0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260827-nbvt9stdnf
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5068	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323042314637602"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{ADADD941-653C-4DCB-B1B2-0E1793E82BCF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4652	msedge.exe
4652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4276 wrote to memory of 4956	4276	msedge.exe	84
PID 4276 wrote to memory of 5068	4276	msedge.exe	85
PID 4276 wrote to memory of 4908	4276	msedge.exe	86
PID 4276 wrote to memory of 4908	4276	msedge.exe	86
PID 4276 wrote to memory of 4908	4276	msedge.exe	86
PID 4276 wrote to memory of 4340	4276	msedge.exe	87
PID 4276 wrote to memory of 4340	4276	msedge.exe	87
PID 4276 wrote to memory of 4128	4276	msedge.exe	89
PID 4276 wrote to memory of 4128	4276	msedge.exe	89
PID 4276 wrote to memory of 4128	4276	msedge.exe	89
PID 4276 wrote to memory of 736	4276	msedge.exe	90
PID 4276 wrote to memory of 736	4276	msedge.exe	90
PID 4276 wrote to memory of 736	4276	msedge.exe	90
PID 4276 wrote to memory of 3200	4276	msedge.exe	91
PID 4276 wrote to memory of 3200	4276	msedge.exe	91
PID 4276 wrote to memory of 3200	4276	msedge.exe	91
PID 4276 wrote to memory of 2120	4276	msedge.exe	92
PID 4276 wrote to memory of 2120	4276	msedge.exe	92
PID 4276 wrote to memory of 2120	4276	msedge.exe	92
PID 4276 wrote to memory of 3916	4276	msedge.exe	102
PID 4276 wrote to memory of 3916	4276	msedge.exe	102
PID 4276 wrote to memory of 4432	4276	msedge.exe	101
PID 4276 wrote to memory of 4432	4276	msedge.exe	101
PID 4276 wrote to memory of 2060	4276	msedge.exe	104
PID 4276 wrote to memory of 4180	4276	msedge.exe	112
PID 4276 wrote to memory of 1292	4276	msedge.exe	113
PID 4276 wrote to memory of 4848	4276	msedge.exe	114
PID 4276 wrote to memory of 1380	4276	msedge.exe	115
PID 4276 wrote to memory of 1380	4276	msedge.exe	115
PID 4276 wrote to memory of 4652	4276	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ffb8b10c188,0x7ffb8b10c194,0x7ffb8b10c1a0
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,18052038101175909442,15462535505181597222,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,8442673974479877,16024462104089060336,262144 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,6443431535575190203,5985603779560565303,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,11193185119308612052,3361829083582566574,2097152 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,14646785763496289924,1062406625109783114,2097152 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,2565275392549097815,7006078261292240806,2097152 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,10771937451063613437,2193596742718313616,2097152 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12249584032243403248,6922451959776037296,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,12580633542104004003,6101327723438894095,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1698340262059009401,8211676818796343425,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1698340262059009401,8211676818796343425,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,101066524270906902,8256819114723698675,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,15191203516029714092,3559576314388516138,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,2176832936692773962,838116923745233027,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,7480759670653826651,4726573293636570293,524288 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:8
