57c3e45e0a9c9d245013eab2a4e0c71eb5ef032c1eb6839ab1fb1184b4a2608c

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
check.html
Size 16KB
Sample260816-wxmpsagk21
SHA256 57c3e45e0a9c9d245013eab2a4e0c71eb5ef032c1eb6839ab1fb1184b4a2608c
MD5 d7ae649eb65ed82481acf6ac560deeea
SHA1 a50a8f2312674b36706529ef82c3b1ac782a48a8
SHA512 05bf88e49fb8c6e51436da0355bc9ebeb1f7100bee7aad5eefb90b87f4b6327d568bf610ce8be0ad2c786cae050142c7b1848358d846cf2ceeca72f2273785a6
SSDEEP 192:Z0xc/5ylqCAerlOMOlcLg0A+SL4vHnvcvy9u1rj5P8U+4LyHXDpSh43xeCb6eLsO:3/0LAe0MOuK6AjqU+cWX3xb6CBDY9MUK
TLSH
T16572B9480431263F88756375A39B8418E792612B25139E9CB95D82823FF1913C7AEFFF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313780353510736"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{744F90E4-8B9C-4F53-B85A-8FBAC6B78CF6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2760	msedge.exe
2760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3412 wrote to memory of 2028	3412	msedge.exe	85
PID 3412 wrote to memory of 2744	3412	msedge.exe	87
PID 3412 wrote to memory of 3284	3412	msedge.exe	88
PID 3412 wrote to memory of 2384	3412	msedge.exe	89
PID 3412 wrote to memory of 3284	3412	msedge.exe	88
PID 3412 wrote to memory of 3284	3412	msedge.exe	88
PID 3412 wrote to memory of 2384	3412	msedge.exe	89
PID 3412 wrote to memory of 2088	3412	msedge.exe	90
PID 3412 wrote to memory of 2088	3412	msedge.exe	90
PID 3412 wrote to memory of 2088	3412	msedge.exe	90
PID 3412 wrote to memory of 2772	3412	msedge.exe	91
PID 3412 wrote to memory of 2772	3412	msedge.exe	91
PID 3412 wrote to memory of 2772	3412	msedge.exe	91
PID 3412 wrote to memory of 5084	3412	msedge.exe	92
PID 3412 wrote to memory of 964	3412	msedge.exe	93
PID 3412 wrote to memory of 5084	3412	msedge.exe	92
PID 3412 wrote to memory of 5084	3412	msedge.exe	92
PID 3412 wrote to memory of 964	3412	msedge.exe	93
PID 3412 wrote to memory of 964	3412	msedge.exe	93
PID 3412 wrote to memory of 4456	3412	msedge.exe	97
PID 3412 wrote to memory of 4192	3412	msedge.exe	98
PID 3412 wrote to memory of 4456	3412	msedge.exe	97
PID 3412 wrote to memory of 4192	3412	msedge.exe	98
PID 3412 wrote to memory of 2332	3412	msedge.exe	100
PID 3412 wrote to memory of 988	3412	msedge.exe	107
PID 3412 wrote to memory of 4532	3412	msedge.exe	108
PID 3412 wrote to memory of 4216	3412	msedge.exe	109
PID 3412 wrote to memory of 4528	3412	msedge.exe	112
PID 3412 wrote to memory of 4528	3412	msedge.exe	112
PID 3412 wrote to memory of 2760	3412	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\check.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8c83bc188,0x7ff8c83bc194,0x7ff8c83bc1a0
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,13729135459942386756,2151932881812908854,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14841481971054955929,12806148585333985691,262144 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:2
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,13997254363596862307,9234390290872608897,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,4985084260344542910,14126994383322010510,2097152 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,7753555099796340890,17364229195915322914,2097152 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,10491000313720242163,1755478066056737977,2097152 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,9682540775512837547,433657138035831143,2097152 