3a4c4658d087347a551f642fe8ff93a55977bbd6381f7921f9cc81f7940e09d9

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 22:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
assets/update.html
Size 16KB
Sample260703-2tpmvsds3m
SHA256 3a4c4658d087347a551f642fe8ff93a55977bbd6381f7921f9cc81f7940e09d9
MD5 2a42297538a271673fab88d66790c98d
SHA1 6c806c25df814cff2456f4dd17fcb952e986d064
SHA512 1dbbdad1a4abbc1ee99b79a6c765b6b91eb1e53084d219e1f7d145b59307823654f25b7866aea5f8b11487b68c188c54547ea56351fab43a31b9e9c7e5fecc7a
SSDEEP 192:IyBhyaM0re1Bk3OkUlvRJVEZtILoPl016666VInRoRmAuvN:NBKClbN
TLSH
T10672746495602026257393BEABE31368FBA25057830392693EDC53528FF3D58E963FCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2356	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275927707223533"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{09A8898F-F8DF-4210-9D71-8ECF5AF21873}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3608 wrote to memory of 3184	3608	msedge.exe	85
PID 3608 wrote to memory of 2356	3608	msedge.exe	86
PID 3608 wrote to memory of 4348	3608	msedge.exe	87
PID 3608 wrote to memory of 4348	3608	msedge.exe	87
PID 3608 wrote to memory of 4348	3608	msedge.exe	87
PID 3608 wrote to memory of 5044	3608	msedge.exe	88
PID 3608 wrote to memory of 5044	3608	msedge.exe	88
PID 3608 wrote to memory of 5088	3608	msedge.exe	89
PID 3608 wrote to memory of 5016	3608	msedge.exe	90
PID 3608 wrote to memory of 5088	3608	msedge.exe	89
PID 3608 wrote to memory of 5088	3608	msedge.exe	89
PID 3608 wrote to memory of 5016	3608	msedge.exe	90
PID 3608 wrote to memory of 5016	3608	msedge.exe	90
PID 3608 wrote to memory of 4784	3608	msedge.exe	92
PID 3608 wrote to memory of 4292	3608	msedge.exe	93
PID 3608 wrote to memory of 4784	3608	msedge.exe	92
PID 3608 wrote to memory of 4784	3608	msedge.exe	92
PID 3608 wrote to memory of 4292	3608	msedge.exe	93
PID 3608 wrote to memory of 4292	3608	msedge.exe	93
PID 3608 wrote to memory of 4412	3608	msedge.exe	96
PID 3608 wrote to memory of 4412	3608	msedge.exe	96
PID 3608 wrote to memory of 1536	3608	msedge.exe	97
PID 3608 wrote to memory of 1536	3608	msedge.exe	97
PID 3608 wrote to memory of 4972	3608	msedge.exe	99
PID 3608 wrote to memory of 4384	3608	msedge.exe	108
PID 3608 wrote to memory of 2584	3608	msedge.exe	109
PID 3608 wrote to memory of 816	3608	msedge.exe	110
PID 3608 wrote to memory of 688	3608	msedge.exe	112
PID 3608 wrote to memory of 688	3608	msedge.exe	112
PID 3608 wrote to memory of 1584	3608	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\assets\update.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff95724c188,0x7ff95724c194,0x7ff95724c1a0
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,15749566072773644550,4113779203075107095,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,16643954354003780498,15736896273658494129,262144 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,10635713251541730625,14134541257993893847,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,7863436921310159675,13607825782141276397,2097152 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,12257693116232653231,3473138445955467046,2097152 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,11128152647539581590,10281460153692228366,2097152 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,7987020636333204477,4685496593067314228,2097152 