462eaa17b03a40d127b34b68319ab6de60db911ad4d4f51c35e4e4b6a36254f4

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 98KB
Sample260620-ejvd2ac14l
SHA256 462eaa17b03a40d127b34b68319ab6de60db911ad4d4f51c35e4e4b6a36254f4
MD5 f999f2966efeb191ae6eb4d4961f5c70
SHA1 227fcba03c0f4a201a8e0ff5036a8b438c18de09
SHA512 0062cf5754f6619ed33df1ec93976985d0dfd83ae4fd67d54105bb45e359ecb787636337e5532d73305b1d0d1474945c4c35ddc66087e294d3875901d99500a0
SSDEEP 3072:NjD05ZtBPmIlmoA4h3FYnz6SW90VQT22IK:FY5ZtBPmIlmoA4h3FYnz6F90VKIK
TLSH
T14DA34BF25558107B6A3B83ADE868F35862A39405CF050E95F2FCA698C795FF42073B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264015302531772"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{92B10836-BCFA-4B10-8223-EC80CC611DE3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 2008	4308	msedge.exe	85
PID 4308 wrote to memory of 4812	4308	msedge.exe	87
PID 4308 wrote to memory of 2448	4308	msedge.exe	88
PID 4308 wrote to memory of 2448	4308	msedge.exe	88
PID 4308 wrote to memory of 2448	4308	msedge.exe	88
PID 4308 wrote to memory of 3804	4308	msedge.exe	89
PID 4308 wrote to memory of 3804	4308	msedge.exe	89
PID 4308 wrote to memory of 3204	4308	msedge.exe	90
PID 4308 wrote to memory of 3204	4308	msedge.exe	90
PID 4308 wrote to memory of 3204	4308	msedge.exe	90
PID 4308 wrote to memory of 3156	4308	msedge.exe	91
PID 4308 wrote to memory of 3156	4308	msedge.exe	91
PID 4308 wrote to memory of 3156	4308	msedge.exe	91
PID 4308 wrote to memory of 412	4308	msedge.exe	92
PID 4308 wrote to memory of 412	4308	msedge.exe	92
PID 4308 wrote to memory of 412	4308	msedge.exe	92
PID 4308 wrote to memory of 4152	4308	msedge.exe	93
PID 4308 wrote to memory of 4152	4308	msedge.exe	93
PID 4308 wrote to memory of 4152	4308	msedge.exe	93
PID 4308 wrote to memory of 2064	4308	msedge.exe	98
PID 4308 wrote to memory of 1708	4308	msedge.exe	97
PID 4308 wrote to memory of 2064	4308	msedge.exe	98
PID 4308 wrote to memory of 1708	4308	msedge.exe	97
PID 4308 wrote to memory of 4280	4308	msedge.exe	100
PID 4308 wrote to memory of 3732	4308	msedge.exe	113
PID 4308 wrote to memory of 4380	4308	msedge.exe	114
PID 4308 wrote to memory of 4072	4308	msedge.exe	115
PID 4308 wrote to memory of 536	4308	msedge.exe	117
PID 4308 wrote to memory of 536	4308	msedge.exe	117
PID 4308 wrote to memory of 3984	4308	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbd8d7c188,0x7ffbd8d7c194,0x7ffbd8d7c1a0
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,11945732306691256457,3186468956356215744,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,9108867826523773494,10850077352850029727,262144 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:2
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=784,i,14584632774351967814,5879639572321752335,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,16749968456184684168,13297283187598935742,2097152 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,1389936726536466463,458336714673692263,2097152 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,15509435827982741408,17415766128557377903,2097152 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,1085176594771508624,12521963479905047654,2097152 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,10938651671933137758,15070396659881264803,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,16400128444907696188,571248204976656790,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,3373913578150082564,1644889015055582504,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,3373913578150082564,1644889015055582504,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,2759150736492603089,2548396818838233640,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,1672913990341647346,2682740619779640838,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,13677767164695633171,14797747816087714988,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12999986160984570241,10951706718404183910,524288 