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10200660065095891625,13798181603298080077,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17811731380609208590,1180937511282316376,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,323951632834795404,5653246955922166118,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,323951632834795404,5653246955922166118,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,4408782121758860650,15234069108255018673,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,11773615313289781865,16458497816496675042,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,11360286164539335055,10639758567300301609,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,4938704154144450091,16154379466362723948,524288 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6012,i,16863897014372359916,17829607013489160546,262144 --field-trial-handle=2696,i,177239608546167757,9004793393280384694,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7fea608921203501a32578700c621171014c39e7f04c689721b0273231fb7a5f
MD5 4e09ea0f719ca97c7b586b8e5f4d33a6
SHA1 41cd00b43529d6db5a55ee3d9c51701969b4ae7f
SHA512 959b767f8802a57cc6718b453cfb6eeafdf5379bee04e4db88bc742c90eecbc3233883deaccfe96dc2c0e83d6dbcb393b791c5666948b6c327c2f22803e8fa66
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d09450bc8ba0b1df12a701cdee70adf832e08e68ad3a5d5983f6224146d18606
MD5 a74def08d43ad2e1ad8761204353c328
SHA1 862aaff4aeddcf9bf56cfeb7939a226f1392b2ae
SHA512 2090a70b744135de8b99c892bd194b3153c022ddd1a522406ced887de91a13b28290cccea8ab2c7fbc5d5ed493c55b9d06d5e8c56b4ae6792240a677bfb807dc
TLSH
T1A461D60BEE6F0842D372A1F2E0F54D5174B7491D3A534E31342448BD7A0FBE5BDA100A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 9d931fed74d48484975235d848df328dde89e69387639c69bc2be7babdb0f58a
MD5 e1b9aea6ff2638ff9f6a56ecfd902612
SHA1 d9a9acac1eb141faf142b3df36b81c92ef50b1bc
SHA512 610b9c1a33202761e95cf1fec9d87f6ce0d5ca3bb08a43ced40a132fbb25d3b8e84b0db03ff55f336e2294d6b693752f119400f59a7662e2ebffd766e7d58804
TLSH
T10C117AF3C3D585AEC91556F06A24AE2BCE2D0606432C7C29C9D4EF2BD3E3075E00299B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dade5635284afa135ead49e0a2b3bea7a581663d605defdec8a38a850b3377c8
MD5 5e14b4ad15e0200a74af7449b2e760bd
SHA1 465141a5dab8ecec9398dd1c62c22e8590c278b5
SHA512 7994359bf445f2d8ab31757acda21e11ca47a1df48ff78f36215872fc2e54b1b0a6492141847f119cffb0570078fd0408cb1d8ca8aec4344dcdbbf252a12fce8
SSDEEP 192:sxZPRzyM/jK1Ml8Mkh/fWsnkbAqIdpd+qHW6+WNGY4wXh1/IgrJ:sxZPdMh/fWsnkbi0qHbG89
TLSH
T1E642F8116A34A977CCDBD20DFA45BF53D6F91472A2900D48A9FCCA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 833869389b47f09d8d7882c32fedd185bbbe35af7de4a783293257b13436a527
MD5 314708f9dbe0c043b45f1dc88c01aad2
SHA1 2ae96d41def19b31b914fc328e47734f45fd6a58
SHA512 fa7db6b6f6b47716d1a3bb00808b555a84ce896622a1edad34c165c7c0393c150570e39ee0bfc08b0ca7428441533ed7330dead9389be5bc2ddf2604ee3fa24c
SSDEEP 192:sxZPRzyM/jK1Ml8UQukh/fWs8k7AqIdpH+qHW6+WNGY4iQSj1/Ig5oJ:sxZPdqFh/fWs8k7ieqHbGCpS
TLSH
T12A52E8156A385977CCDBD20DF945BF53D6F9547292900E48ADFCCA1C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9797db6977e6b59a64ff71af3addd2e21cfbfc346cf0b9a060e46df4a48967a4
MD5 81749401012efcb3b8abe72a044e3a30
SHA1 82850c7e40fba7bb0eeed882178c2b2732f08b7e
SHA512 349342d5c7560f10666404cad8e7f556cfcf03b67a00a7638ed02ad790774d524f3f0ec5fdbb981ee30a5a76f08351b971fe09dd44ad661f31fbad090fcc2736
SSDEEP 768:L78iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdAro7k5Unh:L78iJPNWvx76ru1jahALocdLmUh
TLSH
T181D20B3B680CCB7E4F844E9CEC266F966DD801CB6B948D5447FA880C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aa249d057e049439ea3419edb0d36765fcd2f65b07c9e4592793a5fccbd91b0a