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,3923768940891667667,10852363448348938635,262144 --field-trial-handle=2340,i,10023947762625531935,595855025846734767,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6346d955d8221092ee72fa3db3d8b596e7b2d2cfbee6f8811aabf82e9a2568d5
MD5 08f55a6ac6b7ea2e622280499cc73ca2
SHA1 56e05add52af3f2cb0617379eabec36723f83ec2
SHA512 f6f4035c3dfedbbaac7a57df7b1f361e439350328634f2def687bea3034622e62345a683cefffdd197f5e62111e30105998ee67f5ff5bb156f19801ef9f41eb5
TLSH
T163712F340171C86CE713B57980A5C2A87CFDA5E8F8535E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a478.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a478.TMP
Size 3KB
SHA256 3a4b770ca949e73eb4379038d254b7e0d771bf41016e073e70cdca8377efcd72
MD5 b105e0ad2489ebac52230afe3b3aeef4
SHA1 6f05e880524305b2d68db73d41d2930b6c3c0e82
SHA512 86abf40d52c5e31d9e35761d4d44383c93dbb989b692c97382409f053795d5aeddab676967c4f4637513a6e0f829b82d87f66c50abde062b7d98e357bf1fa56f
TLSH
T1FC712F340171C86CE313B57980A5C2A87CFDA5E8F8531E87D191DA362929FE0837DCBA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ccb9829819a779a2a5b6cdc8936b77064bb465fc55730549d6f77048e5002882
MD5 01bc2827aeb08d28cf651bdfda64d4c8
SHA1 8b7061bf4a8007a385713df0f9f687eafcdb4842
SHA512 3c854fcb47c8a0bfc30f8768677b6b0aa2c9cd27e6d4378bdd0bf6c75b6677f95cd1afeeecc454b9b48c57a2123632d360a5a924e856a78e952879d14dfcda36
TLSH
T13D117DF3C7E5D56E890116F09A24AE1BCE2D0615421C7C19C5D4FF6BD3E3475E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 39be96ce3ee337232a22bdac70766c86d814222c6990737014eda6da9dea24f7
MD5 300b01d59303470d667af07521a9058a
SHA1 dda6425ebcac5ee73ce7a06b53ed0f277194ba17
SHA512 31cf0a452422f7907e5a67387d254a79f68779c4b2be689a3a3d6ef888b26391e6aa9581e62eb8cd95ed65e7c3715a92bdc69369d14f341f5b4e5adb787774ec
SSDEEP 192:sxZPYRxyM/jK1Ml8Mk7/fCs3cVEmIdpdPHW6+WNGYzQcp6IgrJ:sxZPYrM7/fCssVUNHbGV9
TLSH
T1F542F802AB34A977CCCBD219FA55BF53D6F5157292900E44A9FCDA1C04E6AEC2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a4587f6d5ac5a00da58c053a525f999ffec4d1528c119e36ae5fc01817046b6b
MD5 e5efe602d34bbcf4cb29ea74458ea88c
SHA1 b6d9e924991c852bc98baeb10e700a42b88d44aa
SHA512 1ba549494660bb0c0769559d6dde6e9c82b49555a1ec282e1b79dbf486bd072358a49df58de7163317ce4369a97d28b245efa0c3c84ac7c1e4d469365594cb1f
SSDEEP 192:sxZPYRxyM/jK1Ml8UQhk7/fCs0crEmIdpHPHW6+WNGYzF/p6Ig50J:sxZPYrqy7/fCszrUvHbGtG
TLSH
T13B52F712AB34A977CCDBD21DFA51BF53D6F5147292900E44A9FCDA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f8c87bc264b2a8dd8ac565028fd31c07767c56352b155fc2f3bced17da8e5bbe
MD5 99a676e8e9ca8b5bc9bd06a5a65285f2
SHA1 32f56c7d0fcc70c47f9d7921a497c12f001d7258
SHA512 b9c91f4a19e19290c33c2209ac004721d266fa1c20229bce738312fce56a14679ace0a9e2507078e704ef58cb29bbdc71e265d72ee34d4ec436f9e182b7c8377
SSDEEP 768:gDW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjProI0itYH:gDW7kf0Wvqidau1jaa5LA3jc9H
TLSH
T10AD2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 1be5804210848dea7d5e4706c3ed5c1eae11d1ee598b919c39121bdcb1848b17
MD5 78507dcbd079032559f790b9827a1b01
SHA1 b5ed6a8b9c26f32cd5992cfe5c127b68dc854f08
SHA512 b07342f77a86b6a6436c5eafc4bc48d7447bf40a78bb1ed5c51035c3e534296a5745db161a32b5457e639ab5a0e02b96d544c4ecce8b7bd8a7369c24199444eb
