bfcbae4a2b6d7a01c28efe082c32318da78f10a3fa6004603d09a55021f131a0

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 581B
Sample260710-pepyvsbt3k
SHA256 bfcbae4a2b6d7a01c28efe082c32318da78f10a3fa6004603d09a55021f131a0
MD5 0a462bc4b73efdd62528e8563497547d
SHA1 e39495bb2b376d59cf51e01c7fdb147920551132
SHA512 4added36dc9209ead946659bd2ecfcdd2fa64a6c9f450f02ee2fa450c81370f5b7485e89265e7b4cffd5a12b71941f1d57a0e7204a610907017293724f361756
TLSH
T1A2F0E1E360C19C5C8675566674E0E188DC831757178257017DDD78372F60755CCA328D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4396	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281619434936336"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{08BC295A-2A6B-49B8-BB12-96A9B08F73D7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4060 wrote to memory of 960	4060	msedge.exe	86
PID 4060 wrote to memory of 4224	4060	msedge.exe	88
PID 4060 wrote to memory of 4396	4060	msedge.exe	87
PID 4060 wrote to memory of 4224	4060	msedge.exe	88
PID 4060 wrote to memory of 4224	4060	msedge.exe	88
PID 4060 wrote to memory of 4452	4060	msedge.exe	90
PID 4060 wrote to memory of 4452	4060	msedge.exe	90
PID 4060 wrote to memory of 2180	4060	msedge.exe	91
PID 4060 wrote to memory of 2328	4060	msedge.exe	92
PID 4060 wrote to memory of 2180	4060	msedge.exe	91
PID 4060 wrote to memory of 2180	4060	msedge.exe	91
PID 4060 wrote to memory of 2328	4060	msedge.exe	92
PID 4060 wrote to memory of 2328	4060	msedge.exe	92
PID 4060 wrote to memory of 3104	4060	msedge.exe	93
PID 4060 wrote to memory of 3104	4060	msedge.exe	93
PID 4060 wrote to memory of 3104	4060	msedge.exe	93
PID 4060 wrote to memory of 1080	4060	msedge.exe	94
PID 4060 wrote to memory of 1080	4060	msedge.exe	94
PID 4060 wrote to memory of 1080	4060	msedge.exe	94
PID 4060 wrote to memory of 4028	4060	msedge.exe	97
PID 4060 wrote to memory of 4028	4060	msedge.exe	97
PID 4060 wrote to memory of 4212	4060	msedge.exe	99
PID 4060 wrote to memory of 8	4060	msedge.exe	100
PID 4060 wrote to memory of 4212	4060	msedge.exe	99
PID 4060 wrote to memory of 8	4060	msedge.exe	100
PID 4060 wrote to memory of 4716	4060	msedge.exe	102
PID 4060 wrote to memory of 1400	4060	msedge.exe	114
PID 4060 wrote to memory of 1584	4060	msedge.exe	115
PID 4060 wrote to memory of 3488	4060	msedge.exe	116
PID 4060 wrote to memory of 2208	4060	msedge.exe	118
PID 4060 wrote to memory of 2208	4060	msedge.exe	118
PID 4060 wrote to memory of 1192	4060	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9cc79c188,0x7ff9cc79c194,0x7ff9cc79c1a0
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,12523614148636169476,1906470300494681444,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,12519816862451611581,18246637840875094720,262144 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,17652260800298040105,9553642544922734169,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,2784099151617072022,3648662787638694419,2097152 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3392,i,8656384207688727596,12245573060997247114,2097152 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,2317797286893584432,15253726032724112320,2097152 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,14109950180684654024,10974504579844805765,2097152 