ee278c85f5a8f5e223abafca5bd48cea4ff53e8e4d3818c6af931b4767cf8de9

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vv/home/index.html
Size 4KB
Sample260809-wvrkystbme
SHA256 ee278c85f5a8f5e223abafca5bd48cea4ff53e8e4d3818c6af931b4767cf8de9
MD5 52c20a3402f23119ed6103485801b4dd
SHA1 b9403bb8116b2b112033a2b5213a13ffe8a2d8e9
SHA512 7abd7475e38f760cfa4cd6a805a15bb184a31b18b911dc0c6eb16fa106e6e84b3ecc18a169330796d576c95f167f8f2044527ebab57786bf1adec6a610c50d0c
SSDEEP 96:iJVhuQFs7tO3ESVsUaF7to2AlSp6d7KdOShNUHF:iJVhFItO3ESV/aF7to2MSp6d7KlhSl
TLSH
T17991FF217D9DD0BB003382CB0136EB18D46FED75EA23D815F6F807771BD0E18A882166
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2588	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307729164864152"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{6E402F14-5AC5-4545-8252-401FD12C985B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
988	msedge.exe
988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1936 wrote to memory of 1500	1936	msedge.exe	86
PID 1936 wrote to memory of 2588	1936	msedge.exe	88
PID 1936 wrote to memory of 3124	1936	msedge.exe	89
PID 1936 wrote to memory of 3124	1936	msedge.exe	89
PID 1936 wrote to memory of 3124	1936	msedge.exe	89
PID 1936 wrote to memory of 4356	1936	msedge.exe	90
PID 1936 wrote to memory of 4356	1936	msedge.exe	90
PID 1936 wrote to memory of 4276	1936	msedge.exe	92
PID 1936 wrote to memory of 4264	1936	msedge.exe	91
PID 1936 wrote to memory of 4276	1936	msedge.exe	92
PID 1936 wrote to memory of 4276	1936	msedge.exe	92
PID 1936 wrote to memory of 4264	1936	msedge.exe	91
PID 1936 wrote to memory of 4264	1936	msedge.exe	91
PID 1936 wrote to memory of 2736	1936	msedge.exe	93
PID 1936 wrote to memory of 2736	1936	msedge.exe	93
PID 1936 wrote to memory of 2736	1936	msedge.exe	93
PID 1936 wrote to memory of 216	1936	msedge.exe	94
PID 1936 wrote to memory of 216	1936	msedge.exe	94
PID 1936 wrote to memory of 216	1936	msedge.exe	94
PID 1936 wrote to memory of 1200	1936	msedge.exe	98
PID 1936 wrote to memory of 1432	1936	msedge.exe	99
PID 1936 wrote to memory of 1200	1936	msedge.exe	98
PID 1936 wrote to memory of 1432	1936	msedge.exe	99
PID 1936 wrote to memory of 4704	1936	msedge.exe	101
PID 1936 wrote to memory of 2460	1936	msedge.exe	108
PID 1936 wrote to memory of 4084	1936	msedge.exe	109
PID 1936 wrote to memory of 1088	1936	msedge.exe	110
PID 1936 wrote to memory of 4312	1936	msedge.exe	112
PID 1936 wrote to memory of 4312	1936	msedge.exe	112
PID 1936 wrote to memory of 988	1936	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vv\home\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2e4,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,13520109164093591061,11010757871228408028,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,965510168438497895,18018436568155355933,262144 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,6848173766060477787,15839497466668929674,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,5432937330217856190,2644985252929358799,2097152 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,8932287896918625521,5360327096236229691,2097152 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,16007773883533860965,2341887623820929496,2097152 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,11632000841933185138,9765451687842345780,2097152 