7469faa480d7252e28da478d7b13ff1eea36f40a14df0cd97f0f50e533d99687

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130476503.html
Size 28KB
Sample260910-ak1j8aec88
SHA256 7469faa480d7252e28da478d7b13ff1eea36f40a14df0cd97f0f50e533d99687
MD5 d2961f592d29660f72066851ac140936
SHA1 65dd8a7368b5492ea7e1a9e4a7a94a9097f4852e
SHA512 a96668c3f77682867f1cc2d10b4300d7a9abef6135c9da71d99752f93c1ca52d30e24907498362895db1d4fe95905222eab964b11303967e10f1a96f92580ba0
SSDEEP 768:Y+dfmvJfoUtY7cjvARnU54kkT+2RDsbPr5E3lWjC8cJtSbpyQl634j96jO4YsuO6:Y+deNoUtY7cjvAR8khsn+3MeN8Xz3R
TLSH
T183D2F3D572C1FC5B16CD1B63BF4EA9F9D06A9CB31484B64382A4B68934FA11BC1B4CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4020	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334734538381598"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{DE1B72C9-9DD0-4A80-A71A-A7966CAFEFA6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 4608	944	msedge.exe	84
PID 944 wrote to memory of 4020	944	msedge.exe	85
PID 944 wrote to memory of 3760	944	msedge.exe	86
PID 944 wrote to memory of 3760	944	msedge.exe	86
PID 944 wrote to memory of 3760	944	msedge.exe	86
PID 944 wrote to memory of 2176	944	msedge.exe	87
PID 944 wrote to memory of 2176	944	msedge.exe	87
PID 944 wrote to memory of 4548	944	msedge.exe	89
PID 944 wrote to memory of 4136	944	msedge.exe	90
PID 944 wrote to memory of 4548	944	msedge.exe	89
PID 944 wrote to memory of 4548	944	msedge.exe	89
PID 944 wrote to memory of 4136	944	msedge.exe	90
PID 944 wrote to memory of 4136	944	msedge.exe	90
PID 944 wrote to memory of 4060	944	msedge.exe	91
PID 944 wrote to memory of 648	944	msedge.exe	92
PID 944 wrote to memory of 4060	944	msedge.exe	91
PID 944 wrote to memory of 4060	944	msedge.exe	91
PID 944 wrote to memory of 648	944	msedge.exe	92
PID 944 wrote to memory of 648	944	msedge.exe	92
PID 944 wrote to memory of 4800	944	msedge.exe	97
PID 944 wrote to memory of 4036	944	msedge.exe	98
PID 944 wrote to memory of 4800	944	msedge.exe	97
PID 944 wrote to memory of 4036	944	msedge.exe	98
PID 944 wrote to memory of 1948	944	msedge.exe	100
PID 944 wrote to memory of 2388	944	msedge.exe	109
PID 944 wrote to memory of 4740	944	msedge.exe	110
PID 944 wrote to memory of 1840	944	msedge.exe	111
PID 944 wrote to memory of 4440	944	msedge.exe	112
PID 944 wrote to memory of 4440	944	msedge.exe	112
PID 944 wrote to memory of 4680	944	msedge.exe	113
PID 944 wrote to memory of 4680	944	msedge.exe	113
PID 944 wrote to memory of 4972	944	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130476503.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa248bc188,0x7ffa248bc194,0x7ffa248bc1a0
