d0d3a90e0cd827bcc3fa2f5348d3796195317a4c7248e680c6f600baece01956

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HadithAp/home.html
Size 5KB
Sample260814-ameqjaec63
SHA256 d0d3a90e0cd827bcc3fa2f5348d3796195317a4c7248e680c6f600baece01956
MD5 7b1ccf3c3fc529acb98a221eeb98188c
SHA1 5ecb27dd9cb6727493edf81f32bfa6712ef44107
SHA512 aa8813824fdb80e0428f25f64833018e4f50070a4836e3aec29327e44c7d68fc59a8ad7f5c6d5df0cc1d9799d1f291b0db125cddac741eae0f2f4811f95b45c5
SSDEEP 96:Q4atubhS3QHRH/JG/zRU2z8/M77p/jmMlQgF1hl+YdgATfzYG3g6gC:QLEDRHhGri2I/S/jmlwdvbge
TLSH
T106B15EB4E24350267173C89063525B9EFAA5C007CB079729BBF5318BBBC1D8ECA17A0C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
436	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311404801824836"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{26ADEEFA-8D06-44BB-BCE3-B5132A35D21E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
556	msedge.exe
556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 2080	2016	msedge.exe	87
PID 2016 wrote to memory of 436	2016	msedge.exe	88
PID 2016 wrote to memory of 4204	2016	msedge.exe	89
PID 2016 wrote to memory of 4204	2016	msedge.exe	89
PID 2016 wrote to memory of 4204	2016	msedge.exe	89
PID 2016 wrote to memory of 460	2016	msedge.exe	90
PID 2016 wrote to memory of 460	2016	msedge.exe	90
PID 2016 wrote to memory of 2124	2016	msedge.exe	92
PID 2016 wrote to memory of 2124	2016	msedge.exe	92
PID 2016 wrote to memory of 2124	2016	msedge.exe	92
PID 2016 wrote to memory of 4036	2016	msedge.exe	93
PID 2016 wrote to memory of 4036	2016	msedge.exe	93
PID 2016 wrote to memory of 4036	2016	msedge.exe	93
PID 2016 wrote to memory of 212	2016	msedge.exe	94
PID 2016 wrote to memory of 220	2016	msedge.exe	95
PID 2016 wrote to memory of 212	2016	msedge.exe	94
PID 2016 wrote to memory of 212	2016	msedge.exe	94
PID 2016 wrote to memory of 220	2016	msedge.exe	95
PID 2016 wrote to memory of 220	2016	msedge.exe	95
PID 2016 wrote to memory of 4412	2016	msedge.exe	99
PID 2016 wrote to memory of 2552	2016	msedge.exe	100
PID 2016 wrote to memory of 4412	2016	msedge.exe	99
PID 2016 wrote to memory of 2552	2016	msedge.exe	100
PID 2016 wrote to memory of 1952	2016	msedge.exe	102
PID 2016 wrote to memory of 1340	2016	msedge.exe	117
PID 2016 wrote to memory of 3536	2016	msedge.exe	118
PID 2016 wrote to memory of 2912	2016	msedge.exe	119
PID 2016 wrote to memory of 2264	2016	msedge.exe	120
PID 2016 wrote to memory of 2264	2016	msedge.exe	120
PID 2016 wrote to memory of 4632	2016	msedge.exe	122
PID 2016 wrote to memory of 4632	2016	msedge.exe	122
PID 2016 wrote to memory of 556	2016	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\HadithAp\home.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,1351995861587678038,9659706277205830526,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,8558343730767988007,14702868033046354573,262144 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,457345036972567162,10871483047130320279,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,4642747579726415583,4419380959915618861,2097152 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,18437433286351804370,8941215244561194957,2097152 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,9294572198354240710,4284304396318186637,2097152 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,17911282431317457533,1549713167200939847,2097152 