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,6029179646978298529,5478432722996570164,262144 --field-trial-handle=2896,i,1226644390133629477,14264591898270628495,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

39330c59-e38b-45bb-b7ed-fd59d306898f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39330c59-e38b-45bb-b7ed-fd59d306898f.tmp
Size 8KB
SHA256 fbcd2f5e4cf61750ea7d8d367d76465169a7b40a2bfc312d901a89b3a7085810
MD5 34793f87aa73a60191044443037d6829
SHA1 4e7836f9d81efe9de8fa41b4fd2e67da6c2d70b7
SHA512 46a0ad75b94810d33629cc7dc82b8ea689f4024b9b839606dfe1b7bb59db72ebb0b8618c88b937ef5b92a50047c351fc69a767b749e655db463affefac589a9f
SSDEEP 192:JONii6v+YLNQmiUydkZh+CGp+Fdes9odus6PU6:JONii6vz/jZh+CndHe9wU6
TLSH
T12802FA356D382C6B9FF2AE45F58736135FE82177EA962F80D9E81F1C01D765C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 833c107f53e91d38a90d3cfc758465a505b7684b1f120a9fa202c47c9170dfe1
MD5 19bffc8223c34ce69040f320e07ca92a
SHA1 191aa4fa9f226de82193a5d604f01fcdf55b3a7c
SHA512 6adba33d6126519523550c5c9ec7aa1ab7af8696f5ad6ec8e3028064d509c9e8357fcff6ab51e1c20179f58cd80501b461829b55d17f133808c539f356820bb4
TLSH
T1A941D6F002A25B41DF3116B190F01B00367683DDF9737E18829299BE3A3AF63852647C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 80bdc4d79038a50d829fda5ad7031bb31bcd216195d7e611f09bca0f6389edea
MD5 b9e0ab3f9636efd5aeef20dc46c2ef60
SHA1 4992c0fbdf2f779114f2088337d4cbd29b9c7ea9
SHA512 ed9d3ccced40ad062f7f7e0d8c7023b9443d2c30e756b4cd8e8974a73b1f08b810aa85f3c745a104f51e3f8e56a88d9db23785831035fdd5049d533aa968da48
TLSH
T1B941A9B7C3D5876EC81156F0AA297A2ACD2D4556823C3C1AC9F4EF0F63E24B0E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9711794901f69dd983d51525906bb5014d8fb28d57f285d93cc08a57086e94b3
MD5 8043f815d0e8dca12f8489d73e585a0c
SHA1 763dd5021ca91a170be71d16fc410b71ecc9e00f
SHA512 af36cfd72a78552a92c950098945de330bf2f2441bec857c755367883b06163d538c3b2714e10be3ddbff554e34d62599de6998a70ffaf432a6d4dcbb965e18f
SSDEEP 192:sxZ3ROyM/jK1Ml8MkQ/f6sH12qIdpdiHW6+WNGY9IK/z0IgrJ:sxZ3cMQ/f6sH1Y0HbG/9
TLSH
T15242E7166A346977CCDFD209FA45BF53D6F91572A2900E44A9FCCA1C05E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 92f343dbd465da211e78ebec27ac2bb6f0273d2b64f5e6ffa6f36dbee71f6ba5
MD5 31638eea6912fc9cf143847a76ca8154
SHA1 81e17d3b9f8f777c572e103ae6048cb613dd5e92
SHA512 027780c45992149a261d5bf3c52927297fb0518a1c6c162fa8bc8e4f9bbe31d5b93237a552e62cd645cc8bfa88b45ea233c3122fa094443ea6a5f83df05a841d
SSDEEP 192:sxZ3ROyM/jK1Ml8UQpkQ/f6s55LqIdpHiHW6+WNGY9If+O0Ig5bJ:sxZ38qqQ/f6s55/CHbGqD
TLSH
T1AD52E7166A349977CCDBD209FA41BF53D6F45572A2900E44AAFCCA1C01E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d0796ee565a3c3e591226f0726a92f912af253d9614eb1740c91b89320bb8251
MD5 762c5e9bd33dabb5fe0dcc193b6d9f96
SHA1 87df529905fa299f13fe15160702372133d2538b
SHA512 b4f91e348dbadce133f3fe9b4f1e49c839f567581df3e6d63b4e603d55c37e1910502f30756f06972f48266df306f4b51fff09569e5a1a38993096843704e5a9
SSDEEP 192:sxZ3ROyM/jK1Ml8MkQ/f6s55LqIdpdiHW6+WNGY9IfBz0Ig5bJ:sxZ38MQ/f6s55/0HbGyD
TLSH
T1B552E7166A34A977CCDFD209BA417F53D6F41572A2900E44AAFCCA1C01E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a1a9078c42a5f440d7bd15063ba872216a957dfef764cf7f87771530ae163ecc
