879c57b8b48bc8e0124db82eb34e3ae1c417233fd1c4bc3706cd5a5bb1c6dd0c

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
blender.html
Size 218KB
Sample260803-s2barsen41
SHA256 879c57b8b48bc8e0124db82eb34e3ae1c417233fd1c4bc3706cd5a5bb1c6dd0c
MD5 2733e3f0d1df03ca07684aa8e00ae2fe
SHA1 6d18812eb05e725e6412b8475a21f739ebb66046
SHA512 ab66aa05616ed61e40a29a6554f8bc3b0edcc0dd6384996e908a11a41a7f35ed8331869b8605c9e5f91de9e1f800e87ccac9161d1228288bee981df6ed23800f
SSDEEP 6144:SSUor0iNpAe9pI5Te0xqdtlAjr0+2m7jyxWQ8CbvXgHddeJ5PTQYbeHxHA7op9hr:vUor0iNpAe9pI5Te0xqdtlAjr0+2m7jn
TLSH
T1F624A570B178A23D01AF268AF6709710D3A7E35BE65955E1B53FC2B887C3C84FA53198
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302450135807455"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{3D5AB4D8-7BCD-4641-A70B-A9D585B8A74A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 3700	2304	msedge.exe	86
PID 2304 wrote to memory of 5088	2304	msedge.exe	88
PID 2304 wrote to memory of 4816	2304	msedge.exe	90
PID 2304 wrote to memory of 4816	2304	msedge.exe	90
PID 2304 wrote to memory of 3740	2304	msedge.exe	89
PID 2304 wrote to memory of 3740	2304	msedge.exe	89
PID 2304 wrote to memory of 3740	2304	msedge.exe	89
PID 2304 wrote to memory of 3976	2304	msedge.exe	91
PID 2304 wrote to memory of 3976	2304	msedge.exe	91
PID 2304 wrote to memory of 3976	2304	msedge.exe	91
PID 2304 wrote to memory of 4724	2304	msedge.exe	92
PID 2304 wrote to memory of 4724	2304	msedge.exe	92
PID 2304 wrote to memory of 4724	2304	msedge.exe	92
PID 2304 wrote to memory of 4076	2304	msedge.exe	93
PID 2304 wrote to memory of 4076	2304	msedge.exe	93
PID 2304 wrote to memory of 696	2304	msedge.exe	94
PID 2304 wrote to memory of 4076	2304	msedge.exe	93
PID 2304 wrote to memory of 696	2304	msedge.exe	94
PID 2304 wrote to memory of 696	2304	msedge.exe	94
PID 2304 wrote to memory of 2872	2304	msedge.exe	99
PID 2304 wrote to memory of 2872	2304	msedge.exe	99
PID 2304 wrote to memory of 2276	2304	msedge.exe	98
PID 2304 wrote to memory of 2276	2304	msedge.exe	98
PID 2304 wrote to memory of 4600	2304	msedge.exe	101
PID 2304 wrote to memory of 1696	2304	msedge.exe	112
PID 2304 wrote to memory of 4960	2304	msedge.exe	113
PID 2304 wrote to memory of 1148	2304	msedge.exe	114
PID 2304 wrote to memory of 3808	2304	msedge.exe	115
PID 2304 wrote to memory of 3808	2304	msedge.exe	115
PID 2304 wrote to memory of 2652	2304	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\blender.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb8ad8c188,0x7ffb8ad8c194,0x7ffb8ad8c1a0
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,2748247742154769642,1717656113383296805,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17879863312763325341,2383157480216178046,262144 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:2
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,5453029031763057437,16773984249910512878,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,1402092080858946852,14994870516942216876,2097152 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,14007016348971728051,12918188837779986445,2097152 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,9208111190912843076,6048077437361786267,2097152 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,8944088143564290289,6568117903475498306,2097152 