0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
148s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260809-16egzsem2s
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2724	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307878496300927"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{740158F8-41C3-448C-8061-2B789786CBD2}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2576	msedge.exe
2576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe
2816	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 2964	2816	msedge.exe	84
PID 2816 wrote to memory of 2724	2816	msedge.exe	85
PID 2816 wrote to memory of 2192	2816	msedge.exe	86
PID 2816 wrote to memory of 2192	2816	msedge.exe	86
PID 2816 wrote to memory of 2192	2816	msedge.exe	86
PID 2816 wrote to memory of 3484	2816	msedge.exe	87
PID 2816 wrote to memory of 3484	2816	msedge.exe	87
PID 2816 wrote to memory of 1132	2816	msedge.exe	89
PID 2816 wrote to memory of 1132	2816	msedge.exe	89
PID 2816 wrote to memory of 1132	2816	msedge.exe	89
PID 2816 wrote to memory of 3728	2816	msedge.exe	90
PID 2816 wrote to memory of 3728	2816	msedge.exe	90
PID 2816 wrote to memory of 3728	2816	msedge.exe	90
PID 2816 wrote to memory of 5040	2816	msedge.exe	91
PID 2816 wrote to memory of 5040	2816	msedge.exe	91
PID 2816 wrote to memory of 5040	2816	msedge.exe	91
PID 2816 wrote to memory of 5088	2816	msedge.exe	92
PID 2816 wrote to memory of 5088	2816	msedge.exe	92
PID 2816 wrote to memory of 5088	2816	msedge.exe	92
PID 2816 wrote to memory of 5100	2816	msedge.exe	97
PID 2816 wrote to memory of 5100	2816	msedge.exe	97
PID 2816 wrote to memory of 4932	2816	msedge.exe	98
PID 2816 wrote to memory of 4932	2816	msedge.exe	98
PID 2816 wrote to memory of 2492	2816	msedge.exe	100
PID 2816 wrote to memory of 692	2816	msedge.exe	104
PID 2816 wrote to memory of 2788	2816	msedge.exe	105
PID 2816 wrote to memory of 4180	2816	msedge.exe	106
PID 2816 wrote to memory of 4848	2816	msedge.exe	107
PID 2816 wrote to memory of 4848	2816	msedge.exe	107
PID 2816 wrote to memory of 2576	2816	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc0ed3c188,0x7ffc0ed3c194,0x7ffc0ed3c1a0
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,9788053887961769211,13224460975098425729,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,6001595160197046173,294392414851335182,262144 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,18232165271717389998,10122976447108369209,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11670719795698447146,13793882216232699511,2097152 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10508038770577307764,2448510399169418876,2097152 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,2436660262737215303,15112097342854404195,2097152 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,6111471661644673808,14817318544970499679,2097152 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14165677439649834565,9486855754719963505,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15297792119736132807,12293139787177822818,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,108084344872051722,3823294693918736892,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,108084344872051722,3823294693918736892,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,599361583428536007,15820217070918765013,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,1013121087043466625,9028103767989006724,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,14571089989701852855,13637890828331995769,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,5998972125686273647,12994008928272739514,524288 