dc287f9dac15a2f39dcacdc18baf9910d247007bf156e7cf81ce2b9898d8fa04

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260910-w3geyseb94
SHA256 dc287f9dac15a2f39dcacdc18baf9910d247007bf156e7cf81ce2b9898d8fa04
MD5 dd8a730f0c5d0eb46ea62c2123c16f23
SHA1 faf612f2fd147d3ab451ae98bb9d55860f317147
SHA512 a600a20863662472cd52cd9e229835f1054ded2a22682f6e7bd2522ca29ef110f23474e4ef433923130241eca8b70de67d106f5e32cfb3502c112fef1fa2d1d9
TLSH
T18C5186FBDA011C1C1A6541245EEDB208C1DD649EC0BCACA2F1C4A45B4FC2FA1C97B2E7
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335384040785022"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{12487246-D65B-4CEB-8F7A-DC27C4D1EB08}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4064	msedge.exe
4064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1668 wrote to memory of 4744	1668	msedge.exe	84
PID 1668 wrote to memory of 1648	1668	msedge.exe	85
PID 1668 wrote to memory of 2944	1668	msedge.exe	86
PID 1668 wrote to memory of 2944	1668	msedge.exe	86
PID 1668 wrote to memory of 2944	1668	msedge.exe	86
PID 1668 wrote to memory of 2052	1668	msedge.exe	87
PID 1668 wrote to memory of 2052	1668	msedge.exe	87
PID 1668 wrote to memory of 1876	1668	msedge.exe	88
PID 1668 wrote to memory of 1876	1668	msedge.exe	88
PID 1668 wrote to memory of 1876	1668	msedge.exe	88
PID 1668 wrote to memory of 2548	1668	msedge.exe	89
PID 1668 wrote to memory of 2548	1668	msedge.exe	89
PID 1668 wrote to memory of 2548	1668	msedge.exe	89
PID 1668 wrote to memory of 5060	1668	msedge.exe	91
PID 1668 wrote to memory of 5060	1668	msedge.exe	91
PID 1668 wrote to memory of 5060	1668	msedge.exe	91
PID 1668 wrote to memory of 3228	1668	msedge.exe	92
PID 1668 wrote to memory of 3228	1668	msedge.exe	92
PID 1668 wrote to memory of 3228	1668	msedge.exe	92
PID 1668 wrote to memory of 4944	1668	msedge.exe	96
PID 1668 wrote to memory of 2116	1668	msedge.exe	97
PID 1668 wrote to memory of 4944	1668	msedge.exe	96
PID 1668 wrote to memory of 2116	1668	msedge.exe	97
PID 1668 wrote to memory of 4548	1668	msedge.exe	99
PID 1668 wrote to memory of 3164	1668	msedge.exe	107
PID 1668 wrote to memory of 744	1668	msedge.exe	108
PID 1668 wrote to memory of 3188	1668	msedge.exe	109
PID 1668 wrote to memory of 4192	1668	msedge.exe	110
PID 1668 wrote to memory of 4192	1668	msedge.exe	110
PID 1668 wrote to memory of 4064	1668	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc2c38c188,0x7ffc2c38c194,0x7ffc2c38c1a0
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,7281350805777635692,9415141101443818848,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7096161710249815753,2366967854795870903,262144 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,11883572454122846561,12791061525079897557,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,6494659157875200438,11663416859562855090,2097152 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5807463738354080552,8047377893386721225,2097152 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,1740286146735077242,5750944227144159217,2097152 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,6077268736233993091,7232131700101722250,2097152 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,3255065458149053349,5553428111202875682,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,9223757541267857654,6821072846268044037,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1772930994308260091,10718155293011408662,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1772930994308260091,10718155293011408662,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,6402607277091900178,16198719404248253975,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,9722370402282330452,4424699445693386444,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,8184033919408998591,6305071685389566906,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,220848861213453254,17545026793555005511,524288 