79a5a3a56911e112103c9c58c5f0f3bf3e4fba72ab10d865a475a11147cfde7a

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130323962.html
Size 35KB
Sample260910-ak1j8aec89
SHA256 79a5a3a56911e112103c9c58c5f0f3bf3e4fba72ab10d865a475a11147cfde7a
MD5 1e0f8ef799109bfa6ce2ea4f151615a2
SHA1 1dc2ee296ce4f394b52187dc0a6036a070e5257a
SHA512 04a901722a8aac6a74150539c73ed0c0444a412ca2dfe02c6735ce41336780694fe7c6b5a64335513c5f4c28d33d8c04c1d04900b38777572983fca74b7d1302
SSDEEP 768:h0ogSUIiwtYfzsOKDM4Ah0/M6XAheBJW+kspBsHWU7Y3fuHkMAY31mytCX9sgIV3:yogHIiwCfzsO3h0/P2mytCX9sgIVWlmJ
TLSH
T1F8F238E076C1F42716CE5E23AF1E79FED16A6CA354887A4BC2A4768C34B9117C1A4CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334734672514024"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{A2091D2E-F286-4EAF-9A78-21D087E37ABD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3788	msedge.exe
3788	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 2852	1996	msedge.exe	86
PID 1996 wrote to memory of 2984	1996	msedge.exe	87
PID 1996 wrote to memory of 2876	1996	msedge.exe	88
PID 1996 wrote to memory of 2876	1996	msedge.exe	88
PID 1996 wrote to memory of 2876	1996	msedge.exe	88
PID 1996 wrote to memory of 4808	1996	msedge.exe	89
PID 1996 wrote to memory of 4808	1996	msedge.exe	89
PID 1996 wrote to memory of 5112	1996	msedge.exe	90
PID 1996 wrote to memory of 4664	1996	msedge.exe	91
PID 1996 wrote to memory of 5112	1996	msedge.exe	90
PID 1996 wrote to memory of 5112	1996	msedge.exe	90
PID 1996 wrote to memory of 4664	1996	msedge.exe	91
PID 1996 wrote to memory of 4664	1996	msedge.exe	91
PID 1996 wrote to memory of 4408	1996	msedge.exe	93
PID 1996 wrote to memory of 4408	1996	msedge.exe	93
PID 1996 wrote to memory of 4408	1996	msedge.exe	93
PID 1996 wrote to memory of 3908	1996	msedge.exe	94
PID 1996 wrote to memory of 3908	1996	msedge.exe	94
PID 1996 wrote to memory of 3908	1996	msedge.exe	94
PID 1996 wrote to memory of 4908	1996	msedge.exe	98
PID 1996 wrote to memory of 4908	1996	msedge.exe	98
PID 1996 wrote to memory of 1484	1996	msedge.exe	99
PID 1996 wrote to memory of 1484	1996	msedge.exe	99
PID 1996 wrote to memory of 5024	1996	msedge.exe	101
PID 1996 wrote to memory of 2244	1996	msedge.exe	105
PID 1996 wrote to memory of 4948	1996	msedge.exe	106
PID 1996 wrote to memory of 5044	1996	msedge.exe	107
PID 1996 wrote to memory of 1424	1996	msedge.exe	108
PID 1996 wrote to memory of 1424	1996	msedge.exe	108
PID 1996 wrote to memory of 3788	1996	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130323962.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb6119c188,0x7ffb6119c194,0x7ffb6119c1a0
