913ab55c78156e9b4006ed1902c07cce83b69c10bee5dc59696fd73125c47d84

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 18:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
omnibuzzard1/400.html
Size 130B
Sample260817-wxaefsch88
SHA256 913ab55c78156e9b4006ed1902c07cce83b69c10bee5dc59696fd73125c47d84
MD5 67e180fd9e4a51ff64769439626e165a
SHA1 f1d1e63ffbd7e163808cb6e983254cba4b74cce7
SHA512 e413082e474ff14f138c301d618e205b9152132139169296435294d101ccd03e3a84ef049c124560e2fa3ec38539bed22e369631facfd87ad22fb633adedf568
TLSH
T1B1C09BF75090311DCE0291D44FC1F74575F4A145F5C58DB955D504EE100441AC4055DD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314644263028885"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{34DB49EB-B625-4337-BC4E-074EC2683526}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2980	msedge.exe
2980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe
2116	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2116 wrote to memory of 1764	2116	msedge.exe	85
PID 2116 wrote to memory of 2344	2116	msedge.exe	86
PID 2116 wrote to memory of 1684	2116	msedge.exe	87
PID 2116 wrote to memory of 1684	2116	msedge.exe	87
PID 2116 wrote to memory of 1684	2116	msedge.exe	87
PID 2116 wrote to memory of 1268	2116	msedge.exe	89
PID 2116 wrote to memory of 1268	2116	msedge.exe	89
PID 2116 wrote to memory of 2016	2116	msedge.exe	90
PID 2116 wrote to memory of 1408	2116	msedge.exe	91
PID 2116 wrote to memory of 2016	2116	msedge.exe	90
PID 2116 wrote to memory of 2016	2116	msedge.exe	90
PID 2116 wrote to memory of 1408	2116	msedge.exe	91
PID 2116 wrote to memory of 1408	2116	msedge.exe	91
PID 2116 wrote to memory of 3704	2116	msedge.exe	92
PID 2116 wrote to memory of 3972	2116	msedge.exe	93
PID 2116 wrote to memory of 3704	2116	msedge.exe	92
PID 2116 wrote to memory of 3704	2116	msedge.exe	92
PID 2116 wrote to memory of 3972	2116	msedge.exe	93
PID 2116 wrote to memory of 3972	2116	msedge.exe	93
PID 2116 wrote to memory of 1536	2116	msedge.exe	96
PID 2116 wrote to memory of 1768	2116	msedge.exe	97
PID 2116 wrote to memory of 1536	2116	msedge.exe	96
PID 2116 wrote to memory of 1768	2116	msedge.exe	97
PID 2116 wrote to memory of 1040	2116	msedge.exe	99
PID 2116 wrote to memory of 768	2116	msedge.exe	102
PID 2116 wrote to memory of 2012	2116	msedge.exe	103
PID 2116 wrote to memory of 2912	2116	msedge.exe	104
PID 2116 wrote to memory of 4332	2116	msedge.exe	105
PID 2116 wrote to memory of 4332	2116	msedge.exe	105
PID 2116 wrote to memory of 4732	2116	msedge.exe	113
PID 2116 wrote to memory of 4732	2116	msedge.exe	113
PID 2116 wrote to memory of 2980	2116	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\omnibuzzard1\400.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff94aecc188,0x7ff94aecc194,0x7ff94aecc1a0
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,9253156557488323140,3216942276671123937,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,18227295536278570484,14522775710664871419,262144 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1360,i,12272881803738303227,1100784776026191595,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=276 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,11981477829724207345,15616567695548033477,2097152 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,14278715717272194340,12580163752322739610,2097152 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,1694551940441344684,6261964828841048134,2097152 