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,6606176767477252058,1529859634181842255,262144 --field-trial-handle=2260,i,7028278044155152494,13354300286804018065,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8c1d5bcbb2ed34f64dcaaf1d5f4607d5c4cc81eed815dc75ac5eed9bf86c9f03
MD5 68f288d300b76dc6230e37570fa90896
SHA1 abe4e86cb6ed966b318b0508ccd00706ab77ea82
SHA512 a67fc02121bcaa649bbea472cd5a64495655141ba3d28cbe472cd2f4edbfe906287dc64c17e14baf13c14858e43c90bdaa01d4136975ba5b687d068c7fd82b9b
TLSH
T1064107D1022040E8FF100972D4DE83763778BEBD781FAE5E98D3A6769A14321862D27E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 eee3e630bbec333bf21df203c87f07858a1a4571f2212fbead577378025508e7
MD5 a74b254a38c441a67b39cff9e0199063
SHA1 10194bf3f9cd23f6cbd4d0182384cf72acec1e43
SHA512 339d6df3aed7247647eec2ea858f81578e033e3b9c886a17389fe91bc143e534eff9dce40b7f77efc061367a4c7f88a182093de00f7311b3285ac4322b080c5a
TLSH
T1EC117DB3C7D5856E891216F09A24AE2BCE1D0A06421C7D1685D4EF67D3E3475D00155B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a4ce35a9bd52377af53dc006f410754eb5be1edb280bf08a6879781f21fbacfb
MD5 e12e10087a74ae67f71d523ab8f3393c
SHA1 9a073634e23b8564c61f84c695dbee8fca59c7a8
SHA512 cf93a31bbcfea89d03be0c59c5ec1debc93b8d13c1834ae2af9410f18e903363cd25c6908ea3d660629f9fa48ca28a3086400c0f2879f0a2be559e4eb953bbf0
SSDEEP 192:sxZnRkyM/jK1Ml8MWW/fKs5YVsIdpHfHW6+WNGYvL+eh+QIg5rJ:sxZnSuW/fKs5u/HbGshHv
TLSH
T1E6520952AA346977CCDBD20CF941BF93D6F95472A6940E44A9FCCA1C00E6BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1d71a8ed965c5802f2b6141ae2f0b8a5539d0239d31a202c2e59283019e8a945
MD5 5370ed48b6b8307f15d65b77f32a0795
SHA1 67ec5541ba80d9fed51b8a95529409d686fa044e
SHA512 8bb02266c4bf3712e1ca3f1c9364c125d849aab90a9bbccd97b8a26e1046776bd7b772707fdcd7f5277300cb6dd8219093f7dcffc920030ac468433ddb0de897
SSDEEP 192:sxZnRkyM/jK1Ml8MWW/fKsmYVsIdpdfHW6+WNGYvrTeh+QIgrJ:sxZnauW/fKsmuRHbGjhH9
TLSH
T161420951AA346977CCCBD20DFA51BF93D6F95472A2940E44A9FCCA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5d63b8be4c1dab9b8a62cb09748eae70762db8f00696cfafcc9b7bd585df6742
MD5 5882307ad25bb97a86786807fb15a72e
SHA1 a728306491b29f3e0e80f2e218d77f35b654f274
SHA512 a9049256159468fe5b395eb08dd0680c5554379793864b213271258ff54bb788f6ae47a005bc53adbf0c26b208bdf26a1025d23228652bb6b3ddcae070b9eaef
SSDEEP 192:sxZnRkyM/jK1Ml8UQYWW/fKs5YVsIdpHfHW6+WNGYvL+Nh+QIg5rJ:sxZnSqzW/fKs5u/HbGvhHv
TLSH
T13652F852AA346977CCDBD20DF941BF93D6F54472A6940E44A9FCCA1C00E6ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 12b8b069fb4339c6f2ab23509c7ff35973e8a409f8447ebd50681cfc113e13df
MD5 b398fc04fe512a356fa4a72363338640
SHA1 25690eea863fced731dd7ba601e52711afcf5b13
SHA512 65aba4ff906cd58a7420d86d49cb1b326d66069c882841db269e070b05df63b02e59b165839dc64ac1b82a3addb7c2046d91b55bd9acc0ba229c3c465fcc6f35
SSDEEP 768:1NseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppuroTER:1NseJ3xWvhfynu1jaVcL88pls
TLSH
T1A6D20B2B280CCB7E4F844E6DEC266F966EE801CB67984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 2a4999add3cd2ff196970cece78b4ad35f783d1d9f744a2f7202bd3faea49449
MD5 14dbee4c93ee7832feb8c69a964f1ce2
SHA1 8f91149280c8d7ae3983245fab2b1149a596fcf4