MD5 8cb13b637405d08f68cf5ad95b653321
SHA1 04c5ec600477601775328830e4e2e14b178d82a6
SHA512 c37a922058895e549ed9d3d3aa9c6d0418905b39f71d6da8ad5fd50ed141560c3a0b5f26373d5fdeb019c076d0acf26e28d3c84819b1b6cfdc9655b2a36af3f4
SSDEEP 96:KkOkKHK6TEPIkumW28mJ9Wk2K+TWi2yMERSl3+Kc0qR:S3TEPIkumWlmJkk0TWi5MERSUdR
TLSH
T15091320235BB53053D7E691D92588F6707A37563312DB86B3BA840B94E66E240EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6df2be2-ce15-4458-be42-6c0df49e67fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6df2be2-ce15-4458-be42-6c0df49e67fb.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e4453fbc53aa78b99109888cda0629eeccaeb81df8aa70173dc564dc12c5f020
MD5 0cd9d35e610984cdc3c35fa2d44090cb
SHA1 973efda9e26d95b7452483ce379af93f49ca7e8a
SHA512 54b74d59cdd9711443756ea5bd8c3b1a770c1f61c26f928aa3257a9049738bd5e39b0876265c95724497e8c6f476e8e1416b948443c11c10167bdcf19a413e3d
SSDEEP 384:5ZcIhsNxvY24U3bkhOp3VekGOOPrXLpe8C/8B6:RhkoOpdGOi9Pj6
TLSH
T10A928D7168786D7729E3EA45F84227179FF89167F2C82FD8D4DCAB1C05CA258031B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 eeaa875cf3035ffc2d3c232af4593b86e969d4f9dd7a3f2b24b4f660ea4e889b
MD5 4707e8a2f1abe8cd226683986f06e27f
SHA1 a0e4ff0a7cc53397d3b21c709020672f8d1179f5
SHA512 d464d7e86a19aa9277d76c3d618bfce48ae15d0839c22531b33a56d45da18e40f77d022c4f747fb7cfc4ed9423c44a8e94a49cd0d2f1a6319436e8055ac56633
SSDEEP 384:+qZcISsNx+Y24U3bkhOp3VedGOOPrXLpe8C/8B6:pSpoOpKGOi9Pj6
TLSH
T1A9928D71A8786D7729E3EA45F94233179FF89167E2C42FD8E5DCAB0C05CA25C030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9cd1b7af949ea004fc785928569967fe9d1ceb13288d3d6c01ea70deffb9208b
MD5 4b4b294608a610797c8d64d98cbd5d72
SHA1 5164f373d59e080f84402e9c5aec0ff9f8d178ca
SHA512 e98539044cfb6d2e4bd8d33374fd73a299bd7cb9a18641641a60d09a89389075a1551ec8eefc781bbf532349e488a125b51d1a018170efc80037215ea6c3a9a9
SSDEEP 384:gZcIhsNx+Y24U3bkhOp3VekGOOPrXLpe8C/8B6:ehpoOpdGOi9Pj6
TLSH
T1F6928D7168786D7729E3EA45F84237179FF89067F2C82FD8E5DCAB1C05CA658031B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a1b10a7024b0aa19f490446a208af80d4eae6446b4af55dfc58ba3b85b18470d
MD5 bba7d364297401254fb8809cc51b6e53
SHA1 c6192f2b8f00bc4aa7ec65f6188036e662b5a853
SHA512 a52d95d43e33576dde480d66be1b5c82934433cd6f19254c5c0815cf98d44879a3e1d95b96c7b97d103661a517e5065a750e458c080e17973dcfb2a1fe2f526c
SSDEEP 96:ZqONkIQsjpfmUTmDK5ih/cIPURHl8h4otop5M5DXzBhPwivh50xy0SFYKEAxnO0M:gONY6kDfQmiUyOXtZ903yO4+TQi6o1U6
TLSH
T19902E8356C782CBB9EA3AE49F44737275FA5112FEAC52F85D9E82A1C00C774C2746826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b27919a8fb144657aa37c74ee7dd93cff0808379fb06c95d3db75dfa7528cb12
MD5 b38d47ca966c574565c22950ce2ced15
SHA1 4d9001c2034d0618dd49f18129712aa6509529aa
SHA512 9a78eb11ab329079d0108fafbdc8a4f4d726c47a0b95ed3d691b986962aa4e740999a1686d9126768ae1f456cfec080aceff4e3c9eeaea56656def29b478490b
SSDEEP 192:EON2R6k0QmiUyfXt5903yO4+R5pbr9e3cR+qCU6:EONM6BEt59hOp3VeYGU6
TLSH
T13912193268786C3B5EE3A948F44733179EA5812BEACC6FD5D5DC2A1C05DB35C130A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0261e739e3017eaf672a659bf3496047b2befc728bc6063cb05d4527c2716afb
MD5 8d6fc65ccb8cc54f4717b1f245e2e4ac
SHA1 1edebf2b71bfab8dee20ad7a3f8407d1761327d4
SHA512 7f128512bcc561c47c86d904ea4665998218353e6929296e523b5e0890e88a3b1b8bef38acbd237fbfc65a0e6e37dfb09cdcddda15e407e0ef851e23a7a48ece
TLSH
T165412658AAEE1148B3B77F169BF7A46D447AB8732F06919D00110D4F0A27E40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download