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,5614549050828697765,16661606598189384702,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,17838897444389253110,5369166387228641079,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,7198172106510927218,14024576421803737926,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,7198172106510927218,14024576421803737926,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,9697216652524222204,735927276151501387,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,10578498718069780395,798123000003998734,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,7794772795207910369,10768980007351079971,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,16606569206674615911,6611778494264527647,524288 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,464235012662325252,4744598729095805729,262144 --field-trial-handle=2468,i,12309089318422195567,17792716425982198947,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

443a9901-7646-4d56-80fd-7fee1d6c2e09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\443a9901-7646-4d56-80fd-7fee1d6c2e09.tmp
Size 10KB
SHA256 3b75c1f28ee6970c22e3a11e2d72a4cdf6be431511e677c9c89f589d53a3519c
MD5 c2ba59de38c85a48ce19e61b9c26fb5b
SHA1 e21d728410c20d0ad8305da90ca6aed8b5db4494
SHA512 fc65602ba9e51c4fbeae60e5a0958df5071fb6206961f5d0ecc08f030a26bacec41e166ce8d65ee3adead1c7bf1ebc54b0cd20e2683e33488620f64871fc0679
SSDEEP 192:sxZdaRXkk/fGsFm0VaIdpdTHW6+WNGYvrTUUYdIgrJ:sxZdaik/fGsFm49HbGd19
TLSH
T18522B7126E38A93B8CC7D21EBA15BF53D6F95032A1D51E58E6FC961C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bea49e1202e6fb8bf53533eccbbb29839347615e3e92318b0ca94b272b859ea4
MD5 5912da76c23cf695fcdc0828556cd9cd
SHA1 9b1ffbb958397813c0d3731d05bd5f61d0eb1c82
SHA512 3616278d9c048b3672188889c2fe330d2ed5235267aa7e4db46e10bf4479b1e81149d50dd6442ed7dc1f31073a5228b6880727d44a5cfdefc865b97d6e70ca99
TLSH
T1C761C6750B10C4ECE79031B098D932927872DDEAF4834E4670B35EB1FA04F418AEA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 584fb0079d65bc39b9cdb1299128fcf482b6bb230419122222ba5ab51a50623a
MD5 1102682a9621aad667635877612bdf2b
SHA1 2f836878a2d81bacd930fad4e1abdb0e6c043f74
SHA512 d778871ce43b736730a4f1950c603e265859865864bde380bd9986c447dc3aaa5080f1592f21ff1fd5524f3aeae81888774b25c5572a5a0541a5e2d082a11162
TLSH
T155115BB3C3D5956E890556F05A24AE1BDE2D090582187C1985D4FF27D3F3065D10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 08cd256a8dccff6665b72158d7d9fe4536ff0a10477f1f11f474153dd9cc04e7
MD5 7dde7310750958171ff6a94cf6bf60b6
SHA1 7aac895c49318ed2e703f7b1e3d0e6550188e34b
SHA512 65a30903a6d90c84eefb2b641565a2c636bed6c5392825e00be9cf63d0d8c7367ec377ec3ad55c797304b85a4b3abf577fa9428fea9247e5d0a6bf5bc16a4dd5
SSDEEP 192:sxZdaRXkk/fGsZm0VaIdpdTHW6+WNGYvrTUUYdIg5RJ:sxZdaik/fGsZm49HbGd1d
TLSH
T17422C7126E38A93B8CC7D21EBB15BF43D6F9103291D41E58A6FC961C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e27d2fff4a8ab2a239bb170333355e717c03e95bbac39f1a10c0eb01c03f5f79
MD5 2315428e48ffe16fc09c13969ea27265
SHA1 fde1f98d45cfc0d2e44a3018267f3c54332cd953
SHA512 2d1f60922af24b204fd9056999e6816a2de72d20f377099b712744f2d6fad5c16e203bafebc55d32537410262d4e758b4dbb5d21c5b2af0fd609125726365048
SSDEEP 192:sxZdaRXkk/fGsZB0VaIdpdTHW6+WNGYvr5UUYdIg5LJ:sxZdaik/fGsZB49HbGV1T
TLSH
T11522C8126E28697B8CC7E21EBB15BF43E6F9503291D51E58A6FC961C05E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e112a5d93a01aa770dfb289d30d45b66a95da2c571087af931a2136ecaec8cdb
MD5 a13a7bc2ca57c784c1093bc721ea9234
SHA1 999a9c4962a1affd04017b6693e47562d4021e9e
SHA512 97318f8c5b6c475e8fe3660b40d1098649480cddac52aee8098794dbc10f917d7e1ab255401a15ca178b1f1f6b15b7f923c8b7feecefb4d7b52577aedea5b280
SSDEEP 768:q9ee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pb9rom:q9ee3rxWvhffnu1jatcL88b2m
TLSH
T169C2FA3B640CCB7E5F800AADDC5A6F977FA802C7A7548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f4104b1c5f32e0d6e04a7afa36edcc8fa8ef944d7caaa1cb36eb592e18a77c77
MD5 905c095537f44c25cb8f578390954f9b