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,13569332187407657952,15257951690802586281,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,6861556260706703718,4559014533165167296,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,17624957497442433309,12042760157607213876,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,17624957497442433309,12042760157607213876,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,11495442054101099781,5877551161721129932,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,5518940008648948292,2760743121827191966,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6093297590829769465,13153771029499840703,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,6202755603393173689,12090995317640930314,524288 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5408,i,4398965842390053109,10673400902447528743,262144 --field-trial-handle=2484,i,960452394693404798,15721667679749234314,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f371f737b3cb008cfebfb80176119a09c1dbf0d50b273e3acc707007eeb229f4
MD5 0b55a843814d2aa769bb073dde800742
SHA1 df8dd3fda3844407597dee8f6310f17e111b8a3e
SHA512 a69deee63e7109fa59542eb826f433bb75e97a7ef5fdc46836f6a38240a43d8e39dfc7f388d85f465eebf8d65b1aff66f785bb71ddbfd294aaa7a39309a98681
TLSH
T156712F340171C86CE713B47990A5C2A87CFDA5E8F8535E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587913.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587913.TMP
Size 3KB
SHA256 feb7b7d3f668b8d4de901f2a8fe386eedc02bc28a668a9c744796837a58c070d
MD5 8721d9633073954a79e5aa2ef57c3649
SHA1 fddfcb353ff84774e6ac5c370d05fc03a1334288
SHA512 f41fbdd370a954719ab15cc165f3c4f746907845d514a8956f777059eb892aaba6a443a47810c9ba26c4d3239d5632c81522e16a6d2819a843b0f236be37c9df
TLSH
T14F712F340171C86CE313B47990A5C2A87CFDA5E8F8531E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fb3831b8d1e1d74c21265b01ad1e08908cb4dc0404e25bd872ec8a103f32f2ac
MD5 0ba2ed79430778a716d99a5470b9bdbc
SHA1 a81b504ea883e5be3579f86faf21a279401b4cdc
SHA512 794d946e6bc172d8fadba65caa446e9864a304bf342dab6a71ada06418502b14d39c30d4528f8502a4e91aab76d8de9b05c89b0292ed94e6d506baef162314dd
TLSH
T13131A0F683E4466E8E0156F09A14AE1ACE2D0117832C7C6989F4BF1BA7F3471D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2056e7364e15495ce8afe4588c4287808444d73e43e8f196e5bf591866f26015
MD5 b5d9fe8a3afa2b051f0d7816883cc726
SHA1 f55068eff389112d47c2d6ad1b6deca32920db19
SHA512 c69bebf021c505f53d34adcfbd8909ee194d366fa54f920815eb448f2096ec891ad6daec77ca61f8315c5f2ab6a87d625f8548c9e2cac58e4c9f1e84039a6313
SSDEEP 192:sxZ1dRYyM/jK1Ml8Mk6W/fzsyK2KIdpdOHW6+WNGYzQiw+hIgrJ:sxZ1dKM6W/fzsyKqcHbGpq9
TLSH
T1AD42F7166A34A97BCCDBD209FA557F53D6F9047392900E44AAFCDA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 127fc55930a7700e1c192d68448b55d17a75f08cae33eb7ff9577c5cd32139fc
MD5 ce7e820928b0953f0bff4ea64f49673f
SHA1 544d62074d5683240d265c0cb7a053d4ea51e88f
SHA512 84eb54ab1ce75420dc17ca04ccd934f9546cbf71c44fc8e675ef2d714c763dc91b6d0cb6a33af99c731870e00e8fc3f63aa134a077f711e3b3d484da2a1906c5
SSDEEP 192:sxZ1dRYyM/jK1Ml8UQbk6W/fzsEd2KIdpHOHW6+WNGYzkxw+hIg5eJ:sxZ1dKqw6W/fzsEdquHbGuqU
TLSH
T10552E7166A34A97BCCDBD209FA517F53D6F9447392900E44AAFCDA1C01E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ff456de6a8738182036a3810131e457c7a7ed75713e1b44f1beb396d2a0696e8
MD5 e0a9678b96a9a824a3eaf034dad30a1f
SHA1 4700db7b454b35b0d91df0e0aac5bfc5369542c7
SHA512 0a9c0c2a487eb0ce509da14b92ac3d11c083efd2e8efbc01c5d60365d12d24cbcb670dbe52555652329d4e929ac3766b8cf2482dd55adda5292e458803927931
SSDEEP 768:UbW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjnroIXiaYW:UbW7kf0Wvqidau1jaa5LA3j0PW
TLSH
