11CE0209A6382D3D48E0DD9CB966C535CC012B00BD58CC975320DA3CC3417902CF5B680
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 63a506636fbf0600e8028fbe8adf61c84e491de3874e98b514fd8504700a3162
MD5 8a05890a27f419c31c92cff50a4f5827
SHA1 164061b4194bbc8679c8959164085ce66dfd6f34
SHA512 c420e85d7e05487e04aa01b29df31df5eb55e985139d5dff4de97454a7e479ff6bb1b0cec7e49894d84e237e690601bce8ed8e2ad47dee95fd67fe37c239ad44
TLSH
T1CF713C1800F10F91E3B26FF2CFE216DA3D734D888AA34D3202C4ABBE593772084E5546
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590eac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590eac.TMP
Size 3KB
SHA256 7b33cb887444019328422e5b8554475b421341fe03467d65d22321f8bd8bf554
MD5 65c2873d0de1d874fbbbc9259b7fd155
SHA1 d0fd9fb813b18b4cab73e3e44f79646fd9f50056
SHA512 c6fe2008a2d48c015a133fb622d09388c09a3f92e744253ca562b6e854f99292638840ce827c7841071ff9d1016942e1df335bd60a922921beada49f0f925fe3
TLSH
T150713C1805F10F91E3B66FF2CFE216DA3D734D888AA34D3202D49BBE593772488E5545
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0b3ea23ee2d54e702bd631d0952915064cc1d867f76c768f7a92cd9a54e439f9
MD5 dbfad5f69141df83614ca27f66e51d46
SHA1 b1b856ffdd8b3bf620799ad5eb14e36f16a44ac0
SHA512 5a954318d4cb234b21ed07e7b74e90d0ce1394725765fbf1abb221610c48b238c98f06335c700270d32d3c161264eb7d54f3cf588c176a971cd8ebe0902ffb76
TLSH
T116314CF3C3D5866DC90516F09624AE2BDE1D064A42283C1989E5FF5B97E20B1E10665F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 439d4a92b6138ea358c5fc4a1ef2833e961bf8c44be67406211aeefb477f0d26
MD5 b14f30fd85446e5105aee0e8a6e65ca7
SHA1 a137cd073b5b4d22d41847da682caeccc3ab8c50
SHA512 ce8b90ffda7250c91cc321e7b460b92a0c54391ea0bcf10175e7885d26d753fd52d6c951456f5730dfff664c35216d92ab27d3b909cf3e1b1da7ca36acbbac50
SSDEEP 192:sxZiR3yM/jK1Ml8Mka/f3scyQCIdpdLHW6+WNGYwKincIgrJ:sxZiRMa/f3scyQrVHbG89
TLSH
T1E642E7116B34A97BCCCBD209FA55BF53D6F9046292940E44AEFCCA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 80c0dabd4eb2509cb3f8d087ccd91a91326823df3d4b60d68794afb5ff76623e
MD5 1ef2ceadff76cc0995237fb47466e05e
SHA1 fca882b7ae85722e1e30f7256b1ce05593914fb2
SHA512 cc6d3cbc1d9cf28e5b12b31808077c3be891b6528750f712ff5810558bbae531a61cd0a258ffeeb9ea8b05be095f81848b4e9b9f51af9085bfa5675ff63e5ea8
SSDEEP 192:sxZiR3yM/jK1Ml8UQNka/f3sYPQCIdpHLHW6+WNGYwAXncIg5JJ:sxZiRqma/f3sYPQrrHbGrV
TLSH
T14052E7116A34AD7BCCDBD209FA41BF53D6F5447292941E44AAFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 47104445a176f813422e7935c057e0bedbcebc6a66fb01fddd4b4caeee6eb639
MD5 345f53bd592f2de56a603b701e6545df
SHA1 9349520cf2ea13028597852ee869d57a64c6468e
SHA512 dadb9fc585e712ae114c6e28e8d3ffe13359c6ce3c3c13c6ceacae71fe2f8cd8e146dd8744b2e8d8a63265170c0ee1b1fe5ce3059f2c690d6bf77ae725116f3d
SSDEEP 768:Il4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d/rohAcma3:Il4jeXmWvmKLEu1jacPLZQdsl9
TLSH
T14DD20A3B284CCF7E4F844E5CEC2AAE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b5e93182288ca97389050a9ef4bd7f569dd1a21228e48f6713f1e8d6ca2b8117
MD5 e83641650ac762e5864f0f712ea2209c
SHA1 8043bfb6db75d9f0920af6c5baebc95e4ac824e9
SHA512 eb80726750b485a7d81eba9b9c5b017fed63bdfa12470078f0874c167b4f2d904ec34a88a34ed96abf3fbf9a9c41d4e1ad968f7bce439fcf2bddc0808870bd08
SSDEEP 48:KA7IVKMMAQyFpIxKCkUbpCXD5zvn+Hg+Ij7nK4mQFnkR35oXfsyo:KA7aKMMtOpOKCkNeQKfKa3
TLSH