SHA1 fed2a5cad130cc9de1a4ada4f21e5b824e97435e
SHA512 e2a98adb4fb05c06a061e8b4d668a6359c4673c473d8540319d8eafa9fd371567df4bbc66c9302e166bbe662ff8a3810afdb88bb6e8bedcd8035c33d44da8d39
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09cqDWKksp:KYH+Kggm+ruKAUyyQgKJunqDWKksp
TLSH
T1E891CE16743E02022C3E3D8CB2A596364F4631A37464A9AF7FB904A65E67E114EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

557ac988-d862-4dbc-915e-cff98f2e50cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\557ac988-d862-4dbc-915e-cff98f2e50cf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ccc4e09297819a4e9dcfc45ada4d51d25960a4112068b868bd20d7b5bcfe6584
MD5 7472c36b629aa4be994b7e4d15fddeaf
SHA1 6bc26c2542840c7569023660e99732c9be487f76
SHA512 daa11192a6b47231f5690338f6a8f0e80b3fef8bd03b1e1f6a987d1a101ccf26928b84ba475777f0f7531124f73e5bd5055518e936016a1d535fac48811690b2
SSDEEP 192:ufm+xasuheOwQxMGsNchQ3P6fM7vFUFQmiU1CZ9z4MTAn+FdLQx6ptFd3ED8z1vy:pZcIhsNchyd7vuj498kdcxMdUAAXR
TLSH
T191627D719C745D37A9F2B186F48A3B034EF4802BDAC45B94B5EDBF1C01D66A8131BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d16a87e73608b9067e5539545140f59b5c7e404bbb73fb8712fc987c072744e0
MD5 decea197d4f1f7e760d0a0e579dd6d73
SHA1 e0ce3748e530ee8728f97e0c7a6f29535fe1c02a
SHA512 fd69da0b9cbd47b1b4fb1062339f2018ee9cc4cdc92042a20593162a27127252f4d4aea1b284bc8eb5a5ad74d9619c1d388f48701f52d0a9be500c25b80ac13a
SSDEEP 384:UiFiZcIHzsNU8TUNTUlIlQyd7vuj498kdcxMdUwAXR:vFQTZwgVDl/nUwAXR
TLSH
T1FF824D739C64993BADB6AA85F54A37038EF4406BD9C4AAA4F7DDAF1C00971AC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 513454ace3977e252fd7827e7942d4390b1e56eb74fd2e3bf9f527a71ae82dc9
MD5 3d739e6d20e21a0df610bba7fa1824ab
SHA1 fab8e89599d85f79f82213c11ef7c0eab81ce319
SHA512 4d5ee7ae931f2ef622d67cacc52515b1a742d782c1c75fe427d8ad3c6f8e5317d15969e0958ad5c3b33a1c0e60ae48168df552a2bcbdc73d6660ceecbc794481
SSDEEP 192:lONb6vMtPQmiUyleThTAn+FdLQx6/8473MU/u:lONb6UtRPT7dcxE8U/u
TLSH
T151020735AC786C7BEAB3AE46F48A37175FE4116FA9D05B54EAE82F1C00D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 72096b0b91aa454812d9bff075ca144ffd2c5bd965985c53a7cb23624854fb19
MD5 a8d9c21bbdbe1f7e0460a89031330f92
SHA1 3d5e4abbb2033801f0b6832eb857a2acba946752
SHA512 456fbfc0f4c58cdf9246b06ee843df23bf3eba8d21cfe768c1ba3be6899eaa8b46bc75729321f005b56d24f2a528c62d41d2bb0337765d4115415c64f39e9d18
SSDEEP 192:PON96vM6PQmiUy1eshTAn+FdLQx6ptFd3E580IvqHU/u:PON96U6R/s7dcxMdUuAU/u
TLSH
T1FF121B71AC645C27AEA3B546F08A37175EE4816FEAC46B50B6ED2F1C01DB66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 c697f55129e1e8a6d05734adcc66a7d194111f5f421cbf28209894731c941cd3
MD5 e1c772ab232a74851256166d57d0bc6d
SHA1 9bfb3ada29c6cda8d3ec0169e725b04455259577
SHA512 ab41e3caccd811440661e2fc81acc68504b5a626235a1398865bad502c252853dabe57e1799788278617b13a56bba2f26049e7fb75d88cb338d79b35885a4aa4
SSDEEP 192:uCm+xasuheOwQxMGsNcQQ3P6fM7vFUFQmiU1CZ9z4MTAn+FdLQx6ptFd3ED8z1vy:AZcIhsNcQyd7vuj498kdcxMdUAAXR
TLSH
T1E6626D719C745D37A9F2B586F48A3B034EF4902BDAC45B90B6EDBF1C01D66A8131BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e0436b4-ff32-4ada-879f-18a843def039.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e0436b4-ff32-4ada-879f-18a843def039.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 49afe43a50fdd771597b48cd1a47a565bae415ac4d7b9343cc1bfeeb8f296d77
MD5 ede64dbbb9ec598766a68446345b858b
SHA1 8d769a27c7971165f1b0021d3e797f098a72f0a6
SHA512 b83d5a1a775a7aefed3976a3c2fa8ca20a5a8e4892affce051ae7f6d6f9deb731de654c2ad2d3fca1be31e52a05f47a34e24444729884a3ed4bb325135d6a7a0
TLSH
T10841FA58A6F91148B3B77F6A9FF7A86E447FBD732E46815D10110E8E0A33A00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download