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,6391739097865876150,13452922347330243040,262144 --field-trial-handle=2280,i,3570638634117172595,13651278363862762865,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 70ec916fbc4bdc762d303a32b425b3e0261fdf5d4861f31961987ba096c316ad
MD5 996e8e432c1af85dbbc9617643df9f45
SHA1 d0195d75db411ad1a86b9c76c84c53d5dbfa292c
SHA512 e3b70f66cf03c6c9999788962930b9cabd2ecfa0b384ab514e85ba204c430600ab36e315c9acc46dffdc31af52289db2f445b572d3c1a4cf9868b5e4604b5b6b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7m:fwUQC5VwBIiElEd2K57P7m
TLSH
T1B8B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c34fcc097d56d5d59006bf381c3f08e1eb9630674e5814891de96b74fabecbe3
MD5 98769cb4a2a225460b1a15a187d536fe
SHA1 61fddc8da68513675a7ff11f464b092c63c2511a
SHA512 90758bc0deed5e8f7120417616f18150c31ac231cd20ac0f6b611844874cc7f2e58b376e28b849779f628ec94c55a9f41ce0a56e2f3b417330a48d49ce80b3ec
TLSH
T1556164F8C44207E0EF9270B283DB462F75F082F8F913BE8190E02B795B0676185C7158
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fbd41bf852c1fefeb9f8b1ceb31c74478140f54811b50a504d959dce61ed3166
MD5 f352a66fb9601a0a7b5d9347b96e5e13
SHA1 9a1a06a83d0011605d871b14c8e3cc70df98a6da
SHA512 226e2e385dad2f1ecc925522fef74e60d04ca6900bbbba7cb65f68edf44fd37a6caff2a1fd919794e41494b5bf889e84e2bbc408b695785b83c4bb8b42d86e15
TLSH
T14A115BF3C3E5856E890516F05A24AE2BCE2D0506421C7C198AD4EF6B93E3065E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 97c6d483a46b2a956a09513b38df1c40654455e371e64ac797b9cb7a8c0b8432
MD5 e043673a5ec660378be4306a14062ccd
SHA1 a654478f53d8496466bb8ded62c366f503f5b8a4
SHA512 2974a83f601c61722bceeb49211afe3979c74750fab35a5602e2fffab9d99374670ef0f8819c41a9feb425b17091de97a535b1c4ee11d401b95f8d1c0acbbce0
SSDEEP 192:sxZcRRyM/jK1Ml8Mkf/frsnJV93d2IdpdPHW6+WNGYzQ30UIgrJ:sxZcrMf/frsnJVVRlHbG99
TLSH
T17642E8116A38A97BCCDBD209BA557F53D6F9047292900D58A9FCDA1C04E7EED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c9a03da5992853bf461a21e8af4695f2bfeb6e53593a2d8699ce964551d238c6
MD5 8488a9568b0cd71d6e64bbba53859fa1
SHA1 081a2a1794e0c93aada180950a67432279b6b38d
SHA512 df9315dd1b87cbc2574165166c0b91725b86a4b7205f00cf0aaf89dec4bf222ed52f8acca5142846b433303b601feb576bb0b62b3ac771130fb769c625e73841
SSDEEP 192:sxZcRRyM/jK1Ml8UQEkf/frsOJV83d2IdpHPHW6+WNGYzA+VUIg5iJ:sxZcrqff/frsOJV0RvHbGbs
TLSH
T1F852F911AA38A97BCCDBD209BA457F53D6F9047292900E54A9FCDA1C01E7FDD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 87b99d09703f1ce31fd5940ee8552ec3fbb29248f1136dc1165a43978719e903
MD5 a7f19fb3d1d1b8de56d85da48103a485
SHA1 b39999ca5ca5b9613239ebae034e99e1765ebd83
SHA512 09e0123ba5437e09e3f5569336f08cab8f1b16c2d703a2a3616ac7352ca5f9b73d0a7063dea4dbf010e9006ff3645ad603089d3469c997501030c9c85d3108fa
SSDEEP 768:jeW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjFroINixYg:jeW7kf0Wvqidau1jaa5LA3j+0g
TLSH
T18BD20A3B684CCB7E4F840E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c18203ab36859b72772aa79678782918e967fdbdeb38735fa4eedfe84597d468
MD5 4a985f60d809b2db06981b8a4c804170
SHA1 8cc69fc38a14cb31e945c3a721b6b2351120309d