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4748,i,6266544855201488971,7005727548515227978,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,13971114471303655106,6358198917942925623,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8006366846569964545,8122012833292541775,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8006366846569964545,8122012833292541775,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,2498095126654900643,16817506964149747558,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,11072119661824575586,16325115307374529684,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,13237269647508877516,11017890312958836569,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,18058806976525675022,9210480388985422937,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,5345477429557528761,11366415753255160977,524288 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,4082389993800289617,3377980632804387216,262144 --field-trial-handle=2388,i,8196889884041095723,5431765237195814902,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 719bc1db79d5bc29d0d28e9212425107ebe2dfa8a60d570bf1d50472ad2e7687
MD5 09319e6d6f886721e96c22b97f1fd737
SHA1 5edacd02b3784973eb53048baf63b255d3c7b3a5
SHA512 00a708379f3b63646d2dcf423c0fd4fe60d6ed2bad4046d1618c16a137aa69b3dd1c7c5d7d4b48b61f0f6fc9b8a3597f787dee7ced206e10fe2cd488602de6f5
TLSH
T17261C6750B10C4ECE79031B098D932927872DDEAF4835E4670B35EB1FA04F4189EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7888e0ecc67ffbe5f140b3af4c1f2f43828fb37df09604065cd1dcba44dc3b80
MD5 371df86a3e7807c84d735642554f3be6
SHA1 258d21cd2ae39509631fb170df082ad61ce0efe1
SHA512 7ebaef21ad141aaa7e6fa35e7d6706baca1a41f11674fc686f537812eab187ef3f7516bdec6f710dbdc0894c5062ac18d797fdffcd37696ba64098a3eae2ec44
TLSH
T14C316BB7C3D4C6BE890156F4AA24AE2BDE2D051A42283C5AC9E4EF5B93F3471D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4473d37196ca4ca96923793ff5e7eb7dd6019b50a900c2182a86666a3231f104
MD5 72770f7962cd74792f687ea27d54b511
SHA1 d8d58cc1b18117fb44c43f628d0fd05ac806d14b
SHA512 3c30a3b0f0ba0cb6cc5df689d4b6555b0f4b4bc0f2b96405b33f358ec510b89ec941d6f45da0f718f265270bed04afd58972e092ea96e484e9e8a3d5172477a6
SSDEEP 192:sxZsRfkT/fTsY0hsVdIdpdkHW6+WNGYvrUGwjW6zIgrJ:sxZsqT/fTsY0htGHbGMr6L9
TLSH
T1C322B8526E38647B8CC7E20ABA15BF53E7F9103251D55E48EAFC861C04E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5afb2c54d95d9bf1d66ec7b9c50592eb20254da694b4825400d30a460529f4a1
MD5 d0697b07d9bbc2b234967452e1d0bb2c
SHA1 2e6dd547b0573c0cf52ac4a89caf89d9edc11a71
SHA512 9fe8e7ca21929ee570ff53a09d91a810fdf769253002d786c61f87122767ba1606429913f6c5c47f0e1ae0dc44dd1686b8fae3bce7323f648d7a9385600fb094
SSDEEP 192:sxZsRfkT/fTs7khsVdIdpdkHW6+WNGYvWUGwjW6zIg59J:sxZsqT/fTs7khtGHbG7r6Ll
TLSH
T1A122C8526E38687B8CC7E60ABB15BF53E7F9503251955E48AAFC861C05EB6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 596c82874463258582bbe26d9c9dba01055da4026e2bf6b5321809ed65cac862
MD5 97bf608838e07c53967c4cbac63d949f
SHA1 cfba0e65e9353e81ca14f7b892c3542b22104e3b
SHA512 a3a459eb2c89c6f699885248152f2640a97d037a99a37b27cc1f88df64c5b754bb21e835443e737393908d30938545383479f270d4033f5de34264c1d499ad45
SSDEEP 192:sxZsRfkT/fTs70hsVdIdpdkHW6+WNGYvrUGwjW6zIg5fJ:sxZsqT/fTs70htGHbGMr6Lz
TLSH
T17222B8526E38647B8CC7E21ABB15BF53D7F9503151D55E48AAFC861C04EB6CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 73990b21fbc6c5089e7e78852762c4a3095aa0773943c0e090aa9abcaccdaaf4
MD5 11882a3220e0fa670d8ebea0e6829891
SHA1 48ce4d8fdd549879dfa6864f89451f01b8feac1c
SHA512 7027dfe9d370dd0f7e50b7854bc3e7d69e55d11d4bf2df37d6db02edc41515c87eaf40ba55b726c09584508dcfed5b5a77587b7d95e8828ec9a15de99983484d
SSDEEP 768:3mee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pborod:3mee3rxWvhffnu1jatcL88bTd
TLSH