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,2362744265667155704,2770489372202467295,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6250467184235837207,17542418722325510593,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,16728394550805478856,16443046175633758587,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,16728394550805478856,16443046175633758587,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,10712329007571054911,17332998315518748458,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4748,i,17864297582228073633,16306857324548801420,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,15635402437158288212,13484224735959354169,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,8455027516627013059,12749091052329076870,524288 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,6203971034643243947,5428225821452115291,262144 --field-trial-handle=2300,i,17176834081683229202,7968320463594464959,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

05af2582-3b3b-4d74-a285-76fba6e9acdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05af2582-3b3b-4d74-a285-76fba6e9acdf.tmp
Size 30KB
SHA256 6853485409d24535153bc41cb8a07c2d6e74a49242455e3c71cbc78ced3b494e
MD5 f690b5967a604d819e83392e5652aff4
SHA1 a3ab0e3ffdb3bd3bec20a49edd26dc83bf79b3e7
SHA512 e3344ebbc55e050bbc88c61ee4bfc43ca9769d562e8619a086b521a0c022c3e308fa84ad0ae987539c386b50bf99b72ff61452f2d22f1bfad77e036c172cedf2
SSDEEP 768:jPsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9kroMmR:jPsqxXlWvJD6Tu1ja54LAs9vMS
TLSH
T1D5D21B3B694CC77E4F840E6CEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f07f24f3b1c8da1cce97f8016a1f09aed5b61954bdf699f10121972e153aebbd
MD5 400743b788f5d04e5646d883793634b7
SHA1 5166aac485989df158251acf6f3b12156d532648
SHA512 1ff14b24f5269f5bdf5a9c856d3cfbd5c0f64a573b573cda8862de6700856d0308d1ad9ef1e35f29503a8e6dfb474a283224e9d1bd659b5609346165423b21b0
TLSH
T12D71713B122209BAD3AA8033D0F32341317BAAEAF4235E5917708CB77634B52B15957D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4e5472248f17b5bed7d635794b2958f934e849ae9cb310bec1d4caf001b216a9
MD5 a83f1c2149842387aaf70379b2dc0aab
SHA1 0dae87eeeaf74e4708b99d9c71782c79c4ccbf1d
SHA512 1e65feb59c44312756e81923ec2d9e52a16cdcf19b4940efa1624f94a7462963b9f2ef4473c38862c5d23af0b762a3095817d57fe73971719a2dfb8ba293fdcf
TLSH
T1B231AFF7C3D4866E991156F0AB247E2BCE2D055642283C1689E4EF5FA3F3474E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ec8b0b44797fd9e80bcbfff95e9b61187cbf1ec847180c83e4d75a50eacef78e
MD5 8b255bb16ce6be3f8a60dcb77ae06df7
SHA1 00b7559fceb90345ee71c015a149ffa2cf90eb93
SHA512 eac566a1e5f6d3d66f8c041adcd756984e4e63c123d3763d0308b24cac2736166291336da175601b1d8dbb2f1eca04a45fc641eda4caa02acbe02378dd09f539
SSDEEP 192:sxZaR2yM/jK1Ml8MkZ/fEsrYiIIdpd2HW6+WNGYIklq6IgrJ:sxZaUMZ/fEsrN5EHbG49
TLSH
T1B742D8126B34597BCCDBD309FA55BB53D6F94472A2900E44AAFCDA0C05E7AEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 30825b9691cba796e47c85436357dd35f23cd6a1096e3fa1a0310e355271cca2
MD5 6bf320bbf832685baa28b3ccd18d1b3e
SHA1 f49426012f0eb72a7fddae486aa9d0969dcb170b
SHA512 d023195299e25b83c3985fca5fed9ad66d83ab347dbc988dee87083c948b5afc3f67e37bbf51da44d56ae75d2525e908b1ba8aa589a12b098504472d511c63a1
SSDEEP 192:sxZaR2yM/jK1Ml8UQQkZ/fEsnYmIIdpH2HW6+WNGYIYUy6Ig5F5J:sxZaUqjZ/fEsnN5WHbGvnj
TLSH
T11D52D7166A3459BBCCDBD209F945BF53D6F5447292900E44A9FCCB0C06E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 05c09a969ce19ee96fa04d7eaf2ef21beac6be13fb42a4e6f9ebb52379a43809
MD5 d26132eaebe731309ea0e6019c3889f7
SHA1 56d4dcc318541a9f176ecc79b5a2e8244c0653c8
SHA512 1b22f7bb01482685a77d4b5a2a998b091f3e6a9a54dde03cdc2510b86fc4b2554d4f8b8c2da6f08e33b2f0daab147bd5c96441bf905d5d47e407d0ea99681831