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,16810555800739940239,9375692263702921715,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,14418479442646494078,5671202181882706557,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,12293006231814939026,13819618285723038495,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,3766881162843614890,15767490634416779929,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,3766881162843614890,15767490634416779929,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,10749366391263466405,18045923561751947016,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,11119203874639685384,5809636158136155715,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,11467647311590825483,14275206081195275017,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,10202940179621950235,4307835730091488096,524288 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4904,i,12291865335147185418,17801035625526575593,262144 --field-trial-handle=2256,i,7940346598209220723,8672919835563170509,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 15d91b6220e584b0896ecb5a0f2f64c0aad623cd7a57a55a9ffa6c445cb25903
MD5 0e0f5ba61ec818794e26390a5b28cd0b
SHA1 476f4f5fc9ecbe85da8529c64c711b7214e87b2b
SHA512 9f3e9113268586fe5dd55b576ddb92f7cdb317bfed104a8d4d1075911663505f11ffbb6830e04895a76a7fc1814a95101229eadc8857aee1f5b91361d69d9780
TLSH
T15171E83C026243B7D36E01F193CD720D353292FAFBE32E898197AA7B5922761C159BC4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1d623b4a11b19f7b9939f2ff4dea4f677af8774b29add484543bc72e8ec0d4c2
MD5 277fa5c6ba8dc9ea3ad67998dda95953
SHA1 d533ac9f1cdd1e4713cd2904c090f60a0cd2fc44
SHA512 2325dd47562ce68dadf6bbca06cd7d25ccb1d1fbb51800ed4cac5299e7e965d864aaa60e62fd59c75e9ba6f05935f249888fc05d3f8c74709c830aa2f175b502
TLSH
T1BB319EB3C3D586AEC91256F0AA287E2BCE1D054683283C1689F4EF1BA3E2074E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f1a0247b-b75f-4697-84e2-16eaf8a0fbff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1a0247b-b75f-4697-84e2-16eaf8a0fbff.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 54121ef7afbf8600e8dd3e9bee0f62e10775cb666f9d6a9409ba99e32c9d6f1a
MD5 f5af5a0c685f4ab3a9657489390d7f43
SHA1 19acb432d752e5345a72cabaf759dc447af9df7d
SHA512 2d03ae2eff99a2d3417c0ac9a21f251bc1b270e0446a3369a28131de4c44aa94a90e48a5b31bc37bd8829b413121f5fe527dc043cd9dc666f74863d640296ab2
SSDEEP 192:sxZNRQyM/jK1Ml8Mkn/f2sBwRveIdpd+HW6+WNGYzQ4HDWkIgrJ:sxZNmMn/f2sWRXUHbG69
TLSH
T19942E952AA346977CCDBD209FA45BF93D6F5157292940D44AEFCCA0C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e8b4b524cf8e7a40989da7d04824c57fd2394bc6f93a23be9c9cad94956d2cb1
MD5 270aa1c7aae525bcb612a95edd0ea409
SHA1 42936bbd6569f5b14acb265be9730bdb5d970965
SHA512 4f30260fe37ae026f49353b82fddcdf46ec7a64aed2a382820738a360734924a88c97168cef8076bead4237e217425aa0516ca80329a8241247092ad45f34cfb
SSDEEP 192:sxZNRQyM/jK1Ml8UQSkn/f2s1w+veIdpH+HW6+WNGYz1DKDWkIg5EJ:sxZNmqRn/f2sS+XeHbGJm
TLSH
T1D052E852AA346977CCDBD209FA45BF93D6F5147392900E44AAFCCA0C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 64d033e2c9e3d6e30b3fbd50e2243fe2cbc5511d13584f08f5eddf13dde0d5dd
MD5 f1b8cd2100706ef552728a2c07bf5d40
SHA1 7259d2ae0ab762e08698f89575fadec1d7003916
SHA512 15188987434b624422b5cf38a0db883e221c1c889be3b4262c826ebdb272a1def7efeba0a01339be15497ffcbfd129b6d2cd4ab2997a54a6a45b3f9a698accb2
SSDEEP 768:18W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjCroIdiTYG:18W7kf0Wvqidau1jaa5LA3jZiG
TLSH
T125D20B3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 92c2102f09ff0b8c6071c917fe6dd6b733547f2cc3af611aaa09431195e386a8
MD5 5e3254093694f9bb5e9f2a70b94e1e5a