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,10522098805612126317,12274645013546924619,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,4106107145720417654,5533596539883570887,262144 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,18130946515512880501,10547588420588267905,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5339986876895823224,14127493685300624561,2097152 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,4052682035567310997,12050657663745942895,2097152 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,782690369547164472,6107859529225717232,2097152 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,2550719779603590321,7863433678755274745,2097152 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,14160620495643184757,5608510356595120846,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,12283920693500080718,5952388034928572399,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,4321593391636188979,9751063172346174515,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,4321593391636188979,9751063172346174515,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,1998595685388259368,11945242525708803488,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,16707503318036851491,11948772915752426849,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,12743491024880270458,16110843699267858311,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,442371203916598314,18369712524260123702,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,14289836604216347199,17245976359715675580,524288 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,13947389432647145626,5914916591284578737,262144 --field-trial-handle=2292,i,8021143756909345189,8176154773617463940,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d4956fff8f04fbd64a9bd2bdc1ec1e5ebbf5051242388691ca2c9384cd42db2f
MD5 d5153f076670f2fe2b416ee09ce48fd6
SHA1 d138894f03c810eccdfe38bf43de799088229c5a
SHA512 0b66b9b0047942a69de1b15c0bdf5564fc031e17c8a4b3bdc4fa0eed1287de4538d0971f34bd24111944cdeecd6ad9277ed3452e8c80ec612e6de2c4472a3fc7
TLSH
T1C161073C32674187E75F85F0F8F95E4C327941BB9B1F9E3C0658483D7A08B6A8023418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f53d86a3a6ebeed344f39b655838353d8502d367fd7ec7a20d12c842817206c9
MD5 ae9a191f6009da92a198bee437da6382
SHA1 d476d5b655dc34ff29d57eaeec9da35b3e6cba96
SHA512 f752270ece6db9188bf9e2f93506903b88b391c099e5e22b6164cf5877833c54a4250da5a953e6c24592c6d1fb89466cc52e5e5a660c4b59cc15b904cdb694bc
TLSH
T10E117DF3C7D585AE891156F06A24AE2BDE1D0A16821C7C1985D4FF2B93F3075E00195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0c976b004982b1fecbeec8c24e924339b055830e7bcf03d10408fed9cbf4ff59
MD5 7b8257618a3f5868b72fced7a2ca174d
SHA1 1029388416050cfe6311440cdded7e9c32d893a9
SHA512 8608baa4af894fe15ca554d6ea81009c496ba502c0fb0baa3dfda374fd517e23a39a69d905d397ac19629a1ef4c743a8ee865f1184396b40370b3735b22d2889
SSDEEP 192:sxZ1aR+WP/fmxsLOKIdpdmHW6+WNGYLzJzO3IgrJ:sxZ1arP/fmxsLODsHbGv9
TLSH
T19322B8116E28697B8CCBD20DBA15BF53E6F9503255951E58E6FC861C04F7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1d75f6e10191ab49993ff46e33278e03230b07321cba69478306f59be69636ef
MD5 2e73ad1b419930ac5aacf7867acf1ec5
SHA1 3b9f9bd5ef4db6d64682701fa46b77beba9722d4
SHA512 565f90739ab08070aa08af4ee9db8813972e5c90e98eee83517abf9be1ab7167c5a044a0b1a9180d228c708b50110c954d3b7d0cd97be0545976dfa126b09044
