59ad0b206034047633d7343292097815cdf5acc8f3b0c38d150da0f653e6e5d4

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
de/index.html
Size 2KB
Sample260930-p5mlesff89
SHA256 59ad0b206034047633d7343292097815cdf5acc8f3b0c38d150da0f653e6e5d4
MD5 dad5950f1d033dd1594b375cbd6c20f6
SHA1 e933e375980837328627b0a0fc0e5fabe3f160ad
SHA512 08d00dcdd5c077031d4b207d49868fce6f454b41fe3a3a2b9b12713172915fd425e52a95ad99aec07450295338914e808bce6d48f4e2e145131a6be7e289ed11
TLSH
T1F441651A344CFB24838B47DB90762B29B567D682E3736408FCF782B3DBC9045946B59B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4564	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{AF82B7B3-B4CD-443C-9EA7-60C16FD82613}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 564 wrote to memory of 2092	564	msedge.exe	86
PID 564 wrote to memory of 1840	564	msedge.exe	87
PID 564 wrote to memory of 4564	564	msedge.exe	88
PID 564 wrote to memory of 1840	564	msedge.exe	87
PID 564 wrote to memory of 1840	564	msedge.exe	87
PID 564 wrote to memory of 2516	564	msedge.exe	89
PID 564 wrote to memory of 2516	564	msedge.exe	89
PID 564 wrote to memory of 1060	564	msedge.exe	90
PID 564 wrote to memory of 4480	564	msedge.exe	91
PID 564 wrote to memory of 1060	564	msedge.exe	90
PID 564 wrote to memory of 1060	564	msedge.exe	90
PID 564 wrote to memory of 4480	564	msedge.exe	91
PID 564 wrote to memory of 4480	564	msedge.exe	91
PID 564 wrote to memory of 2308	564	msedge.exe	93
PID 564 wrote to memory of 2308	564	msedge.exe	93
PID 564 wrote to memory of 2308	564	msedge.exe	93
PID 564 wrote to memory of 1328	564	msedge.exe	94
PID 564 wrote to memory of 1328	564	msedge.exe	94
PID 564 wrote to memory of 1328	564	msedge.exe	94
PID 564 wrote to memory of 3928	564	msedge.exe	98
PID 564 wrote to memory of 976	564	msedge.exe	99
PID 564 wrote to memory of 3928	564	msedge.exe	98
PID 564 wrote to memory of 976	564	msedge.exe	99
PID 564 wrote to memory of 1152	564	msedge.exe	101
PID 564 wrote to memory of 4344	564	msedge.exe	110
PID 564 wrote to memory of 1644	564	msedge.exe	111
PID 564 wrote to memory of 4072	564	msedge.exe	112
PID 564 wrote to memory of 4624	564	msedge.exe	121
PID 564 wrote to memory of 4624	564	msedge.exe	121
PID 564 wrote to memory of 2396	564	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\de\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff5052c188,0x7fff5052c194,0x7fff5052c1a0
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,9061536107577066097,1481808266107210736,262144 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,5436324295923519354,6548579189590090015,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,5520631364770762460,13696489309221347997,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,16996019345207364996,9088056407340455620,2097152 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,3897672314484927263,14164934605279679367,2097152 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,15959477210919457494,5939231677575636067,2097152 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,7035109181055346568,17619047394341392324,2097152 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,1302242081414543987,12901638515839451067,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17994533536630763619,12274640106263958797,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,1094324327786685500,14881898118309314829,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,1094324327786685500,14881898118309314829,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,16339144151721686631,2097357298705833579,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,3786301993672621346,2352328334668133610,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,3597133142986454855,15690703310895357441,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,13773549671024175219,16985539711549561688,524288 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5384,i,8818444658594521416,1324696150980895080,262144 --field-trial-handle=2756,i,5571425300663624372,11644448550322045501,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5d425185595de44bc8af97c993a9294ee89f2f4083eb8df955b92ff58b8cc2fe
