97d166d83e3044bb13ded9a92b2eff2902513b4f458ea926b13dd2b0b95f5e16

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 18:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2025/07/17/digital-marketing-course-after-12th-complete-guidance.html
Size 699B
Sample260730-w448eavena
SHA256 97d166d83e3044bb13ded9a92b2eff2902513b4f458ea926b13dd2b0b95f5e16
MD5 c5df4be5a0667b0889e722f7824f4035
SHA1 6f7f6b972f9659ed6750f11b255b586ed31eae02
SHA512 b132c2a18859eef4ad075ecece277212833368c8ffff2ccf1263627a79cd325150cf8e4a347a809928839811d90fc2a4976a44596c0f50af59213d5353da754c
TLSH
T1EF0110EECD605A313122D57CCAAF7748673310DB9340DD02C4150CDC4390206D393747
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299097751078384"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{5C98E921-B1A4-4FFF-BE82-EDC3EEB0B6A3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe
4040	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4040 wrote to memory of 4776	4040	msedge.exe	86
PID 4040 wrote to memory of 4672	4040	msedge.exe	87
PID 4040 wrote to memory of 1052	4040	msedge.exe	88
PID 4040 wrote to memory of 1052	4040	msedge.exe	88
PID 4040 wrote to memory of 1052	4040	msedge.exe	88
PID 4040 wrote to memory of 4252	4040	msedge.exe	89
PID 4040 wrote to memory of 4252	4040	msedge.exe	89
PID 4040 wrote to memory of 1492	4040	msedge.exe	91
PID 4040 wrote to memory of 1492	4040	msedge.exe	91
PID 4040 wrote to memory of 1492	4040	msedge.exe	91
PID 4040 wrote to memory of 2152	4040	msedge.exe	92
PID 4040 wrote to memory of 2152	4040	msedge.exe	92
PID 4040 wrote to memory of 2152	4040	msedge.exe	92
PID 4040 wrote to memory of 2484	4040	msedge.exe	93
PID 4040 wrote to memory of 1552	4040	msedge.exe	94
PID 4040 wrote to memory of 2484	4040	msedge.exe	93
PID 4040 wrote to memory of 2484	4040	msedge.exe	93
PID 4040 wrote to memory of 1552	4040	msedge.exe	94
PID 4040 wrote to memory of 1552	4040	msedge.exe	94
PID 4040 wrote to memory of 3764	4040	msedge.exe	98
PID 4040 wrote to memory of 3764	4040	msedge.exe	98
PID 4040 wrote to memory of 3996	4040	msedge.exe	99
PID 4040 wrote to memory of 3996	4040	msedge.exe	99
PID 4040 wrote to memory of 1976	4040	msedge.exe	101
PID 4040 wrote to memory of 2460	4040	msedge.exe	107
PID 4040 wrote to memory of 540	4040	msedge.exe	108
PID 4040 wrote to memory of 1544	4040	msedge.exe	109
PID 4040 wrote to memory of 3036	4040	msedge.exe	110
PID 4040 wrote to memory of 3036	4040	msedge.exe	110
PID 4040 wrote to memory of 4432	4040	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2025\07\17\digital-marketing-course-after-12th-complete-guidance.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb8ad8c188,0x7ffb8ad8c194,0x7ffb8ad8c1a0
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,14778380747392469700,12956492693804294977,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,12919434989723149041,11250426558487401342,262144 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,13167394257000363486,13869135170419258116,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,11467506597040894161,9174033214674714468,2097152 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,4494420799390533223,5965144589339048731,2097152 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,4983407778775017607,3311613203364867863,2097152 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,6057233726487018934,1005842461044312542,2097152 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:2