SSDEEP 192:sxZ1aR+WP/fmxsESKIdpHmHW6+WNGYLd4OO3Ig50J:sxZ1arP/fmxsESDGHbGFa
TLSH
T17122C9126E38697B8CCBD20DBA15BF53E6F9503255911E48A6FCC61C05F7ADE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7da91aa672307e8af8da0e933f123afc666d96858a2735cb98a2285e71d293f0
MD5 8bc01b9a3657c3fa88242eaaddaa1e3e
SHA1 99d59d037a83acefc66a9376b86abb476cc05bc0
SHA512 df6ae3e03e89cf5b553832d96047a68d100d85a3de9ed6a4e65d7a20ccdfbed44c5594caab45b6cad3f19521e766c5520a61238850219b4cffefc955a847d131
SSDEEP 192:sxZ1aR+WP/fmxsESKIdpdmHW6+WNGYLqvzO3Ig50J:sxZ1arP/fmxsESDsHbGma
TLSH
T19622B8126E28697B8CCBD20DBA15BF53E6F9503255951E48B6FCC61C05F7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cb15f3a305b32182e0e9018127e2bfc010dfe9b2f8a5bb4efeccb4589ddb3995
MD5 dbceaf7ea0fc22a35f6ff9e7f04f5f14
SHA1 cae05888f1be753dbe35911be281bfcb1c358687
SHA512 54ec0ae70249c25578839ee1ae1ca301e9217c4ef9e281889363d26fb9678554c5aafdb565d00c1217e62f675274c7b8324c346156dc664deec1ae9a7c07732b
SSDEEP 192:sxZ1aR+WP/fmxsEOKIdpdmHW6+WNGYLzJzO3Ig5eJ:sxZ1arP/fmxsEODsHbGvA
TLSH
T13A22C8116E38697B8CCBD20DBA15BF53E6F9503295951E88B6FC861C05F76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2f5ec37839c99d7e5bb7a6d1e6cdee254669820496e0e19e113215c3ec16d18d
MD5 3cb04150ffa667875bb9d6055627157b
SHA1 81cb7ba180596ce32da66e4c770fc1e0f6d33211
SHA512 cc8d4c277c6b82bdb11ba5f8bacec2adcb97fbfb6c2771adfa03afb1a59f1345ec90d95ae46feb200ad7de45a1481cfbe5f27db1f5fb6a0612cccde44880d73e
SSDEEP 768:LWO6fP1Wvxz3j8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkILlWwJvEro1T:LWO6fP1Wvxz3ju1jaZILIsvP1T
TLSH
T1F0C2F93B240DCB7E4F801A9DAC5A6F977E9802C7AB588D8447FE854C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 a088bb4595209b2addb0e798e9c9cc7d03945dd91470086609de80aa625e5960
MD5 2ad2f2a5c9d2a4be180774ec1d299eee
SHA1 61cf7a1db850b4df0c0a699b2a75deefdc1fee21
SHA512 59ba237ed340ea7e63f7e9b27076d2b3bf290f7f24acf448f773a4be44fd9769d3726951f531b473353ec5b09d12b1b43ceac5753a0ddcbf9a5f751dce685043
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFOuI3KvasrylxIhKq00KuIE:KUAAKteP2OuwKvaCOxuKq0FuH
TLSH
T1C9B1661332BB03437C3E2D4CA3999B26474272633018B52B3BA914765D6AE344DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1cc7aff04111127cd0eed8244cbf7412a46aa6cb05941bc011309c6403f779b9
MD5 49ca8b2662f4b0bcdc43c8e428262429
SHA1 1cac22a43d39543873e2bb7f78658a0389ce3ffb
SHA512 0aa76ecce02ea375bbcb62a522c3692116126e642fa626e287459890c77008f982c3019f83fa6dfee9c4ea815139a899dc00e8f96c1ff7d042318a5b1982d581
SSDEEP 192:ueLsNEitAQpsVem7+3vrAQmiU1TP2n4atb02O2bbh2e/FF0SJr1LMSqGdU8:fsNEF/Vm0524a9DOMMe/7zJraWU8
TLSH
T18B321931A8389C775EF3A245F9473613AFB44167DE892F80D1ED5E1C01EB6AC234AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 81c5d2fbaccf58eabeaaa39c05487027493e16cf6720c906e84b8e2fcfa64f93
MD5 0c271a72b631c2976793a0132c9db437
SHA1 724441f691363c7dded4859331dc5ac1fc71a758
SHA512 fa0aa605b3c1bceaaf2fe3bcfa5de0674dd9d352f94b1cb9eb64340a888072d19bd39c1766f029dcc3ee75f5fef6f1c1eee7e6b31e668af695f39f09e5f7e95b