SSDEEP 96:KIbCKcXrOKcwOigAKVKmviKYkeiowKFiR:sKFP4pXG
TLSH
T1F0D18A26333B164278BD3908A75AC677AE4136A33498A46F7F7940660E27E139DFC4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9663140-7961-4e00-875b-d8566e2c39dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d9663140-7961-4e00-875b-d8566e2c39dc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2dd292029a456a33655c84a355c5376a175b55a3f109ddb11e43f11b7c47e0bc
MD5 b9883047c58e1c1fc8c1e6805f3ad5e6
SHA1 1f8b499b54818f873a0aff5ce4b0ea7796511107
SHA512 c3b2d313e968a479fb7d67f93924f1bcad8108eaf69ce322c6deee54fac5a9392327aa95b3ae550b6140f44021751cadb2fcb70046f7acb6cd99260fbcca6e58
SSDEEP 384:GiFiZcIgsNV8TUNTUlIlX7b8OMu+I6CEJrwt+LBNj56BV6ou:tFQgEwgBPI3hwtWN5c85
TLSH
T199A27D739CA4DD7BADA6A650F94A33038FF440B7D5C4AE50E7D9BB1C01EB1991306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1e06581412a30db774b29f08c2e0b03ed083ca913e1e1b0eec25c903d266e379
MD5 2b70ae7ed505a4710bac8f1eb629a211
SHA1 430afb8bfd10d660db9fe14012e3b6d18842d7ae
SHA512 73fa3fda8f11dea1cbe62ba64891d6089ca49928582e07cbd58075fb526caa806a81df572dfee67305c45a01d4f004929d942d0606e849be3ca31736484e5bb2
SSDEEP 192:MONG64BAQmiUya1VW5GBPKmbCIgaDO5U6:MONG6eANDW9IpCU6
TLSH
T13A020B39AC796C7B9EA2AE45F48627175FE4107BE6905F44EAE42B1C01D764C234382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0da93d4c5346380a45ef1bea87932e8206aec47c92ea910e80d4816a3d14d762
MD5 1dad27de3708839c29b68cc6c1eb60c9
SHA1 76b50bc0053d739a9af4bc1040bc5d0bfe3b3953
SHA512 255debce83ccb2288458158013a04be6f0cda8f348806b158004c0ac043441e76c648cbf897f192d6fd23fc3d966f1b68bc0ae67c7bd34cca12c8427cfaca56b
SSDEEP 192:0ON+64B/QmiUyUV35GBPKmbCIR4FC1SJraWwlqQU6:0ON+6eBH39I6CEJrYtU6
TLSH
T14C121A75B8A5AC3B5DA2A581F4C736135FF5416BE6886F40E6EC3B2C01EF65C230681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d0d27df659ff49c9896711599f3e7011523806069bd4aa67be4bb9b1b048b0be
MD5 6f016cfef0b787f09678c8ae8032aa86
SHA1 a634539f5646f8c3b7575a5029e3d6c7fdca75b5
SHA512 b23dcfeeb8d2c8895bac04c4933f5ea8f9bec419344f37ee3a5a18598abc55020f0a5c0034397ec4b279f5c49c2cd950657d84f00b5048cf3a09762113f90252
SSDEEP 384:aZcIhsNL27b8OMu+I6CEJrbt+LBNj56BV6ou:YhNPI3hbtWN5c85
TLSH
T1C8828E71ACB55C7A6CA6E150F58B37034FF8817BA2C86E40D9EDBB1C05EB655230682F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 80d1dade875abfd2a3e62300d92f9e75439d20c97c069f5c91b7b472359cee40
MD5 996043da3701c901a5a5dc0eb3f25877
SHA1 5554fea5dd2557cc60b904a6a066fcf1a0dc875e
SHA512 8e86c0323d1b70d3205b7f36d4bd034117bf8db6a053535d2ef55cfbfa17cc3a8ae26cf1d200e406a2fb2c66655a4ad538c00b1ac3b8f305068e263cb0e4c1c1
SSDEEP 384:NZcIhsNLX7b8OMu+I6CEJrbt+LBNj56BV6ou:VhcPI3hbtWN5c85
TLSH
T142828E71ACB55C7A6CA6F150F58B37034FF8817BA2C86E40D9EDBB1C05EB655230682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84ce1d93-9df2-47a3-ad26-7bd45096d14c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\84ce1d93-9df2-47a3-ad26-7bd45096d14c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e757e2bca39a56ce49549b2b8d4212108860a1418c8c5ecb7d124773d3baf01e
MD5 1b8de9af71256b30016b9f2c3d539042
SHA1 d876cb6660b03d80814bdb3ac7cf44cec392750e
SHA512 664bedab54745cffa30c8d7a07d47d12234cd0c523fd802d4bad34b59ff9b9a0885f834877966b9295969772302545a29a91bcdd685667ceaa663fda90cfe51f
TLSH
T15441099CA6F91148B3776E56ABF6686D487B7C773F06D49E00010E4F0A72A40D9A2737
MD5 SHA1 SHA512 TLSH

Submit Download