fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 615B
Sample260930-w2xesaybmd
SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
MD5 7df3d7cf3358af3f470ac7229387ef94
SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
TLSH
T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4132	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{5285F4E9-8D26-4D6D-A6DE-482622FF1625}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5072	msedge.exe
5072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3608 wrote to memory of 768	3608	msedge.exe	86
PID 3608 wrote to memory of 4132	3608	msedge.exe	87
PID 3608 wrote to memory of 4280	3608	msedge.exe	88
PID 3608 wrote to memory of 4280	3608	msedge.exe	88
PID 3608 wrote to memory of 4280	3608	msedge.exe	88
PID 3608 wrote to memory of 692	3608	msedge.exe	89
PID 3608 wrote to memory of 692	3608	msedge.exe	89
PID 3608 wrote to memory of 4432	3608	msedge.exe	90
PID 3608 wrote to memory of 4432	3608	msedge.exe	90
PID 3608 wrote to memory of 4432	3608	msedge.exe	90
PID 3608 wrote to memory of 4824	3608	msedge.exe	91
PID 3608 wrote to memory of 4824	3608	msedge.exe	91
PID 3608 wrote to memory of 4824	3608	msedge.exe	91
PID 3608 wrote to memory of 3932	3608	msedge.exe	92
PID 3608 wrote to memory of 3932	3608	msedge.exe	92
PID 3608 wrote to memory of 4064	3608	msedge.exe	93
PID 3608 wrote to memory of 3932	3608	msedge.exe	92
PID 3608 wrote to memory of 4064	3608	msedge.exe	93
PID 3608 wrote to memory of 4064	3608	msedge.exe	93
PID 3608 wrote to memory of 4816	3608	msedge.exe	102
PID 3608 wrote to memory of 3156	3608	msedge.exe	103
PID 3608 wrote to memory of 4816	3608	msedge.exe	102
PID 3608 wrote to memory of 3156	3608	msedge.exe	103
PID 3608 wrote to memory of 4060	3608	msedge.exe	106
PID 3608 wrote to memory of 4752	3608	msedge.exe	119
PID 3608 wrote to memory of 1272	3608	msedge.exe	120
PID 3608 wrote to memory of 3600	3608	msedge.exe	121
PID 3608 wrote to memory of 4372	3608	msedge.exe	124
PID 3608 wrote to memory of 4372	3608	msedge.exe	124
PID 3608 wrote to memory of 5072	3608	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x29c,0x7ff84a39c188,0x7ff84a39c194,0x7ff84a39c1a0
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,3078282290773829212,3638004867173591094,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,9758143184921217247,15223301303564848687,262144 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,16764154195698445717,12485256717626670198,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,621129457747767042,7190105050197206290,2097152 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,10643042680571446098,16913695422576329239,2097152 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,18154270706117780744,3045664738393730489,2097152 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,11456908092691684029,11537286087523033992,2097152 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,16375084651555043161,1008980001676697263,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11155849241927308272,10281321543502750735,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,9768790874618100197,17862863293254022580,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,9768790874618100197,17862863293254022580,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,15222335325088287270,11200744512172641547,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,6168608356693498087,17108751362025266496,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,14534446972722780817,13591469739856692237,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,1426382061743069135,9896932722767244408,524288 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,13397420453396969694,14920715632251898331,262144 --field-trial-handle=2372,i,9077350884640287682,15681476911063962086,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 aec8ff9f4a5926a5c26fc7d6e6067a2944428d73345fc2dfa1c2bc72a9ada97e