SHA1 68e4ac8d3d856de0e5653d72a469577876b0930a
SHA512 277cc94145a6ad55015f165f5d047c2ec33bcb53ba6cd0a4cc66fbb9def1f637354495249e8d45e3886e2862a2640cf2fcdef450b6c31ee2279e7f654f0edcdc
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT//I9KA8QCy9dIBKeEMWpIxK66:KIbCKc//iKA83GdaKeERpmK66
TLSH
T1F3913456317B465278BF2D149256C6269E4235733418E47F7BB810A70F6BE110EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 17f467e005ca1916bbaea94fcbae465cef3efc1661f83410c7a26826e8c4b033
MD5 8bd1f593ed97d9b6a3750344f0ed5f36
SHA1 34a75c9c597255a4d40ca1cf7fc02bbf0140d060
SHA512 221bbfd8edaaeb6751bf36f1d023238d70856ce682523771286c0726e7648ff80ecbaf921a28f4cb27de793bb84297468bbb1ee1077b42a352ba90964ff9d14a
SSDEEP 384:ftNn/s3n9SSzsNS6rSG4FbUENrdPsqcmOObjI9G6w7F9:fj+9FXFld6m29Mb
TLSH
T1BD929E365C756E278EA25155F18B3A079FF4817B97C82F08EAECEF0C01DB2AC5302506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dca4b94bcfe975d31db11210fd7f8928c002e43ed253d106e57d96ea542a47dd
MD5 f1bfec931a6fe787b7e9c17a60082a15
SHA1 befc965dfa66853004bc52a86c9f27ee8f13a43f
SHA512 2fc257e3fa372323366ea99c57278c19cbc609908360d369c4b245be0d721812b55223a9979f2bb3742d243d85430aad370c2283d7633834efe468f73f4f2f25
SSDEEP 384:HtNn/s3n9SfsNS6rSG4FbUENrdPsqLmOObjI9G6w7F9:Hj+9UXFldtm29Mb
TLSH
T13F92AE355C756E634E625595F18B3A079FF4827BA7C82F48EAECEF0C01DB6AC4312506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a0135695cf52e1234aaecc7d21b440268a150693128a6a25259ad968c18981a1
MD5 587b4c4a46bd241ab6a3d71657d6373f
SHA1 1c0db8c125be27c673d9cc985c5462a7e4dc3e11
SHA512 4ef30f806292e335bc3e450499ef981162bd2e6c50258e7f773f92d774bd5cd7888f7a354eb7df19a39843307b70a86865b751658cd073d8a5a5e8d0b9aff520
SSDEEP 384:ltNn/s3n9SfsNSfrSG4FbUENrdPsqLmOObjI9G6w7F9:lj+9UqFldtm29Mb
TLSH
T16F929E365C756E674E625595F18B3A079FF4827BA7C82F48EAECEF0C01DB2AC4312506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0564b574854b9d50999d32efb64a141bd82589942dbe516e4a3cfa1c5d74f1b5
MD5 fbfd8c460058b59f7c161473e8738299
SHA1 e7ee2669153f740d9f4bc15fbb7a34cdf1b4f4be
SHA512 010c6eac0fcb8cd840a1f8a281f95ec37b6cd185d827461c13d0aa63a1bcfc96f21f376a7934c6130c2aea5341515c2796af2a014bfc063b0264131021947f68
SSDEEP 192:MONg64BAQmiUyf1yW5GBPK1B+FdGw5caDUmCU6:MONg6eA4MWUdPT8U6
TLSH
T1C5020B396C796C6B9EB2AE45F58737175FD4103BE6846B44EBE85B0C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 978027d61c9f648cd3fee2407508391275bfb7633aba6a8e03aef6afaf2e66b7
MD5 13ad5084515fee6d5edab8d0a7996ada
SHA1 32694b255b30bfa29077510bcf7aa0a9cb1dcd0c
SHA512 f1974c1362529c80da58b06f7dec70c574d9ddeda222479114933c106b8a39bc0bf22db252099e89ed573c9ba5909be796f5e9aa08df40f1406fa20438e6aece
SSDEEP 192:WJONz64B3QmiUyfyP5GBPK1B+FdGw5LGPNqZWwSrqWU6:MONz6eZ/PUdPsq9mU6
TLSH
T1A2120A36ACB47C6B5EA26541F48736075EA4413BEBC46F44FBEC6B0C01EF6AC6306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a308c45-19b5-445d-bef3-ca25bda3c46c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2a308c45-19b5-445d-bef3-ca25bda3c46c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 811ec5ebe759bf15610964aa02da651502e5eec496b31f24c3d911cccb543225
MD5 27810b5b10857e26aa19b7e9f309a343
SHA1 6747086e294e81805319e865b4de438ed2ea2604
SHA512 601dd660bedf29c40831df33724ad511352d4e46381b946f6159749f2719301bcbb143456b6af95ea02a48db79c8ca3f611991bcb7bc4e25298e5f5db0e899dc
TLSH
T154412A98B6F91148B3776E5AAFF6A86D547F7D372E0BD05D00010E4E0A23A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download