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,13149150536242923099,17524960753422424595,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,17972675644132578815,8798579336149186072,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,269845607886349182,11558742223301734573,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,269845607886349182,11558742223301734573,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,14204361239980196673,16916458700211920525,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,11052972776626755286,12211079045619570298,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,13164565181541156165,8740271854481037403,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,8823183596332884798,11034140818604513469,524288 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,12781652175614655819,8117317704216156966,262144 --field-trial-handle=2060,i,5776028294046157774,13545020673969176605,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a06c7344a138e35698c4c149f06e92fb60c183d3108df51a6b481ec7b32edf4d
MD5 fbacc28686fb3d176897b78c0a2186c6
SHA1 98cde89f9f3cdfe7d9d017ae260377564489eaf5
SHA512 8fb6ef041115798a9c6d446674b22f503ac8fd06cf59a23b41bf4547adb0758ff8b9e511965416a5fc9d57afef29d073642daaa9516845349dc42d5452d7d635
TLSH
T17B712F340171C86CE713B47980A5C2A87CFDA5E8F8535E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587980.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587980.TMP
Size 3KB
SHA256 61ce17ca5d93cf3bc9eb85afe57d58ee9f8f6a5620b583508b87e8382694f6ba
MD5 79242ddb5340281154e9547e568be5ae
SHA1 60c6391e3ef32353108040e5d7cbcd8be01f16cd
SHA512 f1faf984b7ad0c49f3e2db09ffd839c1834305aaf7f8191333f8ea364f2e897137767486662402fde6e2416c31306a9d2d99bce1d8fb5aeae2863ea5b4f86944
TLSH
T10A7120340171C86CE313B47980A5C2687CFDA5E8F8531E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ac091ffd09d9d8fa9d73e56bd3991b87b985c8eb71c3bf1af1281cc546ccf9e0
MD5 06617074907e372b49f9778c4a1db63a
SHA1 24ec7d520349a480c7afb4b1f2aaef07bf8ced76
SHA512 1f68f8d384c531dbdf0664517598d7b019e46d35b7c0ac554ae5a3ae50fb01d7417b8cf8a73b8f661dccf474adfc6a02fee16680e0e8f9f55506129211b2e985
TLSH
T1FA115BB3C3D585AE891516F06A24AE2BCE1D0606821C7C29C9D4EF2B93E3065E50255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 65c3f8edf28d4e26066e22a61135078c8348f0a70279648d39d8d2fdf4523b70
MD5 7b598ca563ace30ae06b62e6d3a3a4fe
SHA1 a6912cbd006bb1665174e1121aa46be5bbfef453
SHA512 0b8ef658131144a9dc8402d483a0f39bc6d11e3e10fb5cf4f0e98a2e48c50977b8c0cfdc2525bb7fa149e6c55fe98891a58696553af1b31d5ad73ecb35f680dc
SSDEEP 192:sxZqRLeyM/jK1Ml8MkK/fasnRSwHIdpdaHW6+WNGYzQ6TxIgrJ:sxZq8MK/fasnRSjUHbGy9
TLSH
T14542E7166A34997BCCDBD209FA457F53D6F50572E2940E44AAFCCA0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 03ab5309ce0d06f80d2caf76ba1fe197295f589ad8667c2eb1a4e3c75d2eee2e
MD5 db06ab6d7101653047d0d8bcc6e4b4c7
SHA1 cd17877d9d2c2d703e027a643812bd8585a2a68a
SHA512 6b24296a5daf54d572e053f62879315e21b92e5f7c3eb8a1b5ed9140c71424aad14a6d873038d8bb0ed414c42bf30dc35d2e07229d9cbc64230b035de358fa9d
SSDEEP 192:sxZqRLeyM/jK1Ml8UQwkK/fas1R/wHIdpHaHW6+WNGYz1JTxIg5nJ:sxZq8qDK/fas1R/j6HbGMj
TLSH
T14D52E7166A34997BCCDBD209FA417F53D6F54572E2940E44AAFCCA0C05E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 644cb6eb09100a5e965b1bc03fe7b8b5b86ad51cddcafb2acfef5709e9a6f043
MD5 8f09a841adb951bce6a000f89f962c5d
SHA1 fe56d0b7496627c77ab191cd358d9ce261533fcb
SHA512 0684ba7c03772c4ef4f28ad70b130e35e4ba6573cb6acb27256a6e2efa54666e81e8ab3d7ccb88057d7ee93912e88a36a1f7f43c726e3a9ef9ab4675b5e802f9
SSDEEP 768:vaW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjkroITi3Yz:vaW7kf0Wvqidau1jaa5LA3jvYz