SHA512 c5c7b329f60cd7b7fd53f58a898515c673549d97db06aca7c23b1c87a1fa2d0c10faf01b24ba987e7cb442855d4e48218c6c235867e02e2282b57062a97faaeb
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTXjIBKM4MHyhkI7KRS8jydrIxKkIcT:KIbCKcXj+KM42CkIKRSCOrWKkIc
TLSH
T12BB14456323B0206387E2D6CA65E89779E4236633468646F7BF801651E27E121FFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595bf1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595bf1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 64758aaf802053620b2a91d993dd94cf5b7a9d2752f9365cca07f74794eddd43
MD5 c2c347545d471ac48e4d016cf8a0791c
SHA1 fb6d2cd3ebc183b3aa183c160b35150ff69b1260
SHA512 cb66466f88c1c888aacea6bedc1b999da98ad7c9ab76f87631a819a86c4c6b1ea52292722cc796ebed5fb52d13bbfe86706ade3b32de83a9e785d3253e89e944
SSDEEP 384:OZcIhsNYzG3itbv2pDdmmaHCEJrsdxnTKwBODNZOCu58M:sheytilIhhs7newBKZOx8M
TLSH
T1C3928C705C386C7799E2B146F88B36174EF88177E6C42F54A7EDBB1C01EAA98130AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 7a807c2a5b27702bb43b452661bdbd483bd197569a85a39612c46195a90cf912
MD5 21e3df5b653d5d12973026634ce241a1
SHA1 92b62d12888baef754b12c5e34cca289972fe3b1
SHA512 642ec93e896a4baaef27788c295d06af6121228ce081f34eaab3c56e5b71fc302dd799e1b499ee48760c6a16b908794c09d9772939c5ca1e401cb5201be6c522
SSDEEP 384:kiFiZcIVzsNI8TUNTUlIlGG3itbv2pDdmmaHCEJrRdxnTKwBODNZOCu58M:/FQtFwgDytilIhhR7newBKZOx8M
TLSH
T1BAA28D724C68997BADF6A645F94F36138EF841B7E5D46A64E3DCBE0C00A76C8130BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d0f4bbf43dd55b40eb193c4f2d510add294a3bb831a9c593f2bae29054c02028
MD5 3b036d30c22641e221e9068b3ab23f65
SHA1 bacf790d877d52ea429a89463fa77959ded70cbe
SHA512 f104bd90b574f61129e341ef9449047cd50a39c2b3e628cd0796a2e7fc0f096f3f699476200a65b23f9bf39dcc8990c2f7d76e17b0c16b44fd8628fc9a0cb97b
SSDEEP 192:MONK64BAQmiUym1JW5GBPK7H+FdGBma2EaDd1+U6:MONK6eApXWIdmmaOd8U6
TLSH
T12D02FB34AC786C7B9EB2AE45F48737175FD8112BE6945F44EAE82B1C00D775C234682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cd243831b4ca7c42e84b4cd2a66b9c1478f01c1adb0a9e12477727348984b101
MD5 341671e11148f68d224cefc370883f6a
SHA1 6d726339713d3ca375ec4fd8f240ee9dabd32c48
SHA512 4812fb9b0e6e1167c8a3270a91f14f048e9eb5ddf3713fc01f244fac6646ab621595a5afcc71811f4d44639b8d5fc5d84f27a413e80992f79021b94a65618ff0
SSDEEP 384:bZcIhsNYGG3itbv2pDdmmaHCEJrsdxnTKwBODNZOCu58M:DhJytilIhhs7newBKZOx8M
TLSH
T129928C705C386C7799E2B146F88B36174EF88177E6C42F54A7EDBB1C01EAA98130AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 36fc257ec210aec8d79b90c63d1c6c5fe1d5cad1807a7ff7b33cf4d42344b335
MD5 abcdbc74cf462312ada2f97c38c4abcd
SHA1 92cfcc85b6c556bfcabcdaab8594ca8baea961af
SHA512 23d875594df94cb16b91f1ef3e1291aa4c11fa8bde9fb62b5815c9fb6be540efd7cd7def0dbdd67c70ffd49ac15d4b79df06ecd8de66ee357f9f8f1f25675c45
SSDEEP 192:DONx64BsQmiUydJL5GBPK7H+FdGBma2dEFC1SJreWwdqqZU6:DONx6e80LIdmmaHCEJrcdxU6
TLSH
T1A2121B35AC746C3B5DA2B581F4873A135EE4413BEA856F90E7EC7B1C01EF69C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 646e9e1b47c4648bbc9bc33858e26378a2470290ab105bcfa68882a0fb160289
MD5 d0cf424f0a7629eb886d5db8dd642ffd
SHA1 08fcc7ba54a7a9c4dbf9d0cd76e2e561f056a72a
SHA512 6f2eaf7594301f0cb6f1c5f67466691d705af3f74abab76727e56067c15492b5244d84557ba6336715813a1dc66296b2fbf6b6acedfa77a1e74a9f9b7d01e7b3
TLSH
T1E741095DB6FA114473B77F5A5BF6A46E887ABC672F06D05E00510D4F0A22B44C86273B
MD5 SHA1 SHA512 TLSH

Submit Download