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15310630352683185189,4780521517900144930,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,7206265353007119313,14536878577121266236,262144 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,17659917392353029306,16696993033230834089,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,18335125449357374363,3113942894696049352,2097152 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,6632278402773788252,12595362955043523433,2097152 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,458614284322096395,12357390482835229739,2097152 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,3681260370838656492,8011251496173788364,2097152 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,4811250203719100559,13055533602440237452,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,5780859489086637161,10191237701253393977,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5676972232088257088,16892482093650967594,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5676972232088257088,16892482093650967594,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,15680786746114203486,9014409517620460672,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,10568903450581301093,3947659100906732104,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,16528563603576311879,9369599531084604838,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2688,i,8292505823136696602,16137256148037248917,524288 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4296,i,18032148570058807888,18332979543259384747,262144 --field-trial-handle=2220,i,14194239240508991021,10786261250769365247,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3788

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b7040b3f8ce44ffd90837d2d955c7bc618385f2803983cec53b41eac89be687c
MD5 f44139a1efb15e84d4cc2f3d5f6789e7
SHA1 7978603ca3f538d62ab030d337bfba998e22a4e3
SHA512 8a97d327531fb002833b7977f5258151e309c512d47deddd436211e6097e705a0b2821af3eac285f8fdf3a7dcdcf650324baa8116583aa91ab5c47b0fb2c6427
TLSH
T163615F1802D24972EFBE1072C1F196153DF7599F8EDB8E1247E4C4FD6039B5EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a8ed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a8ed.TMP
Size 3KB
SHA256 3e3b00ba22ba2e9d6d33f3e03b3e098d22a5e9ade39489f70ddc83edcbfc5e96
MD5 42f598c69e3869156bc3b355cd507669
SHA1 87116acf1b4a9432f2d7ad83a5762053d326136a
SHA512 b1e942e174fd65213f309301a6e00af72e497c0fd72bd7f0c60fc31427a2b7bdd196516768fb840a5ee3c38b2b2763984bdaa673a980ccd3219f43d203f7c9c0
TLSH
T180614C1802D24972EFBE1072C0F196193EF3499F8EDB8E1247E4C4FD6039B1EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 460B
SHA256 eee2c66732a5973661dc7a0e9a4ee4c77b4bdce57747cfeb4ef62b95aaff882b
MD5 fbbdff7d1d61c43a4b6918e703aa9112
SHA1 32cbab5c1885d4d2d90780107126f3bb44cd1302
SHA512 af9faf845c0435d5cd85a94a5968cc1b4ad08e084190b12b5e579ec43007aef62073707a9dae6078970b1df7fd5979bec7c8d259445bc5853a1181333e994f61
TLSH
T15CF05CB286E285AF8A5507F04924ED2BDE2D0502421C7D288AE4FF67C3E307AE00695B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 694B
SHA256 af1b16466ea73df07dc0790165a451f7d31d387acced38f0dd6efd5e6080ce8b
MD5 c662bd2cf2f19618576c31dd9c5f3ac0
SHA1 5db41bbdc2181f2e856a483e17cee5d81f1d2d34
SHA512 fdce30ef5d16a740f9be90f6ec48e2f2682381a89039b048208485441012da274e3557e561528e941ec7262f03f81eb2521b486f999a276f05863f7770e6e1e3
TLSH
T1DF017BB3C3D585AE8A5112F05A24AE2BCE2D0502821C7D1586D4FF27C3F3079E00695F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 04b532acd82757f8602c11a516e339720d67a300ddcaa4ad90facb70549c01ec