MD5 473439373544630c6979ffc55fed1a49
SHA1 86727f0143fb65d10fe3d9b4c9cf56b04ed2277e
SHA512 2013b99478288a6219dde309e1ea9c8874ba9d249cca770d3f447cd27f3ede519bbc3afd77a275f51f3be2919efc7a29ff1eab4060378c7c2af830f25df1ed68
TLSH
T153518384954DCBC0F3EA4CB145D9078BFF32358447A77EA632A9DBB95456764C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5912e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5912e2.TMP
Size 2KB
SHA256 76a744d86f6625ab71b4584fa2789843d101e96aecae50aad298bd75d53206f1
MD5 c0e902093b7b6f5b4e7a28f457b9e331
SHA1 5c593e7dec450d89330762dc11609f21b60a9c9a
SHA512 87a9d4049ca0926066183e96a4679302d3e2e8a12a7c6348eb1fe38034e2d14b04c6dec60064df222a7dfcd968ba849f399297bad7b03ad230be92ce3ef2a80d
TLSH
T13C517284964DCBC0F3EA4CB189D9078BFF32358447A77EA632A8CBB95456764C2300D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 814900a01bcc6606d850a3a2ca6704ba4985f151021b601aa0415ec3b7344080
MD5 f3fed7b11e5116f76f653c2341fc7f8a
SHA1 d36410d621107375888400abd426fe4f68dbc2dc
SHA512 b468eecfc159c0a0a26a9f266bde9fe210693c86e55d13b7e192fbbbf1ba8980989e71ea4a0734f0c488cbe6fb322439bb289f00e379d50f9f87f57ddf0c306e
TLSH
T1E31157B3C3D585AE891116F05A28EE2BCE2D0606821C7C1989D4EF2B93E3465E10259B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6e8683247e253466d72892f5a06e38eabc1c0ff75ed20b3c5fa7ee65a3004215
MD5 6d128f09bd4d58b3665c8d725c3e59e9
SHA1 9a1b6620519c7929bb9210c78c2d89f3c0d02ba2
SHA512 267ef8df2adbc8daaa644c34ba8a37bd99a964a29e3f8316434fa241469628d9cb7fc7b06aab960e229dfa4479ae24f508bc16d55d6b6f14cfbcc7c38ed6f8da
SSDEEP 192:sxZuRiW8/fJsuIIdpdGHW6+WNGYYBaDdIgrJ:sxZuz8/fJsu54HbGfi9
TLSH
T17D22A6516E28A57B8CC7E20DBB55BF53E6F9503291D51E58EAFC861C04E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 13a61b8318eb8ec3b2f9c814c858a6ce67f8c3bea2ecad8aefe6d65c2bf5aa46
MD5 cf296806248822a9df251de42992eb15
SHA1 38ea278ec5f2482d2ef8522a9370ba865a8a89a0
SHA512 0e0d73c3ae9f6b4c126ce7dad24002763cb903d7c893c3d0113625a3838e2c7dfc36220d464d6d58b766fca38e12d6f80af79f8e2905f5834162d38005ae8f31
SSDEEP 192:sxZuRiW8/fJsPIIdpHGHW6+WNGYYBcDdIg54J:sxZuz8/fJsP5mHbGfsi
TLSH
T19D22C8516E28657B8CC7E20DBB55BF53E6F9503291911E48AAFCC61C05E76CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1802748f66ac073591e06afad2b8ed721de67a4ca32b95a78a9f4e863610fe0f
MD5 237d1a8f09629d7440e6d0b1c2123aa1
SHA1 5868e71a8c77dd627be57ef58a6662df793351c0
SHA512 529fb1044b16979693c00c7b30fc2b5d05d013ec6472a44ee6afe1f52f6e443fef9f24be2b41186bb61eef4042fbf778552c96d71626bc4c8af6b3e6243bf4ad
SSDEEP 192:sxZuRiW8/fJsPIIdpdGHW6+WNGYYBWDdIg54J:sxZuz8/fJsP54HbGf2i
TLSH
T12622C751AE28657B8CC7E20DBB55BF53E6F9503291911E48EAFCC61C04E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 45493d040af9fd7355ce2ecd7c8083791e5f0232a33a92178d584f2b5739df37
MD5 5d0c29af7ad04aa8fe3695702e007d49
SHA1 bd58a3d80222d7fd3f4358aea9db9cd809be289c
SHA512 240bce41956d626b50c93ed55f1ce769dfbc8f851eba099645522cc673cbcda331de2a548e7c68adf422bc664101414077f52863657ab9df8862d590f24b8db5
SSDEEP 192:sxZuRiW8/fJsHIIdpdGHW6+WNGYYBaDdIg5SJ:sxZuz8/fJsH54HbGfi4
TLSH
T18022B751AE28657B8CCBE20DBB55BF53D6F9503291D11E58EAFC861C04E76CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2d1ae3aa2e1d4d5039d867b4ae8149c43b60ad15e6d576f585fb49e8ae9da320
MD5 3bba290aae5ba0d17eb5acd8485334eb
SHA1 09d1776dd075e4c1886cd4dc4b10756d84f6d3f5
SHA512 bb49e43eea87d11924c161489d8956248e538d2baf5ee0969eb2669aed9d33bd24bff5bb40ea697173a5b84cb8374811cd9801f80211e26ce32ae96c34558e2b