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,711819290469982304,14690609346737387608,2097152 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14450466433955217443,5841963290253839805,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,12039233594459020882,7382719405735465830,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14026573102030771482,6432092209029825023,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14026573102030771482,6432092209029825023,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,14069928345040178927,570271139128601760,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,7630467461927327661,827195800221335337,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,6849166867979616103,7772537403052659244,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3048,i,18026143471218144648,7742884034796261302,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,9769687497114879648,9238589309857725796,524288 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1908,i,8270383035049989286,18327286191154411339,262144 --field-trial-handle=2344,i,13334702678011388623,17472266928294152409,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9793066241474514f08fd977acd6caa44d1a1d062f1ce6ba7eb44beb5d5a2b99
MD5 86f8fe14e93f5247cb58f52f9329e51f
SHA1 c9fb3745cf27bb0dfd322629272770abdbb9d200
SHA512 7dfd4160e38fa935e011b3b0e291e8d777cd28ed5dfa4683bdcd6b81eee21bcbe6d485b1dd9136b54472bf89cb0eabae52804de60ed4615ca62757b196311c71
TLSH
T1CC71513B126209BAD3AA8033D0F323413577AAEAF4235E5917708CB76634B52B19957D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 60573e312ca606cb53dc29a64137fbb5f856b84dd8f36d9f1b5538650f4fac6b
MD5 13b5dcf7dedf8d99231a03d762f88d2f
SHA1 bb6ab6b019aaf241abbb00b17d531d6232f3f50b
SHA512 87fac959e03c10b43bb5f410b6706c6d179fca4ee13de90d8985d81700f9a0b5549c109b47349f10ceb37620d0ff7e711b4b2cedb931be59c13b07bd3d53ea57
TLSH
T12D115BB3C3E5856E8A1156F09A24AE2BDE2D060642187D15C9D4FF2793E3465E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 08b7765cd418259b1257d67637e0522f5f018e548a609a1e235457f21ee7b685
MD5 0e485d8f894249e824f2f0b080ec962c
SHA1 dbbd02030829c687b95adca8476bf14f702679df
SHA512 96fb2632c4231c4ac01bfeac1d6aa2d980a2445f363a01f6bc5e197a2e7d79aa1702eefd753fb9a13e5b5a3e297083e11d09d2b26562712496ab5bc3c89ad743
SSDEEP 192:sxZIRDyM/jK1Ml8Mkg/fYsxY1Idpd+HW6+WNGYIkllpIgrJ:sxZIVMg/fYsxYGEHbGq9
TLSH
T1FA42E8126B346977CCDBD209FA55BF53D6F90572A6900E44A9FCDA1C04E6AEC2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e0e514042a198cd406c4ec2620f3663d57ae0ee63a651bc295426a88e637cc07
MD5 d5f2f8f6f31c0f0cdef983ec0d9c180b
SHA1 3ef2c7c07af49b92732d14f47ae4b9be748dcf24
SHA512 66ca37a616b09e352f5ea07653d8e8dae9e9aac8c869007d384133999ffedbbea95e9e7aa51cb2ba9d4bed86143ebe32a43145531c80acbe0ad2d8921177444e
SSDEEP 192:sxZIRDyM/jK1Ml8UQlkg/fYsIr1IdpH+HW6+WNGYI5U3pIg5mJ:sxZIVqug/fYsIrGeHbGK0
TLSH
T15C52E712AA345977CCDBE219F9457F93E7F50572A6900E44A9FCCA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 74e005f6c5df64359784937a7f43c906639b6614667fb5def9753cc427f93513
MD5 3c11829e0c047292597c934119124740
SHA1 903d7b2a883bbb358318487bdd9666e382bd238d
SHA512 f2d2574a52b3520128981f44a25a335f15d13e171efa5c8415252e34d146e47c5c2aae8cfd52984b751e2369066bbcab32a489cf1ab11ab1ac4636317f355639
SSDEEP 768:RBsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9aroib3:RBsqxXlWvJD6Tu1ja54LAs9Riz
TLSH
T174D21B3B694CC77E4F840E6CEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 704bf2e513d9dcdda2cccb4f59ef363dfeee45c027d9ad9e2b97b99b4c9333aa