T17BC2FA3B640CCB7E4F800AADDC5A6F977FA802C7A7549D4087F9994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c2477695700df30c78958d4cbc6b528c12bc742256db263c621764a3b9ffce60
MD5 73bc056a3c1af7f42abd51c424d86ad8
SHA1 f32fca6fe7f8ca77f8a8efc7376f6ef5e9287448
SHA512 4fb919359c8966af75602e8267367dfe7a1156705aa30b6e0fcf69adb49c331b35f9558b13f02344d12c018cd448370f88f33528ac6e315c2243a4774b37230e
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe090:KYH+Kggm+ruKAUyyQgKJu5
TLSH
T16E91F316753A02022C3D3D8CB2A696360F4535A37468A8EF7FB804664D67E215EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

929c1f43-54eb-4583-8766-2577253864a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\929c1f43-54eb-4583-8766-2577253864a1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 c605468ecbe41fb039a9489188370a4ed1701ed58760cbff36dcb9e5fff395f8
MD5 14cd527724b3c5d1447c2c2992af5149
SHA1 094d135afd21bb2282913d710432403988b9c7a7
SHA512 66b98e468e74821b5a1a55a351e15b6a24a4247c54d6f1ccd1a0f86574cadb85e9df4f8644ce7268a1b7a96865d4b4cb39670165ad167f428acd56af691922b8
SSDEEP 192:usLsNQ1QqVDXRM7k/2QmiU1cWfB4MTAn+FdLQx6ptFd3EE8z1bqcs9:VsNQ1DDXq7eS9fukdcxMdUFfs9
TLSH
T1CC421B717C749C379DA3B546F44A3A035FB4516B9AC42F94E6ED6F2C01DE2AC130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 5fbca82f1cd05f7424d216266d201b8c9541df710863f8ced3ca7fbc57798788
MD5 00866975335a58e7c5838fd1dc9f77ae
SHA1 694671c2e8558f0603f48612d3f2e54fc6b7342b
SHA512 ac23375dce25e81e67cac131d8202fa2de86b00114193799bbd9c834fa2037ad3bb8cf479762e059a9810a5a4ef767cdcf49c9a2a2c06ae2060cc7e680efd721
SSDEEP 192:uFm+xasuheOwQxMGsNQJQqVDXRM7k/2QmiU1cWfB4MTAn+FdLQx6ptFd3EE8z1bl:fZcIhsNQJDDXq7eS9fukdcxMdUFfy14
TLSH
T118625C716C349C37A9A3B547F48A3A035FF4907B96C86E90E5EC6F2C01DA6A8130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bbaca16a62cb98d0e86923e59677a43e234aa388b9dc7d70cd060c05b879c8a5
MD5 5cf4b5182ba1730833d4e263d0c3beac
SHA1 0c97d43d16a4092c52ff39280d94e2995fb82896
SHA512 ffce50be946fd91fadf7def0e24d5335b2ccdc90d280bf224dea57b4745bcb124d376d64245622a34657c9e0e37ea2ce6bfff3176fa7696fd9099a59192063f9
SSDEEP 192:lONb6vMtPQmiUyNGThTAn+FdLQx6/8477MU/u:lONb6UtRPT7dcxEwU/u
TLSH
T198020935AC786C7BEAB3AE46F48A37175FE4116FA9D05B54EAE82F1C00D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 1bd2548178ddda25614351cc8513cca8437068c51d8568fe99f98756610f8b83
MD5 34bd821a2791502bfc1834f92b37bcc3
SHA1 61d8b1aefd34d21fe5d2b554a1cf93c0ba5ee4ec
SHA512 d186e8b903189463ab7ecfc0b8ae7cda12bac020f75f36b6d3ec8a7cb9fc42ee67d6d9fa29d5e348eecf73f51a696468fd479b89d13c15996d8b9d25490fed1f
SSDEEP 192:MONJ6vMFPQmiUybGihTAn+FdLQx6ptFd3Em80IbqcU/u:MONJ6UFRLi7dcxMdU/fU/u
TLSH
T1A7120B71AC749C37AEA3B546F08A36175FB0916BDAC46B50FAEC2F1C01DA6AC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e94d9eb4dca51dc1baf86ca3e6780080952d96f90dbe4354184e7d88e88c1701
MD5 539530956842cb78cc31d887afc43ac0
SHA1 981dc3e26b0580b80c4b7b707452ea272280bae1
SHA512 ac8c88cf8344e67cb9b6c9fcc422a7997d85e1f5cb6f4c81b4b8e3afeead30125354f590c09662a47ad10bf796f5784f415e6745d40b8d7690a88c5edc7980a9
SSDEEP 384:lQy7iFiZcIPosNQ8TUNTUlIlFDDXq7eS9fukdcxMdUHfy14:adFQAZwg7DaX1nUHfy14
TLSH
T134823B735C64D93BADB7AA46F54A36039FF440B7D9C5AA90F6DC6F1C00DA1A8130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c8c03087987cc0722ab5974b6181761f7d6d7c9c62d6f8a21044aebaf2674c62
MD5 4011ac9fc760195be6b90cf5d117e2f4
SHA1 66e760c6ff0d8ca0b203db2fd3d6b0f07780ae5c
SHA512 516b17d3bad8555cf2be2765a109edf60c98547d83103ae4b485d0fc79d2143ef14c64fde5483ce216081d6530c4f3dc00572e70b43e49154f524aec79ba1d2c
TLSH
T1E9412B5CBAFA1154B3B76F56ABF6586E487FB8372F06D05E00510E4E0A67A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download