SSDEEP 96:KYbaKYIK6m0Knq6+HuKYYj5uKiYCiE4KxC7OjyuIx:ExX/l9Zf6OjyuIx
TLSH
T1ABE12502713F02033ABD7908A3AA89378E4275A37418A4BF3B7955664EB7E115CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a87b0e2d-69ce-4294-aab6-7a2c46da56c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a87b0e2d-69ce-4294-aab6-7a2c46da56c0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 2ca9ff41932331f8a2788c3ce973f48af25428ce5d1ab7006c681b0582cb462e
MD5 5727c046bb9797ccd3628e314122c453
SHA1 af5e5a36829ce7fdc9d7c8c7048e88587d4876b4
SHA512 c989d36f8bffdaf9315cfbf3ff4dd9191dc320f2302b7d4500c25f29a1df27cf4224426683eaeae878c2e2ca6cad9c555004fc2a8b771e54770fbdd47518abfd
SSDEEP 384:FiF1tNn/s3n9SBzsN38TUNTUlIl0EP8bXjsQVRNwOWG9JH5OObjI9G6w7OmD3:MF1j+9qmwgToImHwOp9F529Mxj
TLSH
T144A27C335C688D7B9EE28A55F54B361B8FF4507BDA856E80E2C96F0C02DB5DC1306D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d69e62088d12916358f26dd8921dfb4ffaa91567fac6b35bf699f3501c3dba48
MD5 c73da7cb2907d72aeab99d8a99804467
SHA1 ac75f1e192e2e61cf19ac9f63a865a9ef68dfc4b
SHA512 0b9de997ff3581a8965a6f96f06a979e280724c0af3068687ce6ab50cbd15999daa5ccb3361ec4ef50b4ee8b355347d11094a55e271d4b9b01a4c8024050879a
SSDEEP 192:tONg6JkRtQmiUyYEW+RNwOmhOmQh3xRQU6:tONg6UrsW+RNwOW0QU6
TLSH
T12A02E93569381C7B9EF2AE09F54B27175FA5103BFA852F84DAD81F0C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 422c0c259ee0b44c2d9c4294e04b54ac3b2c7e36af43393ba6332f7abf932a48
MD5 4a6ee1bc108bb5a5e91f4454cd182150
SHA1 ad2b2be331639b63a8379d4661753ab8621b5ee0
SHA512 dae714fe2888ac10b6c0b63c9afd4ba8f18604d9bbf09eaec39dac2597bb22866bacf5849cad42e928d112c3736160134361dc48c76893be09e2f860613bb6ee
SSDEEP 384:etNn/s3n9SfsNtBEP8bXjsQVRNwOWG9Je5OObjI9G6w7OmD3:ej+9URoImHwOp9M529Mxj
TLSH
T120928D326C384DB78ED39555F54B3A1B8FB8507BA7C42F8491DD6F0C02DBA9C530691A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 2d4e63053c439b855eebcdc3302c4d281d9d5617f6b370fae1d742eeaef39c2f
MD5 8d55fcf1f98814f5da8b9edc5cb9a3b4
SHA1 d7db38004e2671be6ab2b794b79d360a34ecbe7e
SHA512 ac27ba57376b3ba042f745a889adc76c8a68df60733e13d6bdb60df56bd6a831ebb42337abce3369e5072ad7459f16821fbedbdb2e8302e03409c247b8638bbb
SSDEEP 384:ktNn/s3n9SfsNt0EP8bXjsQVRNwOWG9Je5OObjI9G6w7OmD3:kj+9UEoImHwOp9M529Mxj
TLSH
T1B7928D326C284DB78ED39555F54B3A2B8FF8507BA7C42F8491DD6F0C02DBA9C530691A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5793cf3b64722715686bc733de80806fb4b986e94391b39f87aa3572ee0b06ce
MD5 bca1372be3ebe843d5d17b008e84d9ef
SHA1 b01e085260e653a7df18b8bb9da549d4000c0b63
SHA512 e495345998cdda14dca8c1626ceb3a9ab17916aa9acbeac5792a635e0338d376cbf88459056cc8f085252988d60ec3047c217570cf333949fa88728497f528d5
SSDEEP 192:gONY6JkR5QmiUy0EQ+RNwOmhOmVU9DFgVc9qWFbU6:gONY6UXGQ+RNwOWG9JH5U6
TLSH
T1B5121A3168385C7B5EE2A545F54B36174EA5512BEA893F80D5DC2F0C02EFA9C234A86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03da5c61-748c-40f8-90c3-14ac5a6ba56a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\03da5c61-748c-40f8-90c3-14ac5a6ba56a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 53b3c03dfdaf9febdfb1aeeb738b268ac72e15dcec469eee2f2d0c467ba5e909
MD5 a882f0732ce7c4cafc79aba9d8654299
SHA1 7dabaadcd12c05da20733ce34e1b69b7ce900499
SHA512 f7a11a27bdd3f12a66a28c10cad702a17620faa23e3ec58f96bcb32dd36f6da2413988c75b2c651cbe9f6bbe4b2cb4b4ae8dd21f19d5031b96b9cd88af7c2755
TLSH
T1E141F85CB6F91548F3B77F5AABF6A9AE447A7C372E47C45D00110E8E0A22B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download