bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/index.html
Size 142B
Sample260730-pg1hdaxcjc
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875755352404"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{2D4E27E3-E9F0-44FD-9256-3F7AE5B0FB40}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3748	msedge.exe
3748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe
2384	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 1260	2384	msedge.exe	83
PID 2384 wrote to memory of 2672	2384	msedge.exe	85
PID 2384 wrote to memory of 400	2384	msedge.exe	86
PID 2384 wrote to memory of 400	2384	msedge.exe	86
PID 2384 wrote to memory of 400	2384	msedge.exe	86
PID 2384 wrote to memory of 4660	2384	msedge.exe	87
PID 2384 wrote to memory of 4660	2384	msedge.exe	87
PID 2384 wrote to memory of 3888	2384	msedge.exe	88
PID 2384 wrote to memory of 3888	2384	msedge.exe	88
PID 2384 wrote to memory of 3888	2384	msedge.exe	88
PID 2384 wrote to memory of 4892	2384	msedge.exe	89
PID 2384 wrote to memory of 4892	2384	msedge.exe	89
PID 2384 wrote to memory of 4892	2384	msedge.exe	89
PID 2384 wrote to memory of 2308	2384	msedge.exe	90
PID 2384 wrote to memory of 2308	2384	msedge.exe	90
PID 2384 wrote to memory of 2308	2384	msedge.exe	90
PID 2384 wrote to memory of 1100	2384	msedge.exe	91
PID 2384 wrote to memory of 1100	2384	msedge.exe	91
PID 2384 wrote to memory of 1100	2384	msedge.exe	91
PID 2384 wrote to memory of 4628	2384	msedge.exe	99
PID 2384 wrote to memory of 3296	2384	msedge.exe	100
PID 2384 wrote to memory of 4628	2384	msedge.exe	99
PID 2384 wrote to memory of 3296	2384	msedge.exe	100
PID 2384 wrote to memory of 5016	2384	msedge.exe	102
PID 2384 wrote to memory of 4308	2384	msedge.exe	105
PID 2384 wrote to memory of 4316	2384	msedge.exe	106
PID 2384 wrote to memory of 4364	2384	msedge.exe	107
PID 2384 wrote to memory of 872	2384	msedge.exe	108
PID 2384 wrote to memory of 872	2384	msedge.exe	108
PID 2384 wrote to memory of 4184	2384	msedge.exe	109
PID 2384 wrote to memory of 4184	2384	msedge.exe	109
PID 2384 wrote to memory of 3748	2384	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffce555c188,0x7ffce555c194,0x7ffce555c1a0
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,9950227219318365744,11409830709583677959,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,10279277104272480087,12421776112451366380,262144 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:2
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,5085040831159835856,3353804446083858015,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,15090227676633762902,1328729705464621864,2097152 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,6675214068508378953,1169605051030746841,2097152 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,13810972841861501496,14490937869120745960,2097152 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,7536185427364174425,10341709129082419947,2097152 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,8517440104143569957,4276392470085656512,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,7782993599864377513,1989870532368935608,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,11045852641538666266,11195242523642185974,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,11045852641538666266,11195242523642185974,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,10765303635353164586,13706151224728340452,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,5384409671442367689,12353061641501868202,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,6483265425400598065,14071140025399566666,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,5867964826892794254,10099575977122951613,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,6523065943407835033,6752922331455694202,524288 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6072,i,10095114586390736175,2762634311843658396,262144 --field-trial-handle=2428,i,7807186793555085166,10735115963385250405,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3748