T17E91A652B1FB22123C7E25599395AB560B41B0A3301CB42B3FAD00F19E67E600DFEADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b44c76f4-8e3a-4b83-acb0-d23bba5d83b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b44c76f4-8e3a-4b83-acb0-d23bba5d83b9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8393c99b0472666a791f11730a55fb5920b8d05134039712033b350ea2b6d366
MD5 5df9bb44fe84baeb8a0c79d0c05276c8
SHA1 21e03c84071e75a9ff5bbccc3a133c1513d4e76a
SHA512 e4ea33d16104660a6673f8e3fa3db4d8cf12c0a890664d4e6de8b16b668b31b427e6bcb6250cf468eb3c11cb7e866c2b3e7232d762b22703b6c1794d74687948
SSDEEP 384:0ZcIhsNv+1kHSf+o8hy9XP4jFS+LBNj5WUoS:yhq63PiSWN5hV
TLSH
T140828E3298786C7B5CE2B185F54B36138EF4417B9AC97F84C5ECAF1D04DA5AD130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 58de3142246783ab0f27ce42f1a74111354dd1404a08f670a928ee76c2030b5c
MD5 c6022f6bd1551780eb1ae8374adb207b
SHA1 1e289fec56d8bcb637aa3673c4c4a355c3ede6d4
SHA512 95444c1e17ad10e3fd7e894e5ecaa2c7b53f242a953c3d3018d4f0f7274080da245d26808e9a383652a86bdb13e60e5dfc2a781b1f6ba2b19506f1d1c07212d2
SSDEEP 384:MiFiZcIVsNR8TUNTUlIln1kHSf+o8hy9XPg/FS+LBNj5WUoS:3FQVkwg+63PWSWN5hV
TLSH
T158A26D3398A89C7F6DE6A685F94B32138EF441B7C9C5BA90D6DC9F1D00DB1AD130AC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a9141bbef066bb9580c974a8554e5fd9294dcc9fca67bd2c430547c401b1db55
MD5 576f7f4761e6856b312917f51475e685
SHA1 e9d959e75c8036185735b6d48462fb15cdd9a3b3
SHA512 4990725b3c923e7c9a4c847d88c4f6b68bc5020da23280b919c11a93e65331f684d57f17df71603316311ff63fae480f75dff88e50fb1f873f74725cf61ad6e6
SSDEEP 192:EONT6hZ0QmiUy+gpc/+jVSjzorh8F45wOZUjU6:EONT6oypu+o8hyH2yU6
TLSH
T10802E83568787C6B8EF2AE45F48737235FE5116BA9D56F84DAE81F1D00C769C2306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7328b9fa90151933ddf5810737a3da0bb67a0c46c8a6b22d4d0514ee25640eb3
MD5 c095c87e050fee8622422ba81fdc5ffa
SHA1 93a51ab342f6a8fb85279e1bb1363ca8d2f0d4b4
SHA512 af5ae6d0411e965a9dfa886701a056ef9662cd4e6d8e8cfc1bd040a6cb8d4a79055eaae64b3a46d898089c8a48f1cfc62c1c73af42ccc55667d0dcdc6bf0302d
SSDEEP 384:EZcIhsNvn1kHSf+o8hy9XP4jFS+LBNj5WUoS:ihP63PiSWN5hV
TLSH
T11C828E3198786C7B5CE2B185F54B36138EF4817B9AC97F84C5ECAF1D04DA5AD130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 387549dd86d8cc4e9c2bf909aa063161baaca4f9ebd9c3984da061c6f195883b
MD5 5b1ea3f381184a83950372a23502063b
SHA1 15438837026b05d54e9b05859aa52ebc7f416c29
SHA512 72f570ae4ecf7ede576c507e0c24b958f66716732f7125521d4687133cc632e4804329dc75276efcaaabc1131f0911e8b070ba2dd12d1a4ff99819f0193f3110
SSDEEP 192:52ONq6hZVnQmiUy+gOc/+jVSjzorh8F9XMEw5cOqwqohU6:kONq6HcOu+o8hy9XPL9SU6
TLSH
T18012FB366868BC6B5DD2A585F48736235EE5511BEECA7F84D6FC1B1C00DF6AC130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28346315-0963-4158-b08c-fe366dd8cc13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\28346315-0963-4158-b08c-fe366dd8cc13.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0b104e3c09d2371eb9a1ca42811d81f06e146d329e793046bca1d2573964e9fc
MD5 d9b5e6413c53a212b810de95e14490ad
SHA1 bce58b0d2393d6609a0c7842b263fe94447e6a1d
SHA512 7f0f2c6caac6f490916d39b23ce7fbb043d5c5a33c1cb8eb31657d3cd78524d817ed27c5e8e47a8d9f3ddd2c414389208a4ccbc913cba271ec9e8d8bf0016616
TLSH
T11B411C58B6FA0158B3B36E5AAFF6A85D487FB9772F06945E10110D4F0623A40CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download