SSDEEP 768:L4yYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvX0ropJfb:L4yYR7jWv3NpBu1ja/CL8OXfb
TLSH
T1D1C2E93B640DCB7E4FC01A9DDC5A6F9B7E9802C7A6548D4047FA984C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85969742cfc63aa0bca9b0908fb3488be444093d5ffcebf6fc9eb11b17199354
MD5 25891d0a586c01e99875ad9233064f44
SHA1 2d95cbdb9e288653ef8e02d6334ba14a19417ab6
SHA512 a70e7f3e595ea916db95b9634bfe4fcf8a0c7d26dc66ed1cf35453596d57cd97327e34d2fac3779b3020541f592e710ed771e6ca9dd969816f983b32cfdf4c1a
SSDEEP 96:KhrANJD1l1GBqIEh1KMEET1IeyMKHqeO/KKYU7Xm:GrANJD1lkBqFhHEETSDDxN
TLSH
T184911540317B060838BE2D9980B7972E52417273B05CEABBFFBD40614E6AE485DFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59acd0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59acd0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 14c14487651abfe7452f06982d30715a948e2b6bbb3098196be109fdb8277eac
MD5 0220578b895b7c475e095d1f2aa726cd
SHA1 0ac72bd4b84f4839ca07cdf88d4dc63056aab0c6
SHA512 78d79eaf46660bc207e423cce92d41431c2d00d98aa960722f351067128d1acd8f49461600ab666fdb4130e06ac7c5acab1c08f073c76bfe16d4b58c11683b82
SSDEEP 384:5ZcIhsN7mrWY3iAE/QX5+DtCM8l/+Xv8rjmGgtgOIwZOy1WoO:RhgY3AokDY/u0rqGgXsdt
TLSH
T163828D3298B85CB75EE7A185B58A31139FB45427E6C86FC0D5FC5B1C01EA6EA030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dec24aaa260bc1546a7d46cf67ad0e6ca7090dda946a234cb4c84af80d91996c
MD5 8ce1373d41c7cc66d9bd80995a3bec82
SHA1 a96a44b05c508c9434af30bb2cc4dd45f565e3ef
SHA512 1a9d49d9ed87637c09f879c3073b8d9cf19c3cf13df2fda13bfaadcd48a11d6d5cb9cb927ed291181f4691ce4fb99b95fec31a864e3ce59d10b4940917e25a48
SSDEEP 384:liFiZcIvzsNF8TUNTUlIl/rWY3iAE/QX5+DtCM8l/+Xv8rbSGgtgOIwZOy1WoO:sFQLIwgoY3AokDY/u0reGgXsdt
TLSH
T19AA27C338CE89C7B6EF79685B58A3213DFB41067D585ABD0E6EC5A1C01A71E9030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5959f537b1eb587b712aca782b7922b8f97a751d72152def3583826bb1861c1f
MD5 fd2c52f97a2905cef815ddf3960f56be
SHA1 20e33341601e94dd24df75b41dff7b5159407641
SHA512 16350070352240cdbdd8ebc0950a755f998a34056bad3b06c6de8eca5bde6669e06b2835bda16097e12035d3acd2ba36f1f0514626566e60574467e00aaaf6f8
SSDEEP 192:EONq6nnHGQmiUyI5IPQYcX5hQDP1C8jzorqo/qMchTp4U6:EONq6nCIQNX5+DtCM8l/ScU6
TLSH
T1FE02DB35BCB87CBB8EF36D46B48636139F95212BE5952B80DAF85E1C00D765C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e9470036bd15b70d92fc27765d2e77f34d94f7a17d138fe178e38e2836b8d107
MD5 c5696dd981c22af5c8d2b49191c2f9d1
SHA1 d1ad1a21092e5cd76c644797cf73399aeb87a327
SHA512 3cfbf4ce40e025ce07bb3b2c8b54abe3912713a808c0357546076c52509e5bbea7e8be2f5c94ab8fb4dfec9e973f36d5821b89a8c87cef64bf4d2d16d2049052
SSDEEP 384:rZcIhsN7/rWY3iAE/QX5+DtCM8l/+Xv8rjmGgtgOIwZOy1WoO:zhPY3AokDY/u0rqGgXsdt
TLSH
T136828D3298B85CB75EE7A185B58A31139FB45027E6C96FC0D5FC5B1C01EA6EA030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0fe3d92bf9834f1c5df158140cff89d5c3a7eb92d209cdd00aa507013084921d
MD5 97e54cd1aae1b7c74f15de2e277e9ff8
SHA1 b97ba1404feb3cfaf799492d210925927ead27ba
SHA512 83a19dd91bc20f8f2054e1552e983a6dad207f099d69a5ed143c9329c220bc3879df7c1d8f8488b257455a7dde9da4464e3a119ffa73845e06635101874e7bff
SSDEEP 192:EONm6nnHiQmiUyIzIPdYcX5hQDP1C8jzorqo/+XEcFfErlg3h7q5gU6:EONm6n+udNX5+DtCM8l/+Xv8raGgU6
TLSH
T16F121C31B8A8AC6B5ED36595748731139EA51127EA487BC0D6FC1E1C01EF6AC130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 846bc90bd61920b773797676d1bad58cf95acf25e6b46a8e045ffb60ddf827d8
MD5 47b788457d6a9ae453b131c19b0db616
SHA1 83a6990483a09e441eb0bc6d93b5d09803231fbd
SHA512 8d3017888295e7dc78a2228bd584de6de3576f3579fe8bab3de2d25aed11b727d5b0bd12032d804f59fccc49b4a52b49b1c508382e0709c5cf72a260b68947fc
TLSH
T1B241F95CAAFA1108B3776E5AABF6A96D887F79772F06846E00110E4F4666B00C861733
MD5 SHA1 SHA512 TLSH

Submit Download