MD5 de3900c39d9f3ed424671ee0996c0ff5
SHA1 35139c566933bf245c9a0ebad96b5c450b43e7e7
SHA512 631594a0e39bf73f669a6c8adfe843af03a603ff1b48d72f46ef90626284e9af46d5736fa14fd85eeab0917098c4b19a162f86588bf925083d4fc86e0282851c
SSDEEP 192:sxZ4/yM/jK1Ml8MWA/fpsJJMIdpdzHW6+WNGYwKZ/JIgrJ:sxZ45uA/fpsnV9HbG69
TLSH
T16542E7116A34A97BCCDBD309BA517F53D6F9057292900E44A9FCCA0C05E6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4fbb8bded63f74ace4854e72b8c20791c04a1dace9bf96d034c1a67cea06d3fa
MD5 764aecedbaf160451085ca1b51197713
SHA1 c5e6bce14ce3eff0ae4b9ec35a7101d14d04f527
SHA512 df000a313a605bbab7dd57b0f30b6dbf83e3467fac86ae79f8f4a3c72d8bf80da4ce6ebd398c3346a8fefc5b575791a6e13363cab9320eb8273a7e5ffcce6909
SSDEEP 192:sxZ4/yM/jK1Ml8UQ/WA/fpsOJMIdpHzHW6+WNGYwq6EJIg56J:sxZ47qOA/fpsIVTHbGCs
TLSH
T16B52D411AA34A977CCDBD209BA41BB53D6F9557292900E44A9FCCA1C05F6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 69f8bf56e115226490c2029583bc4fb039de19e7f12b8da4a07f8b56c126b463
MD5 d86a7362fedbb63fdd51316a8d54fd8a
SHA1 1c1d34c552e91cf215ea0d438883a318a9fa8c74
SHA512 27fa1c8c073f9be120212c48dbebecab4f5cb0b0dd533da5f9a1164b660a5a646033688aa5b4606efdf0e72e95954df6b52805e7c264964de6c0fa711ebbd4a0
SSDEEP 192:sxZ4/yM/jK1Ml8MWA/fpsOJMIdpdzHW6+WNGYwzF/JIg56J:sxZ47uA/fpsIV9HbGhs
TLSH
T1E342D611AA34A977CCDBD308BA417F53D6F9457292940E44A9FCCA1C05E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 237f65559803c90a6dd3838663a42874f58afc6323ed21c40dcfb54b83babdb4
MD5 dd8834d61416afd5c581336c950929f5
SHA1 c7a76af6979f098d57391af4c9a2582ab02aedb6
SHA512 4e58c9a6c756e00f768e20f0969fa55ea1e02289ae085c3a91e37d58d20286749968f463cb8316c59509e25207b816132ff3b0afba63a9534a1da1c06d5ddac0
SSDEEP 768:RC4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dmroh/c2af:RC4jeXmWvmKLEu1jacPLZQddKB
TLSH
T127D20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9daecc81a01de024399be8d70bc302943d9d24536bd2feeaac18b070f8cbec79
MD5 bd279030d4d6ac347ee28fcb1e78c359
SHA1 9e6c32ff41ca895a41be9a6aa5183cd499e591e9
SHA512 c28aa9327a3c8ef7e92cf8fef98c0ea7e655b93f2bac9e2a6722cad935cba432182db234c7ab236777523af89fc366b33c8b22f5ed189525aaaf1f81dcf71379
SSDEEP 48:KceI3KLKIjy9lI5KGUcSvIZKAYc/yCWri24YV:Kce0KLKeOl2KGUFv2KAYOjWri24YV
TLSH
T172919546717B52023C3E650C9390DB2A8A81B1B374B4E56B7FAC08B69D66E14DDFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea9226ba-a8c0-4f03-a0fc-a138d63e9bb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ea9226ba-a8c0-4f03-a0fc-a138d63e9bb1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 a04a137f8a650e730e685778aa842ffc2d5f5a15ec3b510a84b9e41e15384038
MD5 fa8b29318d9f9d1449d739a8e2b5e45f
SHA1 f5abfca9a643b6dba064073fd67ef34d0b30c477
SHA512 73f7016297f56818ce27359b0c0ef1eeaedbd6484daecbeb2308bef17fcbe9f929f96c3d630d1792c7bef322e502bdb07f5402b4d74cd3e0db95bba346f9307f
SSDEEP 192:uT2LsNlVEfQCyZE2zbQmiU1zTqTn4H/+jVRjzorIMXTr+2B5cFTwqs7WpVLx:HsNlIVmpi4f+j8IMX/+2EF+EVt
TLSH
T188423A36A838AC774DE69686F49732139EF841679AC57F94D6ED5F0D00CE2AC130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e7a35f69b719fdfa8a82b39323110f00a16f2a7bda3b7127af6939f6f9570028