SHA512 1d48ec56df5d7bc4be8b29625f665263e9de87d450663811c181550516de20c119d0cfe872813cc1870e9b09918dc63a8f2b588fe3fff623c6738ee6b45e832d
SSDEEP 96:KYH+Kggm2lyKuUaGlyKWQx0gKNuO6sQKF+OD:49ZtFV3rJ
TLSH
T166E1361A343A07112C7D298CB39696360F4235B77058A5AF7FB820A54E2FE162DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6684f85-2535-4f69-8623-82b22f12b09c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f6684f85-2535-4f69-8623-82b22f12b09c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3f15055337157de7aeda52fc023cb757ee412f116df93bb7ac997fa535857292
MD5 0af6bcfc605df27ac8db9ff37461b4a9
SHA1 32d35064d80209adc65c11a06e20593c62299405
SHA512 2f314d7d4c73b40d2c29550494739eabeb18ca21e35b366058f57a8ce9a16dd8c99cfb2f20ace78dc6820d7a6832d65972a56f0688f1d84099282352f160b34a
SSDEEP 192:uDm+xasuheOwQxMGsNHU7bQTKbf1gQM7oRSQmiU1O/l4MTlr+FdLPxuauQdD8z1j:3ZcIhsNHU7b7fQ7MOK6LdLxs5SG
TLSH
T16B626D71AC34A97BA8B7F145F44636075FF8D027EBC45B94E5EDAB1E00DA2AC031A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02dff7881180c4054d53c6d9e282fef97dd4a279a801f28f982923e28327d7d6
MD5 79c2b39ad957a760861f05ce774659d6
SHA1 8a2ea67b807b96bb3ee3771fa77bffce3dd918df
SHA512 d986200040d9f8d6bc8b00702bf9b17dab33765945bdcbad7c751e4761409fc71ccd031ce0baed1db35da9106922de0b6aa076fb05e836bfc0a5c3e2b17d69f5
SSDEEP 192:lONQ6vMtPQmiUyBiThTlr+FdLPxuaU847qxU/u:lONQ6UtRfT4dLxIOU/u
TLSH
T1D8020735AC786C7BEAA3AE46F48A37175FE4516FA6D01B54EAE82F1C00D764C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 d8678802f399ad373b0612eb2afc490fc74bb9c3372c8d39c2d62f4ce3a28ce0
MD5 e2c309a2089ac3c94734008180f722bf
SHA1 7aec1950de826e524896125047e084590cc9477a
SHA512 afda1c019149b4a40ea02e88ecf4f450c99611f65eef5075fd2790f9cda580d2d2981cd3b4d5ed007cdbddd33c5f3367939b97b3ddaa97012a6d60daf3c1a02b
SSDEEP 192:uYm+xasuheOwQxMGsNHUebQTKbf1gQM7oRSQmiU1O/l4MTlr+FdLPxuauQdD8z1j:YZcIhsNHUeb7fQ7MOK6LdLxs5SG
TLSH
T10A626D71AC34A97B68E7F145F44636075FF4D027ABC85B54E5EDAB1E00DA2AC031B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f18029d2d2d2189029814227cb4b8d08ef562830260a40953c0c1a183d3cb4b6
MD5 c59b024342f30908bee7d030f2cb85a3
SHA1 cc0ff8c219ee16b8b31dcd023eaca0bee55029c7
SHA512 3a038a434f2981283c95369e8af2d7007d50f687166d47e3da1e8ecd3598fc1625decb970973ca86f000f600cce5b83f1034bd8ea4998acf2420a12b04d6f4f2
SSDEEP 384:+iFiZcI4sN88TUNTUlIleb7fQ7MOK6LdLxq5SG:VFQ4twg0vIe+O5SG
TLSH
T1FC825C739C64D97FADB7A645F54A32039EF48067DAC4AA94E6DCAF1D009B1AC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 95ade8ea0268fbcd882c59034b7326328a4b593f971b44a342a54f5e5ea4c546
MD5 fc9b97c38c578c4bf37a71216688a91a
SHA1 7bdb313de8f74480fbd344b3c2fa6d516edd404f
SHA512 6295b8b511f4891599a4efe2c5e6323375c56affb156f852b28b05d5a3c315a39c96abfa105738258fc59622f6b90e4679ef08e89b547089f1f9349f20b947a8
SSDEEP 192:xONV6vMHPQmiUyximhTlr+FdLPxuauQdw80IIqnU/u:xONV6UHRZm4dLxp5U/u
TLSH
T1EE121B31AC64AC2B6D93B141F48632071FE4C26BEBC46B54EADD6F1D01DE66C130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47676df8-ac0d-4898-941b-a13ee741c9d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\47676df8-ac0d-4898-941b-a13ee741c9d4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 42c9baaef3521a71223a8ed6d9597cd66246ab9a90cf15ce6d53e4f665fd7775
MD5 411e7104ed4ab2a402bab1b9b94e8215
SHA1 619ef1cc31b8595ddfcc09231979cff56b05932f
SHA512 0d3bf0ce295b18750e70a9db634fe644fdf0d2d3df462d4f41d381fe4de3a6c51a144072c33df56ea60790e8ea0d54f7726a9abcfcd6c937f242e34623ba1b17
TLSH
T1A341289CA6F91108B3B7AF5A9BF6B86E487BBD331F06D49D10110D4E0A62B41D872737
MD5 SHA1 SHA512 TLSH

Submit Download