MD5 f318aa59ea5cbbe025c7b20b24e8290d
SHA1 0ee56991b34e1c65c5652b826809649e4c3c0c28
SHA512 1e70b85507ff433d546608f4f15dd9632a0a60016931419cf2383091dc3bbaec62ff5b09d4859122e923ccd42e72f77c6cec97547a82fde1d287bb460d628d08
SSDEEP 768:tacv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN2rowg6aN:tacv21wWvu+Z+u1jaeFLeRNNwg
TLSH
T18AD20A2B280CCB7E4F845E9CED2A6F8A6DD801CB57988D5047FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 414e50b15d6cf495552860e3c1ec1d1bb855869e292c11bbc4b0d09c2b2f9055
MD5 00eac689eb646c1b9df6943e1a146cb6
SHA1 135d8645f7c5adc52079dd8350de78c32ae466e2
SHA512 a32d517dced1f8753c7dd1b26eb529d15b58700d120d9441346a23c3801ec4ae0827903b325080d4825384e40d7e94c324a4bdbfca8427cc7dc70fb5cf0fee8c
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFah:mTXjiVoZFf7Xe76B9hB53ulFaf29g
TLSH
T1A6B19806717B139238BF695D92A189378E8131637605E96F7FB800A58F27E119DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593697.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593697.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b32b73f0011c518232434600545e1dec807f262b6b2dba2a7d228ce932709860
MD5 2b69daeb99155d7209ee89789bc562f7
SHA1 1e84aaa6ec4e96cd0676001fa5287172130c2a8b
SHA512 c853b25ec0af67e1bcef508c1f925b029ee52ada99f610fcfade79d32457a003f0417937f19e00a17dbe8777aa1e86ca5880723a0b0235c67856826506f2de92
SSDEEP 384:ftNn/s3n9SfsNuSelziu0Ke+CndHeRe0rITGT0IOx9i:fj+9Ud1YNfEDri+0zvi
TLSH
T1AB929E326C396D6B4EE65182F40B36170FB852B3E5C53F84D9EC6F0D02DE7A8131A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 8cd082fabcdf93e0b31c489f2721c908e0501d23fb8f57fe6f90f6056ec19467
MD5 71f8e8e3ddf4d40d57b37cbc0969fa55
SHA1 d8f4fc4f7917e3c8ff63e8d32ccbb3f206d8fd21
SHA512 bfcfa05ce47a12030a6b04edde7ad65f9124b852d0c8ead3915e42c5fd0b9ad7dd02f944b4d2e87b4543aa5d525857aea2b5f0443a26cc983d5795715f0d34eb
SSDEEP 384:aiF1tNn/s3n9SMUzsN+8TUNTUlIlFelziu0Ke+CndHeRetrITGT0IOx9i:RF1j+92zwg61YNfEMri+0zvi
TLSH
T179A27B3358289D6B9EE65A82F50A36174FB452B3D5C17F84E6DC9F0C01DB2EC134AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9a31b50d6bdae61466889e62c5a4b026fb2fb345eb304b4949b1f92e2c579054
MD5 4ea93e3c67c78eca19ea51642105709c
SHA1 336234a0317febd504fe4ffc744e83a08024a278
SHA512 910f57680a481cc102b1c9690a266a9b5a7513ae8092ed8ca42073e8899a95e06165da0ba1dcf7fa350ff092b2d94dee5662460d23835fd9dd2f76dcae10af98
SSDEEP 384:ctNn/s3n9SfsNuFelziu0Ke+CndHeRe0rITGT0IOx9i:cj+9UW1YNfEDri+0zvi
TLSH
T1F7929E3258356D6B4EE65182F50B36171FB852B3E5C53F84D9ECAF0D01CF7A8131691A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d15515402f41aeee108ac769fd0a209169e44d4ea3ccb18c8cd0f17b6a379328
MD5 fe1b9b46f0ba2c255823e930ba10a8b4
SHA1 fbd571ddae322e1e8222906189bacf8a863495ea
SHA512 68295dba5d91408f531f80b3f674ec46a463aa992006cdc5c82d5bf7bc78d04b6339d64261fcd9b7a030c846efa55587653a4969be549f68c8b24798b1c3e525
SSDEEP 192:aONf6v+YL3QmiUydkWh+CGp+Fdes9omOQNDCH9q6U6:aONf6vzldWh+CndHeReQrU6
TLSH
T146120B3668786C6B9EE36941F48735135EA89277EEC63F80E5EC5F1C02DF69C1306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4174795e-ffe7-4492-8d06-5a6e52ab6441.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4174795e-ffe7-4492-8d06-5a6e52ab6441.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1fddbd0d65d8a843499ca8fac38796ba815218c681513167b6b5fa2424891c4a
MD5 380f5c0517dedf0f9600f4f6d85fe0fd
SHA1 1e18646d925e231e88d81290684aeef5af1b11f2
SHA512 3f68431a020850dea26a4b8aa983a4f4c788096de6e8a216784b73f322e04fd91805944564f15b4477ed61826199fab7063d47f7e1017f5642bd9cd02e0233de
TLSH
T10B411A58A6FD1148B3F76F46AFF6A86E547ABC772E06949D10110E4F0922A40C871B33
MD5 SHA1 SHA512 TLSH

Submit Download