MD5 0520197f2fe6a6394c436868885a4fc7
SHA1 25e5aa8ee423360c367490375af46bf89a4a1add
SHA512 57b4e1e13d10941fccc70f7f4a40a200214ed3364a042c21899f0de7f1cd8b166663f3dad9ae0935efe84ea2850990ec38cb0240590eb771e75c798e72056b5e
TLSH
T1A951D78D92702354D7AD7073B6E51183FA7BB9B167935F523095C9B88B4A374B10903F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fdc4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fdc4.TMP
Size 2KB
SHA256 2ed79ef29c409d32fc2804a35f335aad34e9c1e23d7ca7217996a0fec1ad954b
MD5 57b52a8663990294790931238373e2a8
SHA1 cab652f1f783f7b605a1adc55689aa8ecdf9fcd0
SHA512 238b7090e549b6a51971b1f5e3d189018f06b5d1bab15fbaef96da46d42515cf8206ae79a0dee08b412cacf8c25be9882f0a0f604143e9e8effdaa6f7d0c6f95
TLSH
T1B651E78D96702350D7AD7033B6E11183FA7BB9B167935F523096C9B88B4A374B10803F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e315933e26cce5539ecd682c84e6b8fc4c3797db5bdab7e4c5822d87b78b7127
MD5 97653a987dfe8b347ce81f44d81dd9c0
SHA1 4510dccf424c8e1d1bcf56902f831bb8767b18dd
SHA512 5c88124c7fc0bed1a1cfa52c791ea3a7e3ae77e63057b55931d609aecc68dd01e1b616368bee3a66ce76252f2d4218cc0c311bcf5a9f37e0e296230f6112b6a4
TLSH
T11B117AB3C3D585AE890116F05A28EE2BCE2D0A06421C7D1989D4EF2BA3F3475E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

eeb53d39-c87a-4241-8426-5302e6f8a3d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eeb53d39-c87a-4241-8426-5302e6f8a3d7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 94f550c91843bcaa4208372cf148b36db6ed1f47293c75c18812b09f9719d134
MD5 d26401d7d6206e6bcbb212aba0eaf8f1
SHA1 40ce026ddfe7192ed57a8d415272cd2b82ad7cab
SHA512 104fd8d8b8777a687ea9360ea09106ad01920a95757b0cfc30378cd05ec329c06327843b33d709ea1e2ada200e7ebf6c1e931622085248b109a46865c92fc6c4
SSDEEP 192:sxZqRxWt/fSs1QIdpdaHW6+WNGYrbieIgrJ:sxZqSt/fSs1xsHbGu9
TLSH
T1AA12A7126E28A57B8CCBD20DBB55BF13D6F9503291D41E58EAFC861C05E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ba53839384833b5e5cc757de58d5ccc49d37dd31d4236082be7caaaebc2b7b1d
MD5 f51762fec07fee1482f047dbef7eb307
SHA1 93c12a64fbd8d4aaee167a4edbf60468775ec7ed
SHA512 49deaf81b7ea4308648bed608eca966043d4ece2eaf932141f8e3064db9bcc1ff9049daef1179bbbb9b119340226af53397a853bc537d9b51a020704d0d8e81d
SSDEEP 192:sxZqRxWt/fSs1QIdpHaHW6+WNGYr0ieIg5dJ:sxZqSt/fSs1x6HbGZN
TLSH
T18E22B9526E68A97B9CCBD20DBB557F13D6F9503251D01E48A6FC861C05E7ADE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6983baa3aa68742ac3add8f90ad9410e901d5c96a77c8f4bf5a1648550e11f20
MD5 790ec9c1ad4c2c39f93675895721c095
SHA1 ed95df26bd77f46489166c51ddf704e406f1b65c
SHA512 2402343a3f21e9db498bc17614ce2759b30a2abfd13c59f5a0c1a89c71cdcac910b03a24500742921a753726dccbbf5153c2610461839c87f52f689bc19cab57
SSDEEP 192:sxZqRxWt/fSsyQIdpdaHW6+WNGYrbieIg5/J:sxZqSt/fSsyxsHbGuL
TLSH
T1D422A7126E68A57B8CCBD20DBB55BF13D6F9503291D41E48AAFC861C05E7ADE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 245483651dd312f7f2222038d75ea10e3631a0e6fbd1ad327045c905aa56f922
MD5 28e8f01e78a79907a04d31f56b18d023
SHA1 b60a1e3c813ec9deeac7a45a542d88f51a96f42c
SHA512 d8a64181e8f07aa848b61a1f70bd2cad1de8a854557f6a5d50c38a85a8f0c6068a27e89798b43ea87351b759220ad9b0f74be5a8bf4b2634d4b7ef9e03432b3e