MD5 9ee32ce4f40995d449390bd74bb7c43a
SHA1 6967b3236928ecdcc33175c144765fe328a4bd47
SHA512 f7175e4d1728d9f61257afba004141886913430c648b0c3f96e22e2eeea5f081f96a2cddd88cffc3325d9046cb36cd1ffcc45ac796916ee83232171504fb80c8
SSDEEP 96:KYbaKYIK6m0Knq6+HuKYYj5uKiYCiE4KxCd:ExX/l9Zfq
TLSH
T17AE1F302717F02033ABD7908A3AA8A374E4275A37418A4BF3BB955654EB7E115CFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b4da603-8a1a-4afc-bf29-1c56bd61db52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6b4da603-8a1a-4afc-bf29-1c56bd61db52.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e9caa6e36f8bddd054ac6d5f242f1f7ce21ef15c555d890859180559dbde35e0
MD5 63cd78b045c55b8ed9e7c240f7d1709f
SHA1 e09bc96f300490dab27c65b60e85b41b106eb502
SHA512 1bbe707fcb4150584f3e8ec28d9327ebdc769b86eedd392bd331be99b1cf8bf96ed88ad17680bbec6f8feb6c4c65717a687190ecca708075ce88462f61caa83e
SSDEEP 384:qZcIhsNHx+5jab0XPVRNwOWG9JQCOOPrXLpe8C/t:IhH5R9HwOp9qCOi9Pq
TLSH
T1B2928D3168786C67ADF6B685F68B36035EF89127FAC86BC4D1DD9B1C01DB598030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 3a41222fa201975eca77b3647c14d3f765cb494cf88e16116e3f9f4e6142e2fb
MD5 f05d69f9198c9409eea296814184e535
SHA1 48791cab3f61f237e9ab93c81659bc9f21174bdf
SHA512 15f36b6985d8200ca1210fa172f38a444453b5c57b6f5a8c93eddf4875148976a77958ea99c27e8c001161d9e4e1cf5e47e83a959918774f49d1dbbb55abc83b
SSDEEP 384:WiFiZcIKsNZ8TUNTUlIlw+5jab0XPVRNwOWG9JhCOOPrXLpe8C/t:9FQKIwgP5R9HwOp9bCOi9Pq
TLSH
T10EA27D7258689D7BBDF6AF85F64B32138EF44177E9C5AA94E2CC9A0C01DB59C030BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 03545dcccb458d618024b2d46e6f6fffb8b68daca5fdddb9629f0b1162c47981
MD5 b43a7df7eb07d4260a0886d998ca0a69
SHA1 19fd96fe3bb7157db38d67886a9bc4fcfc307fc2
SHA512 c39f9ef3776563f3a14b9c2d07c66dcd5abbebd3fa3b269cd7c92a242b58c26fdce50ee24a0fc77f7c14386ff9adf8171ba36e0361d7e85027470c5f272d3f49
SSDEEP 192:tONg6JkRtQmiUykOW+RNwOmhOmQh3pRQU6:tONg6UruW+RNwOW0oU6
TLSH
T1B002E834A9386C779EF26E0AF54B27175FA5213BF9852F80DAD81F1C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 92b181eb1712f277aa81ccb4c146113c2610dd3df3d6e770d7ea26ed5054313f
MD5 eb78d7245448cb0cb2c6d9351e44af6b
SHA1 0707ba413e9e7b1f500e370f12f1199f04cabc8d
SHA512 141b98e0911ebbe612bd268fff8f20af82f8f6a28d051e25242845f3be8a776f4ceb7eed51d9e9bfa601a9290b98a3a4a66cbbe02245388543175536626e4d37
SSDEEP 384:KZcIhsNHw+5jab0XPVRNwOWG9JQCOOPrXLpe8C/t:ohc5R9HwOp9qCOi9Pq
TLSH
T1DF928D7168386C67ADF6B685F64B36135EF89127FAC86B84D1DC9B1C01DB598030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6e8b3a449ce286ff22603877aed9ffc091cd385e87cfd6c217c243a8f702eb95
MD5 c0d9e6999dd96bb6500252cd0d66ab3e
SHA1 be457ddd8b9c8ea9eab2843f7ce55d82d4af866f
SHA512 c38eac1ee7138d8bf7f70875d67a0e77c3d63c407dbd992556805e04f88625a12701f77863e43e37b36cbb2fe4537889d2d64cc8924e812abbe35a78df0228a0
SSDEEP 192:YONC6JkR+QmiUypON+RNwOmhOmVU9DFyVclqayU6:YONC6U6BN+RNwOWG9JVCU6
TLSH
T1DA122A3168385C7B9EE26545F54B36134EB5412BEE896FC0D5DC2E1C01EF69C134AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 633c128da252cfcee9aa08d5139c7884a0e3bc03ee4144ac6b2af14c1a862228
MD5 2d8c03fa01295b02caaac9b201e73586
SHA1 7f53f924f0a2b17e3e5182d5704ef3b8cdb013af
SHA512 23f26fea5414cf199b645049272a2bbbda238d74eeb66da114efff550b7e138b892c332ad094eb884f7d4bf78e78a7288e8bc64a1f693d8e68f4f4eecf84bded
TLSH
T183412758A6F91148B3B77F5AABF7A86D487ABC732E06D46E00110E4E0A63B41CC61737
MD5 SHA1 SHA512 TLSH

Submit Download