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cab953e2d87542620a7f113233fd550f51aadf8bb169fe27e6e63e0b34fbe7d7
MD5 0480436c167776e530610fa5586b25cf
SHA1 21f8a88d5e7c56eeda2d430618abbcaa86500762
SHA512 9789af2ee29df5b67fe04590223f4ca8941a3a7ec7a3035aa1caf618892196cfe3a9b7a9cc69ca98ce4fa122da5a86a25ef57167b0c52b4310ddd5a00f0517eb
TLSH
T123612937248282E0E31A31B0A1E033543FB68EFDF0439E5659EC447922B43EE8277E18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36432ca5-382c-42f7-bc0b-9824cfd1dde7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36432ca5-382c-42f7-bc0b-9824cfd1dde7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 57af92602bc2e905afb3fae2bf348f6cc8e0b2b620ab8bb8f3df8d432515164c
MD5 78b97990da205487b6482af18df48343
SHA1 8ca3fcf81af85869f405ccd784f3ecddeddfaf22
SHA512 0babc9f929037af813d4d31b966b32255984a72a8ebeb90fca34a35faaa655d2842bc7d19cb94b7ff50843e2bd1d56a7b878458ea42348845c2cf06dae53700a
TLSH
T154F09EB383E4556E8A1042F05618AF1BCE2E0502831C7C55C5D4BF1B83E2075D500D9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 044efa2f13babbe60506aef75098d9869eae9f225ebfeb7ee87eaa4dbf239052
MD5 dbfb828a5ff72aca1e9b40d2599a70cb
SHA1 d0d6240d9fa96515bc88891dd48527c53116f695
SHA512 5a0221c700487e44bc2509bdcbe49f8e677a97fb675dc27c95d26a1556c41da3229a9a169ab233609407335b02679bf68f8ead4665d650e216582e8e40a25fba
SSDEEP 192:sxZXlk3/fXsxPBcIdpdgHW6+WNGYCktwk8IgrJ:sxZXu3/fXsFBFCHbGPJ9
TLSH
T1E822B7166E28987B8CC7D219BA15BF53D6FA5032E1941E48E6FC861C04E7BCD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f03bc3cbfbc16221f667b5b523c331283bcc597bcdcc92d8e31b2c6dd6f6183
MD5 66211fc77b78a6ae04933750a42d273a
SHA1 fb80cd1f1dd81947886c1cc5a9ad6a47719457ad
SHA512 d514ef91829e05ab7fb7d61947e39f29c867c7810f384c052a05baf31b062d814b595248603a2dddd21ea4397aa552c77fb11a1580a895c2e7589307fecc5c6b
SSDEEP 192:sxZXlk3/fXstPBcIdpdgHW6+WNGYCktwk8Ig5fJ:sxZXu3/fXsBBFCHbGPJX
TLSH
T19122A6166E28997B8CC7D219BA15BF53D6FA5032E1941E48E6FC861C05E7BCD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c42f826acd188ca1aff2e618e043a9194a3bfa064b2b3a7a3db93b21b18fe6a7
MD5 6f51bfbd59c6f0db8c74ccc41ae83090
SHA1 f73915336d0b6695c611c479b2df658d3b6cb92e
SHA512 2543e0f85822d260d2e524d913eb18c6414ddd60d5a4ee31414b0e66f5416914ebadb5ebd4fbb9a55eef15cc36b5666ba3409c7c831a88c90160a759b7a914de
SSDEEP 192:sxZXlk3/fXstP+cIdpdgHW6+WNGYCatwk8Ig59J:sxZXu3/fXsB+FCHbGDJJ
TLSH
T15822C7166E28987B8CCBE219BA15BF13E6FA5032D1951E48E6FC860C05E7BCD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0bd9ac57b67937d23ec55254806a4812bc617f40c86b6a76bb47f3fffcef56ca
MD5 68d3a8b7ece96d12c4dde34b15b89b20
SHA1 e4d696e30d9adf6a92c779bdb4c61ae09ddcf704
SHA512 04ffa804d904ea65d855494d0533ad7392dea7cc814ec3d469f21b4a245409e74d6b8095ae2aeab65e0d7960e1fc645c5388387eeb7360549613d6186595dfde
SSDEEP 768:EcqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrXroP:EcqbUj+WvSCs6u1jaaZLbWrEP
TLSH
T146C2D83B340CCA7E4FC01E9DDD5A6F972EA802C7A7588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7c61d12cc5cf7febcfae7878f35f2026c56f00386fa68becdba2849196a3587
MD5 3aca08b9dca551ec70fa8a8c8bc9322f
SHA1 01f98fadb7556aa3c2858b0ba782f2f03c759a58
SHA512 47b87a5d3f6bd702d01879e6d74b8fb3d492b3a711c4a11c0f432ccf934fe362abaa4c7c82e5b07ca7521c01b0bc9a2e9de547b2c9ae3937c0ef42ca64d64656
SSDEEP 48:KIWjcwWsMxhQRsIGIxKz4L2xfOhEJIMSyF5IZKiM8vDmNJDd9xopYsIzBxK24ujG:KwzuKsou256KiMp0QKJaCaVgpljvP
TLSH
T14691670AB036925178BD6448B653AD2A8F9231A3300CA4AF7F7951B21F27F151DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594c90.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594c90.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e26991434c820a6116f6d20d94f878d891849b028b9343070c352ad7d45fa9be
