be6e2ae484c1a5eed0690fb9df1ab66c941ed19442c7f1dc1f9ab539ac59db2e

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 68KB
Sample260910-wxts4afj2s
SHA256 be6e2ae484c1a5eed0690fb9df1ab66c941ed19442c7f1dc1f9ab539ac59db2e
MD5 5996d89ab76c0c7f7fc158eec4dea71b
SHA1 a7f097e95a23a2dd77b23f4ca11ab95cb89c0414
SHA512 882b6a21d39d530c76a5ddaa9629ffb797116264846ea6e2f7ee678b6b5277cf160423a628baa35a7a0e54276d0a85c12fe45c6f40ec5461dd2278384e92840d
SSDEEP 384:DRkdQTwH/TWvxb61vrbZvCbWUv5bdvVbxvebAvZbxvdbRvqb5vebBvmbSJvkbmvl:lkd1/+1
TLSH
T15463B17483F490E32481C7C06FB52AAA2F5565F3D906C58CB7BD6B812F95CEE9813AC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3264	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335379150582263"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{96F47B6D-D9AE-4B84-B4D7-0C3ABECC1649}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2264	msedge.exe
2264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe
1144	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1144 wrote to memory of 4140	1144	msedge.exe	87
PID 1144 wrote to memory of 3100	1144	msedge.exe	88
PID 1144 wrote to memory of 3264	1144	msedge.exe	89
PID 1144 wrote to memory of 3100	1144	msedge.exe	88
PID 1144 wrote to memory of 3100	1144	msedge.exe	88
PID 1144 wrote to memory of 3176	1144	msedge.exe	90
PID 1144 wrote to memory of 3176	1144	msedge.exe	90
PID 1144 wrote to memory of 4256	1144	msedge.exe	92
PID 1144 wrote to memory of 4256	1144	msedge.exe	92
PID 1144 wrote to memory of 4316	1144	msedge.exe	93
PID 1144 wrote to memory of 4256	1144	msedge.exe	92
PID 1144 wrote to memory of 4316	1144	msedge.exe	93
PID 1144 wrote to memory of 4316	1144	msedge.exe	93
PID 1144 wrote to memory of 696	1144	msedge.exe	94
PID 1144 wrote to memory of 696	1144	msedge.exe	94
PID 1144 wrote to memory of 696	1144	msedge.exe	94
PID 1144 wrote to memory of 3752	1144	msedge.exe	95
PID 1144 wrote to memory of 3752	1144	msedge.exe	95
PID 1144 wrote to memory of 3752	1144	msedge.exe	95
PID 1144 wrote to memory of 4544	1144	msedge.exe	99
PID 1144 wrote to memory of 1376	1144	msedge.exe	98
PID 1144 wrote to memory of 4544	1144	msedge.exe	99
PID 1144 wrote to memory of 1376	1144	msedge.exe	98
PID 1144 wrote to memory of 4812	1144	msedge.exe	101
PID 1144 wrote to memory of 4940	1144	msedge.exe	109
PID 1144 wrote to memory of 3788	1144	msedge.exe	110
PID 1144 wrote to memory of 4292	1144	msedge.exe	111
PID 1144 wrote to memory of 1232	1144	msedge.exe	116
PID 1144 wrote to memory of 1232	1144	msedge.exe	116
PID 1144 wrote to memory of 464	1144	msedge.exe	117
PID 1144 wrote to memory of 464	1144	msedge.exe	117
PID 1144 wrote to memory of 2264	1144	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffb8325c188,0x7ffb8325c194,0x7ffb8325c1a0
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,15867138918810201784,14811737484393394914,262144 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,12447150189278552986,2377655967945476075,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,12276146486613216377,11159948980786415244,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,7161056551376890498,14337988106203876791,2097152 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,5943240835039470424,4130018934871043377,2097152 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,14202325292164318930,6956837359659849100,2097152 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,17943770352000416200,5290743000334140165,2097152 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:2