T12AD2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d497e65670a4a47bcdeef50acecc60b98a0f0936b85e97b35ea739ba4ed31415
MD5 159042f3662cbedfa41974c87f86953b
SHA1 7e29e6b929f34bc3fac6e5814d1e9c91d1eb3dd3
SHA512 cd7e9272ec0f1f168b8b8820dfac8c2e01ab293b55370c494bd1985e97bc5f3f5e07e9944f16d48842ebe14fa6f934ec0b969adddf58bc8893e8221920fdd78f
SSDEEP 96:KIbCKcXrOKcwOigAKVKmviKYkeiowKFiSGUK9:sKFP4pXw
TLSH
T1BAE1CD26323B164138BE390CA75AC677AE4135A33498B46F7B7904664E27E235DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 24d92f33f139255dba19e841514be17091b051df4872412908ff66c207060116
MD5 ac0ceb4666f98e9f89a8f1cfb9470ca2
SHA1 6fe1a0f2bc4b8cd876689fd9f4a5d14f0cc080e6
SHA512 2447986160ce0a91229c4c148facc97fdfc6dbae6ec6d82b6a19dea94510a476bc3f49d30b87092ad6839cff77e8ad590faf8898644675d686b1fcda57965ae9
SSDEEP 384:wZcIhsNYU6yibM+4au+I6CEJrN06HlytEDq1fKDa:OhMiF4W3hN0oy6Dq5F
TLSH
T1FA929E3598B4AD3B9AB7F001F48A36035EF84067A7D45F84A6EDAB2C01DB5A4131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3d0564958e24c68e64374497ce43628cb5df167e729411441f5089701841cb69
MD5 573bac032a4e927536c89f473a15c045
SHA1 655f62e552e39f64efc54f2b4b7c589bed1a91d2
SHA512 0099c412748a00c5f85451e37b0b98637a02884b678f43f68a1be39ef83ad31df5c45619c6b5d053093a4991af821b6ae46b89e37921a9b2a2a743f0cf9ca229
SSDEEP 384:2ZcIfzsNYU7yibM+4au+I6CEJrq06HlytEDq1fKDa:kb7iF4W3hq0oy6Dq5F
TLSH
T1AB929E3598B4AD3B9AB7F101F48A36039EF84067A7C45F84B6EDAB2C01DF594131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 97a25f014275fbbd5534029c97051463fed00d0d75906cf4444e2a5e94b602cf
MD5 160cf2d8df6263384e139a81d772c66e
SHA1 36b0f4521316ac1440abc1631b12f7d6a1bebc0a
SHA512 c113f18e72c28fd02e5cd44cb8ff0c4c3add4883fc21a453de6f70e01c53d9b00faf2a44b39b3ea40eb60692ea933939b131ae08d01eb3e26d6c0b743bb9eb52
SSDEEP 384:SZcIhsNYU7yibM+4au+I6CEJrN06HlytEDq1fKDa:gh7iF4W3hN0oy6Dq5F
TLSH
T1B5929E3598B4AD3B9AB7F001F48A36035EF84077A7D45F84B6EDAB2C01DF5A4131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 daf88898294eea02b993168fd08eddc46e06df3e355302b684a7a48450ca0271
MD5 888eee38c18374e3647c3eebeb82c440
SHA1 4eca686b56673cd39a7d796757525736f3598030
SHA512 63df50b6543dd2bb232867235c4ee3dbb0d13b5314370a90db22c1403791f5542666fa29801dbf12516dbfd2fad7b08e0d9d67ba36be5379f3fa3b4f94ba10c0
SSDEEP 192:+ON664B+QmiUySCkN5GBPKmbCIR4FC1SJroWwJq1U6:+ON66e6vxN9I6CEJrO0U6
TLSH
T15C120B35A8A4AC3F5EA2A581F4C737135FA4416BE6856F40E6EC3B2C01EF65C630691B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 74bb44f518ce3b6e661a4b4b03865dca17f8e7d4ffc2bb8a4c7f81334456dcd0
MD5 d1a8dacc262a41461d831ba87fc839db
SHA1 e613c613a4f9f54c3c0ce7f21cbe416ba25801d4
SHA512 b8fa91a4e5edb9aedb5934596f01f93e092fbe77aa945f009c9d0617ebebcccda626756334f942d5901dc64e13b417733a59eb5512f962d3c03e3bd75a483b8f
SSDEEP 192:MONG64BAQmiUyl1kW5GBPKmbCIgaDi5U6:MONG6eAWeW9IpmU6
TLSH
T1D3020B39AC796C7B9EA2AE45F48627175FE4107BF6905F44EAE82B1C01D764C234382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58366907-56f4-49a0-bb0c-300f26976574.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\58366907-56f4-49a0-bb0c-300f26976574.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ea057f30cd6c3d71badfcf07e8f6d9592b0a28c42e913a2708496b61ddcd99e3
MD5 88e0e3e17d73030cfaabb7d23f8032ad
SHA1 ce110b63b7e4501e91616f584ad881cf8ac9f442
SHA512 0c10e8c8beec2795b2c23fcd575b0f68eb47d525c3c98e0a145db3cc16f8a59c05aaada86371eab5f64a31c35d2a58c715f0865a2f7c65585ef84fc321d5e562
TLSH
T1AE41285CB6F91108B3B76E5AABF7A92E487FB9772F0A905D00410E4F0666B00C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download