SSDEEP 384:4FiZcIU6sNM8TUNTUlIld9/Vm0524a9DOMMe/7zJrHWsa+VYhor:4FQR1wgFl2hJO+/fhHWhgus
TLSH
T1E6A26C325D588C7A9DF7AB85FD4B32138EB44067D999AE90E2DC9E0D00EB2AC1307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 621a48254b441bcde1fb93b23df98a4f8fcab22a345ff5efbc3845da2c41aacd
MD5 fccd74c7e03249f0f39ee6f6c9a695ed
SHA1 cb4d1842771b25343a01d0c2d9cb22f2ce9b5587
SHA512 ddb66668811f5c3d73970a1bcdc5eb235e166f3e87ab9e30a8b4c6fad01afad017fc2a68031e96433ee4a65442d3591932653d2fde9019c72fe5878dbc90750c
SSDEEP 192:qON8S6O7+3hQmiUy2qGttb02O2bbh2eQgGEoiU6:qON161UGt9DOMMe2GU6
TLSH
T13A02F9346D686CB74AF2AE45FA8737135FA5113BE9912F80D6E81E0C00D765C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 8ae1c0e8981039d9e71f9c777cb9cddc75281c4dee69c4aca587fc25da2e7758
MD5 5eedd34756b20e351fc61623cd4310f2
SHA1 4615ebbee487704a5e88685247260712034225ce
SHA512 65110e313a024294efaad02b61f9996837d9c4708b6ad3b9cfaae59b4f9e8ed3667e096cb2c5304bcb7634d6c3f551a15318ef0526a1bc4480adb22c88c47c42
SSDEEP 192:ukLsNEpyiQpsVem7+3vrAQmiU1TP2n4atb02O2bbh2e/FF0SJr1LMSqGdqva+4LI:9sNEn/Vm0524a9DOMMe/7zJraWsa+VYy
TLSH
T174625C3168289C7759F3A285F94736139FB4416B9A892F90D2EC5F0D01EF6AC2347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7cea19ba701014a112cb97546212c9f8f3fa47ba31adac0474d783a76a4a1f6f
MD5 9157641b8e576d687e7229cd0e2e7dda
SHA1 fa255a6187422fa3ded49d40b2a553a8a720e1bb
SHA512 6443af2f261f7aaae5953a509845535ead05bb8cd619c00faf42af16113b9e7826d828a1096eb46c5107defe4d48fca4376ce7a993422903cbefcf5f0abbf127
SSDEEP 192:cONV6O7+3MQmiUyQqtttb02O2bbh2e/FF0SJrXcNSqGdU6:cONV6uktt9DOMMe/7zJrEWU6
TLSH
T134121A316828AC775EF3A545F98736139FA5413BEE8A6F81D1DC2E1C01EF66C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4204d04-a0ef-4e6f-b432-c58e9a114ed5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4204d04-a0ef-4e6f-b432-c58e9a114ed5.tmp
Size 18KB
SHA256 129d624ad9c03556b513cc12feddc7e099c6a75e0f5bde184765ac47d18041b1
MD5 d0d87308eec969d597e978e88d94ec68
SHA1 b2a31923a37a5c9434bee212f5a6f42e46aad0e7
SHA512 224574da23cfa11270943b24c9393cee3c528e6666199c669ca667c66a9b6cf267952cad484dc139c6bc749cbe0a1ee86d1dfa3800677c5ceb76cce7de10715b
SSDEEP 384:iZcIhsNEd9/Vm0524a9DOMMe/7zJraWsa+VYhor:Qhzl2hJO+/fhaWhgus
TLSH
T1C5827D716D289CB659F7E246FD8736139FB440679AD96E80D1EC9F0D00EB6AC1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0b6b677-c467-4097-bd4f-f8b08ec01218.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f0b6b677-c467-4097-bd4f-f8b08ec01218.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c3c558ac8e490e299b310ceb6a7143806a8052702ba9b1fd7cb2e53953fc81ed
MD5 7f3e018b1d97c22f9d3936a3c22cf878
SHA1 b8200e9fc6c8c6594483e3c31ce0316aabbc4844
SHA512 6cd02a2b04497cf0e083110e1269fdde7910b4ccdaf13cf57c54acdd48f6a00a4b7c59a1f1f3063346e5b039fe7fd87332d7670c4e872d9fe0caf1525a6db0f6
TLSH
T15F413A5CBAE91118B3B37E1AAFF7A86E447F79272B06D49D10110D4F0A23B00C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download