MD5 af44351cd6e91a5fba21d8c3b783cf21
SHA1 1478e544311a5991971ba9473250f742bebb1e91
SHA512 cb517870029871bc4899ecda4f92279de12d7077c067ae28573887433b2561f3ca9f08e4edbc0a6e3728da77f9e3ac7152c7b67213a991d7e0276b9be12597e4
SSDEEP 192:uZLsNMgQJq16xbis+QmiU1brln4Ea+jYOmeW+E/0e4SuamrqvU8:KsNMgQqsYj1l4Ea+sOk+cDWUU8
TLSH
T119322936697C5C775EE2A644F88B3613AFB45037CA8A6F90D2DC5F0C01DB69C231B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b694e47623be241643143cc8e07e9de3cd23d0a1db33f653f098ec1b9ef15e3e
MD5 e42b768eed954ec89a6983fb42ce0484
SHA1 79bfd2ab009bf0ce16b17e5f5570a9091f631b34
SHA512 77cafc371a423d63b0d45fabd5d458be32900b82524c8d7ac7f748015e27da255e2ad36ebe857009b04615573d4e9b945689bd5517723f0273cb373543db1b70
SSDEEP 192:uULsNMBQJq16xbis+QmiU1brln4Ea+jYOmeW+E/0e4SuamrqvUt:RsNMBQqsYj1l4Ea+sOk+cDWUUt
TLSH
T1CC322936693C5C775EE2A544F88B3613AFB45037CA8A6F90D2DC5F0C00DB69C131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 adc78595cb80b2c85b1a34a0225ee2d8422b1f163bdd94b026741dfe6b877871
MD5 d3998c5ab905a965daabb1a669cfa2dc
SHA1 2778f20b649edae09d312cebdc8bde8f44178d4e
SHA512 4df6d6e204c0314db9c4839965dc38663d80b9deadb0592fb47621cacd09d2abb22580ec0d088cc581972077c4553411b51cfcfe2f559ab0f54227ecd7403491
SSDEEP 384:ciFjzsNE8TUNTUlIlEQqsYj1l4Ea+sOk+cDJUDw:HFnZwg5ClbaZOkVNUU
TLSH
T16F622A7759688D7BAEE69B45F84B36139FB44077C586AA94E3CC9F0C01DB2DC130B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5d3e312122f358737ccd6e83e7c252020abacf196a30fe970de549cb5677ec1a
MD5 d91e809348e1f65e9558f2f30d35f87a
SHA1 e44535b55785670ccc5e823de5a5c75332cd8b6f
SHA512 e85aeb342a282ca2fd86939035cb755f0f25f0a419aa1e81fd211cc881f6fbae08382972b5893b2e141a9c45dc2d1848f94e6afb000a2c756cb527724e0a4a08
SSDEEP 384:ciFiZcIHzsNE8TUNTUlIlHQqsYj1l4Ea+sOk+cD3UDW:HFQTZwgqClbaZOkVTUC
TLSH
T1C6925D735D688D7BAEE69B45F88A36139FF44077C6C5AA94E2DC9F0C01AB59C030BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 00fe839307ff5848880fdf73fdc91211bd94751398883f31bb0986fc89451731
MD5 fdff7b83eb4ebd095f0bd706fa1ce6f0
SHA1 2a9554c8c023fd5ec6e0146d727612cc07137fb7
SHA512 4b5d917011c4e23257ef21a6228f52052eaf187a43b984a217a7c1fbc62bd76e2d9bb1f4862260b403aebe125d0e0705b644f1fcff818c6ae3f6c6bec0fb63a5
SSDEEP 192:uULsNMEQJq16xbis+QmiU1brln4Ea+jYOmeW+E/0e4SuamrqvDQRD:RsNMEQqsYj1l4Ea+sOk+cDWUDw
TLSH
T140423A36693C4C775EE69645F88B3613AFB85077C68A6F94D2DCAF0C01DB69C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bdc0600564f36f461cd57510cea0eee470d460c52b8569f737aa3578bf45d33e
MD5 63bc02ca325c03f1c29cabb518daf081
SHA1 3a9dec5008fa5826c3f72f75c3a6f0630d8cbdf5
SHA512 450df3a2d846f8923eb6d2a0595b02168f89cc2f85f5f550b6e12655582dbbc0cc70410cacefbf49f957dd1194e9278b715f7f3f172bb0f5f811272670ca9332
SSDEEP 192:vON16Db6QmiUyE8HBa+jYOmeW+EKRg/wU6:vON16u+HBa+sOk+MoU6
TLSH
T11D02F93569385CB79EE26E45F88B3B275F94203BD9566B94DAD80F0C00D765C230B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bb0d8ac8141531d6a18be5567156e33494fc2a54667e8b2cd9835c9cc6b8e0a0
MD5 23194a700cfb94f7a855ec7db60733ac
SHA1 359c6fff5e422b7310483de0c53382f62fb05fb4
SHA512 903cf222665e5959c401f1408424be30084b55c12261dbfcc49461bfaee36447bfd5934c5d685bca962d780c4c9d6643d01d5cc7e64f7a8aa9ba1266543ec345
SSDEEP 192:bONt6DbwQmiUyc8qBa+jYOmeW+E/0e4SSNzrqvU6:bONt64MqBa+sOk+cDmUU6
TLSH
T148121936697C5C775EE2A554F88B36135EA81127DA4A7B90D6DC1F0C00EFA5C130B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 61bd061c42fcdd019e82fee1348080b30c744e85d151c1fd5a8429d649cfc1fb
MD5 d07ce6a3c9d26d7e8a701361bb6da6b9
SHA1 d09cdeb713b56fad192aff297451cd056b969df7
SHA512 ceb85f540fd2c975f1af5fe6aa96ed306d33790da97c89cb56d85c58f970b8828cd7277cbe04c692772ba43b8a4c8312d4bc6c063da0febe586585caa7e85ede
TLSH
T1C4410D58A6FA1148B3B76E6A9BF7A46E487FBD772F0BD49D00110D4F0622A40C972737
MD5 SHA1 SHA512 TLSH

Submit Download