TLSH
T1B9D20A3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 cbc424515f3e8eac79fbd91a73ff1233b0551fa455d89099f9d3cf022e12eaf1
MD5 e2809036522fbea4c6328878352184d6
SHA1 9b5def6dda0b1ad9ff89ca0c1aa614d607d845d4
SHA512 23f12cd38af656ae0dd9d4b296677cbbb4eacb701cae4fc9d63a3deeae6c3ac415be177beb579e2cb6f6442d2a10dc12eaa69937181e92e676c4ab64bba45e68
SSDEEP 96:KIbCKcXrOKcwOigAKVKmviKYkeiowKFiS:sKFP4pXt
TLSH
T112D1BB26323B164278BD3908A75AC677AE4132A33498B46F7F7940664E27E139DFC4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 71034a3c31db2f236f344ec1e0eefc49b73c78070583302de28bb7dbbd65cc87
MD5 b9a87e45aff787be9f0889d42fdcdca3
SHA1 8795bf995338fd41f1f00694190194cc3bad20db
SHA512 821291e05fd9391a8455c1e3408b57d0f971a13a972ca5967f7e6228f7ae6d439854a04f344cc2f930a0c75244c5e44c4e050521136ffe117376fae46ffadb8b
SSDEEP 384:aZcIhsNlj65Tlb6Zu+I6CEJrU+OObjI9G6w7lz:YhJ5Tl2N3hU+29MZ
TLSH
T122929E32AC748D3A9EA2E101F4CA371B4FF8817BF7C81B44A5EDAB0C09AB55C0316C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 296a09aa36407824a420fc5e47568ff343e86ca056f1a882a4ca0f0eb0148bdb
MD5 1adb1b46c368d9e02e20048939544fb0
SHA1 bc062dda54e307007e66aa03e4b6a89e41c70843
SHA512 a4e0720889c98d890f5dffc5b59eebc19d10c5726fef03e8452896cd2899642650348295193f46a39b26ddca587f02f6cf88044d038ce9a76351a519124d1e0e
SSDEEP 384:EqZcIBzsNlm65Tlb6Zu+I6CEJrd+OObjI9G6w7lz:fxo5Tl2N3hd+29MZ
TLSH
T1F2928D36AC648D3B9DE2E501F4CA371B4EF8513BE7C81E44A6EDAB0C05EB55C1306C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2e2e8c2effd229595e4553dcf3a280397b56845eb08795db31274a10438781c6
MD5 74b55de0f0054594ac5b9c8347c1e15d
SHA1 f84252ab438692bae8f5ae5fb15c47516cafb57d
SHA512 d65e75df1f8f91bfcf944d4d4a05985a2544c463d9d6d3da81e7db05a35d84ac0e890a81411546b7f5ca6ec9e9f37f5142e9ee037000f370b8361d9a1e24202c
SSDEEP 192:MONG64BAQmiUyX1qW5GBPKmbCIgaDx5U6:MONG6eA4YW9IpPU6
TLSH
T11702FB39AC796C7B9EA2AE45F48627175FE4117BF6905F44EAE42F1C01D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cda3e8938723299f8b32170ed7b695011548676884a05bd6fb0dd2ab1ca13f77
MD5 a8690928f1bd52090389745f0ab3d4cd
SHA1 6701547e20dd6566749917c73878c140b602fc95
SHA512 ec95b06720004e90c8d9f1bc1c46cc94922a0d934ae68f63e13b006efdfa2ee79c4b3fff6db04b9f4722196c5a28d9b43ff0fd7a2671b62925e78cca86ed8d75
SSDEEP 384:XZcIhsNlm65Tlb6Zu+I6CEJrU+OObjI9G6w7lz:fho5Tl2N3hU+29MZ
TLSH
T1DF928D32AC644D3A9DE2E101F4CA371B4EF8813BF7C81B44A6EDAB0C05AB55C1316C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5b7a2558c032e62c834e3c566aedf7a2e1a48b9c491bb9c1146cac3c46056f0b
MD5 d650e375aa1789e9b5375974ea9d8b4a
SHA1 97a16a789e2e8b1fa387a4cdaa4051306eece6d1
SHA512 dfa005f47cfaa487d63d564ff26ef8e9f99c58af517c1a1449c8e7e8818a69b6495df5f3ddf7242c5ac45094aaa175c2f1e4550bc67b8dbc5dfb3e6a5599f866
SSDEEP 192:5ONA64BiQmiUybqK5GBPKmbCIR4FC1SJrxWwqqGU6:5ONA6eeHK9I6CEJrV+U6
TLSH
T1E712F97AA8649C3F5DA2A541F48737175EE4422BFA886B40E6ED2B1C01EF65C230685A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cfa86dd-b583-4867-8da6-3a5d976af685.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8cfa86dd-b583-4867-8da6-3a5d976af685.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 02ba43dc54566aba5ea0c77d2eedee16c9b6580f2dabdf81f08b465bf763ec02
MD5 993ea0b1fa45dc1213ffd41cd207943f
SHA1 04d4e554aad6ebf95022b5a66de1b10e013e6808
SHA512 b3851c4b376c1b96384032507d61b62649d2ec3bec709a0eb349ebd27299cb41b7609234f0c360dc6b57b425431f4d6cf160750e1d2651e936fffc63fae437e4
TLSH
T109414B58A6FA114CB3B36F5A9BF3A86D547BBD772E0AD45E10110D4F0663B00C9A1B37
MD5 SHA1 SHA512 TLSH

Submit Download