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,2885982499630025363,15593598025097938573,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,15484933712699711389,3084743796145867281,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2075269175898726384,7488811754520893406,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2075269175898726384,7488811754520893406,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,8678978854035447718,11641694636852293931,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,16534740645670028040,13404606017364317765,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,4550655645045908713,8510447770959268235,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,8093630325191544312,16879751287616470694,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,17264599379161041605,13042960609086469575,524288 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,13684142386147338209,3878495365235576062,262144 --field-trial-handle=2232,i,15622554709267579845,4221534725824008181,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d98d593e1999f533f956251ae09928d67908cf2e0c38d8e77efee6edb7ae9405
MD5 d2931b3ad7a608ac8bca822eae598eb8
SHA1 f0179aef7d724d7ddd6a377ca8826949cf1e129a
SHA512 07d3b5d921ee2b7f47c52030ea5884f837ed7d08891dd0152254cbc88f09d2132b9a7e4fad5ef2b8bca42f44261b35d85a9c43226a985c8e3ba13b27171f754e
TLSH
T1D961F976C403C8F0EFF7407194A68272747257E4FE82CE866D8F9AB55A2C7E68ED5008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fe8f55ec57ef670facef6f78a093cf1aa058850f38305e0c951d7860f28771aa
MD5 ffd71a381f70ed770a1df5c7dbac9ab2
SHA1 836b6badc9940f9037378ea2ee344bded012f47f
SHA512 fc826dfadc8befbd1a2d6f100bc8e561c5ded627d82ae1b9aef535a29558a98ed30cd4edfbff45999f0e87c3658695eb2d60d1b53e13367b2ecdcb78386ac8a5
TLSH
T1CE21ADF7C3E586AE8D1156F05A24AE1BCE1D050A422C3C15C9E4EF2BA3F3475E11155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6c90f53419b830319bc1890e4d515abbbe7de6876ee80de533e1d34007c10d99
MD5 4c8341764835e7e2898da6a24b227479
SHA1 9221a38e90b904bee287820353d6b3c01e32cfd5
SHA512 57bac4a00b69eeccc18c3436e9310857f464877c281db32acfae676a9f07a63cbd1c5bf0bf13ef87ea341c7312c3431b68c4cce1bf49fce9c32a00c8232d3a1e
SSDEEP 384:sxZUFcRbZu5pW/fZ1sEUiXmCHbGlEnpGbm9:sbYu/fPFHbGKL
TLSH
T1AC42E812AA346977CCDBD209FA517F93D6F55472A2940D44AAFCCA1C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2d323f3f509492232dbe975e60440ae195e31fb19b51bda58f031f8bbedbf199
MD5 2819ec85174908dbbf69995eec503fb0
SHA1 ff0bb99fabcc8ec39aa44e59d1a5abddbbc2c9f6
SHA512 cad02c4ed7192646364ec2773b563d6a456a5b9b6f801107f7bb1640e46a49a03d7ee3a25af0ad8f2900d8816d85867a1f0a961f37bbf3e45b763b7bcdc15b4e
SSDEEP 384:sxZUFcRbZq45pW/fZ1s5aPUiX0CHbGP3azpGbmoQ:sbk4u/ftbHbG6/
TLSH
T1F052D612AA346977CCDBD209BA417F93D6F55472A2940E44AAFCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4ed19f51e63975b5a248f650444a408c863736ca8b19207234699724748d34da
MD5 7ad90e224cce44f5ca5c8eac2297f5a3
SHA1 f47888cbf668da409b0d024cb6dddbab984f7d72
SHA512 5b6c5a4bc0535a490d9d6b4ee417911f756f8f22d50f972921033f07f7bab9945823d3a1a7a13fae064c99b02709d3a8741a3be7d230a55f9dc2405f0a571cef
SSDEEP 768:+cseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppproL+Y:+cseJ3xWvhfynu1jaVcL88pCt
TLSH
T1F8D20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 787d353427600d2c387b85fbc6e36f77372b264e17083571e77c3a5c9e277336