MD5 d1ee868627e5212a6f860abcdbb982e6
SHA1 1aca3160d9008d0586f7dcd2af166c8e5d8c1f20
SHA512 9e150d19065897a0ee72d72463504ad8a57c8754599cae882467732eafdcc96c8f70286350901904c9dcb77a0f050e8c8e3e5d3a9a8b6c61641e8de227dd949b
SSDEEP 384:nZcIhsNlkVmpi4f+j8IMX/+2EF+xuvzxV+MhdpiBuoN:Phwigj/li+4184pig6
TLSH
T11C827E316868ACB75DE6E241F88732134EF890679AD9BF80D5FDAF1D00D96AD130EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35a32942a466ba35cebf05f4254f0ea639d6768554fd8e05d506573072ed8837
MD5 337ffdac4ebdeef9202860a325e3b333
SHA1 c70ea67235ca273f9ef47a7e6cddd381815fd6db
SHA512 508ee2c01e1a5ed590705fd36194be16ce7285019ad9bdf960a5139a7003ac8d1b14d837ab03c859f90c893a84945fe17dc64933351642e524c3cdebfa2519bd
SSDEEP 192:EONJ6hZ0QmiUybOpc/+jVRjzorIz5wOZIAhU6:EONJ6olpu+j8IK2fhU6
TLSH
T12402B93968687CBB8EE2AE45F48737135FE5116BE9956F84DAE81B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e61132b4bbd8c6014cb3554bbd5afb447e83484c4ca5cd71ebc66bb0762ce76a
MD5 3af36add8e343d7b03d82332ddf603bb
SHA1 b482ef4bbd42e283dd9844bb55970b84def7b47a
SHA512 c7877191d9a989d140a529c9e0bf10cc8a95e143b5f1446f903b81e72d4cfef201179d957ebd26e24597ae5710839338fcadce097a24293ec33b422e10e46693
SSDEEP 192:qEON46hZOZQmiUyEOq8c/+jVRjzorIMXTr+2p5cOqwqsU6:tON464wRu+j8IMX/+289+U6
TLSH
T15412FC366868AC774DD2AA95F48732139EE55127DAC6BF84D5EC1F1C00DB6AC234BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0ff53428871db11196958c9c138556d57d92c7f7d3defd9241bba613df2f9d70
MD5 7d3d756657ff2df4fbf86ecc0fdd661d
SHA1 0eea13cb5177ebcee5181db91a9b140365c7fd81
SHA512 976f982102581f5abb381501ebcce7e29e698bf27b8eeaaed0b712b1252cf2560c453e1269096d9f32604862f1a076fb075d6a2bf103f2b6f94f75c98506bce0
SSDEEP 192:uY2LsNl2EfQCyZE2zbQmiU1zTqTn4H/+jVRjzorIMXTr+2B5cFTwqs7WpVLx:SsNlZVmpi4f+j8IMX/+2EF+EVt
TLSH
T106423A36A838AC774DE69686F49732139EF841679AC57F94D6ED5F0D00CE2AC130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 5339586deafc97816148e635dfbc57392660d5e2d2c133b1f3ccf0863291987b
MD5 ebaa08709daa03c5294669db757200cb
SHA1 ddc48ab10ea1fef95cce981a2f1fb2c1dba78c11
SHA512 63d818615c401e7d1bf49f998776354464f2c54848503cd3db9eebfbdd4e83cb5051318a5b4de103a206142a77af352ef2737b6845ad4fa6558d08ee6e0003ed
SSDEEP 384:kiFiZcI5sN/8TUNTUlIlkVmpi4f+j8IMX/+2OF+xuvzxV+MhdpiBuoN:/FQ5iwgFigj/lA+4184pig6
TLSH
T1AAA26D725858DD7B9DEADB81F88B32138EF84167C9D5FB90E6ED9F1D00962AC130AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f8ed8ba-f563-49ac-8c59-fb5a2cbe6f86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7f8ed8ba-f563-49ac-8c59-fb5a2cbe6f86.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 213e9e5167bf397f6965e055d63911b7b1fdc03661dadba1af586bc5cd91ca9b
MD5 ce34a54a8d43b297d4b9ca8ae2570882
SHA1 bd300ca8db44be55b582068ce7739d8fce2002ca
SHA512 94ef2cbd824024df0d812d598644376bbc603126d731d30cd55b03abfb14636f8dadfb9e2343f1cd325c25a35ad286d2a06c59b04dd7615354ac746013b51bb7
TLSH
T12541E658ABEE1108B3B76E5A9BF7542E487FB8772F0B905D10110E8E0733A44C961B37
MD5 SHA1 SHA512 TLSH

Submit Download