MD5 671fb251b00757f8adff3a37d6046be2
SHA1 775384b7112f8a5cc4ad37df1a5cc5492e0f7596
SHA512 c20e53aa40ca940afdf55b852a5c47fd761d45e3c71203d01abaa1bad917da3e0bcd4c5a02f54e9e3d7e9f5665ce9c4c0c1d7b9d1d3e74ac0452f60bb35aec31
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1EW:KYHIhKggkXyNhIBKqck7ydTI1KccA0z
TLSH
T13B919916713F03023C7E2498A2A5D6774E4137A33494A9AF7FB800A68D27E521DFD8DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 2546236a0d5cf813cc5064c278059eb8dca1d3ee6635c0e2ada8fbf74b2bc55d
MD5 34aaf5635573e3b1d0b31a87a3db9aea
SHA1 831ee03f98c5590e3bcaa1360d6e50ce66b68794
SHA512 cd42fdf06a73957e4f075f21896c320a53ed6e995ba1690c7fae8c255c8470f822f5c9b491bbea3b49b659be8925e2142dd9a10d74430bbea8e4d3754cc35c47
SSDEEP 384:lMZcIhsNiVvkCD7Wl7bimITSy8AfKhdUCpXP5+mm7EZ:oh/Dax4QUCp/5+Rm
TLSH
T121625CB2AC789C7799E3B146F48936135FF4D06BA6C86B40E5EC2B1D01DB6A80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 31dc723ff46619e1228db5fe8ff1242e056428a16e650cb8ef8954826d30a7d1
MD5 f1ffac0ab2effa26bdac39fa0443c3ac
SHA1 7b4ad2ddd8321e981146a93a41035edd7331e9fc
SHA512 bae5ef39de6b6b2f9dc6522be9b24210f81fa7e45993f4ffb3eff4df588daa9d2494dbf178342a4f1a7360a108fffd9932ae891f170ebb255554def84444e870
SSDEEP 192:lONl6vMtPQmiUyUZUnThTp8CfKBp847XPXrU/u:lONl6UtRv6nTHfK3XPbU/u
TLSH
T1DA020976BC785C7B9AA3BE46F48E27171FF4516BA5D05B40EAE82F1D00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 5daf6f1274718bfd1cb81792150452d64c6bf0a60214481feeb86330511cac8a
MD5 f3d68f3757c782ad6bf31048f8249d70
SHA1 bc98e448025db81397f56c7f9b372be8c21ee6e1
SHA512 561064e84511602f23aedc1c2106186e55d9a17ae37f86f4426b318407974febc4851dd4f3c9e360009c0b33639f274f2b379e6c50416614235b4cf5a6ffa376
SSDEEP 384:O3MZcIhsNiVQkCD7Wl7bimITSy8AfKhdUCpXP5+mm7EZ:phqDax4QUCp/5+Rm
TLSH
T161625CB2AC789D7799E3B146F58936135FF4D06BA6C86F00E5EC2B1D01DB6A80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 4667308e249a31b83a6ec4db794be397de353b868376e32c5f115e0339b3ec3e
MD5 6afa3a4adfc813e711627990bf4aba8f
SHA1 7055b24095cf6a57d68441b91e57d25cbfa4aaa7
SHA512 6429e2d84ec0ef7c2747b713f67c41f8418ad52a8e1df58489b15ea106c5a36ca9b8250712e3eb30f61866eb8c6836d5fd2837941f4d0a14a79729ca8b3e5fc5
SSDEEP 192:1FON2k6vMd7PQmiUyUcUnyshTp8CfKBY6Fd3ECS80IXP/qs+U/u:1FON2k6Ud7RvFnysHfKhdUCbXP5+U/u
TLSH
T1A812FAB2BC689C6BADA3B546F48A32135FB0916BE5C46B50EADC3F1C01DF66C1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 52cf53f9af4c30f29e65d7cc2592388cab7a050eefebe8e774c2efa5748a35e0
MD5 e3a5643924eb5476eff3b3a045081df0
SHA1 b90247a218e5c118d402369ce7cf12c205d40e2a
SHA512 6d74b296daec4cb36a08cf2fef525e5fc9b9e5fae8ef4aea45fb8651e002b029819793cc45aa2a959d640420afa5dde0bac603edd566c67cde0e31b3b0a0e758
SSDEEP 384:W3ffZcIbZsNiVQkCD7Wl7bimITSy8AfKhdUCTXP5+mm7EZ:UVqDax4QUCT/5+Rm
TLSH
T1A2725CB2AC789D7799E3B146F58933135FF4D06BA6C86E10E5EC2B1D00DB6A8030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b58faf44-e90a-4237-8986-0b04867244e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b58faf44-e90a-4237-8986-0b04867244e2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c8b7a48e67339f0ad6bee2da223881da059fff763b45ba2dbb31e227c4f2562
MD5 0d2fd4f40690c2ead9e4829386ab2f4d
SHA1 b876683d3f7a94f7c6e5f4aaf6dccd61725410a5
SHA512 7c96052d41d7ab69b1053ebb428b16ef1aaa205252ec9c468bef85b64f374f39bab06d874866e69113953595d6a7909d338adbfab6632c0eb940730a57033241
TLSH
T1B5412A5DA6EA1148B3B77F1AABF6686D487B7C372E07949D10110E4F0A23A40D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download