SSDEEP 192:sxZqRxWt/fSs1QIdpdaHW6+WNGYrfieIg5dJ:sxZqSt/fSs1xsHbGwN
TLSH
T18A22C9126E68A97B9CCBD20DBB557F13D6F9503251D11E48A6FC861C05E7ADE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d74e56ba3612e38f5ce3808d78de564f3303481cef71994e606b7adf507be483
MD5 e8e60cecd394caa2967aa813b8593546
SHA1 39bfcddcb5a81c0891b14db64d97738770d4e5cc
SHA512 ad36045ea7aad971cf6b7a5805318f5dd540f222230b93ebf6a18054de1454e21b33f0045675051f7a4ca6493b749cd3f75f1443a6dd276ad40150efdbf2770a
SSDEEP 768:FCy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb2roR8u:FCy4J/DWvbtBhu1jajiLm0bNmu
TLSH
T13CC20B3B684CCA7E4FC00A9DED5E6FD73E9802C7A6948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ef5727e5d1b136abd8d811ad8ffe03107cab5994654e24145d5e1aefcbe59346
MD5 667040bb5c265956554764345152c785
SHA1 5261fb12cb86a23fca53cdf7819c0cf54b71efdf
SHA512 54be28197ea420b98d96400d5d4a18e92b753069e47b934de02286f65df546779298815d6a44fdda6fe908c2c3bfa4d530cdf3346833ff52b14be46f0b800190
SSDEEP 96:KIDCKs0+u/+KEUqed2Ku8BycK7yCe7aHbJhh+bxwl57+KBL5F+NT7Y1e:E5xdhxfjW
TLSH
T11AE1E45231B7060038BD258C8175875E528132737059FE6FBFBD44A59E2BE489EFE8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599968.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599968.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8d06e3c5a907cf31ca9b43eaeb8e9143c1ad542b9ae215bb7a793eb83b953b8b
MD5 521efd5e904d6c4d18ab67f7c1d38d3e
SHA1 846e4c8534859ee744755c19b3a0fd45d53af3be
SHA512 4f6af40e086f79f62e0d35bda0e980454ab9ddcdf606b2b6b011ca373e7743882390d559d175cb16c22f3e47417e80ade37d142ef657dc3fd998cecd1b415ab2
SSDEEP 384:MZcIhsNDlx0Z+BAHX58EAOrL6tgOIwZOylToY:ahjQeaDOrL6XsQj
TLSH
T1AD827E32A9B8AD761CFB9144F54732039FB85027D7C5AB94C5ECAB1D00D96AD130BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 59cb06d0d1166a8aa729b195cb8be6862360d877997fa688ead84da9c8eb9569
MD5 bc16bdcc51b9d6754f69589f1afbbef7
SHA1 d28736d95e8b8643b6ad1c41b5a9e23fa339db2c
SHA512 0b97d2ce6d7d5be02538705bdd72b44def93fa75e6cb092ac319ecf04d48772121d1c40bc823e703c432025f9095bec7b038fbbe99978503d5a5dd20f801b5be
SSDEEP 192:1ONw6wlDgQmiUyydW4X58gZAOKmyDlKZUU6:1ONw6kgLW4X58EAOtyZU6
TLSH
T15C02DA39B9B87C7B9EF26D09F58727139FA4102BEA516F44CAE81A1D00D779C2307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dedc388983cb0ea02cc8daf8a35fa4c223cd6262cd79947206428a7826b16832
MD5 24c353313f1aac350541b24b40aa4f0e
SHA1 1d1839c9a74a6f79a92b1d52dcb5d9f81e3f6d46
SHA512 8b946c14da749a1b32b1813bdcf70af1914b69c2256ef8f2ef9db09389f3b121e239ed7bbc416abdb266a0dfbf80b7a7531d9286c7090f832a79ea0a5bdf9b06
SSDEEP 384:biFiZcIMzsNd8TUNTUlIlcx0Z+BAHX58EAOrq6tgOIwZOylToY:2FQwUwgXQeaDOrq6XsQj
TLSH
T14FA26C3399E8DD7B6DFA9644F54A3203CFB84067D6C5EA90D2DC9E1D009A2ED130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d81e1784295207f82a9d5022a26dc5fb3beac76f8f1194bc09ffc9905f0eeef1
MD5 7f90d2134b77d8bf46b7a1874cab6ecb
SHA1 83a460eb46b67817989a11ba2ec902ad1cc55a98
SHA512 290e3c9c987e661679eaa99996e465d82427072729c63eef3036c11dfd6c9ac320e2ff59f22a7ef9a04096b17993299a7f3d9b62f4e8121f71e2c05f34bbc685
SSDEEP 384:XZcIhsNDcx0Z+BAHX58EAOrL6tgOIwZOylToY:fh8QeaDOrL6XsQj
TLSH
T159827E32A9B8AD761CFBA144F54632039FB8502BD7C5AF94C5ECAB1D00D96AD1307D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 623af21e0b5fcabfd3a08d699ba9ef07bbb680d1b65b1ec1f51410cee6ccf5b7
MD5 74f4249fc4faac95ecb32d7e763895eb
SHA1 897a02577a163cf8554a8e608d0ee159cb282199
SHA512 f9534013e883ea992997667fcc3f3b6052c33063383c79ae7b070c18b657cb5eeba014f0a5d580c17c455c4d3f928485f55eeb122a4ffbf15b52b8e9ec6689dc
SSDEEP 192:1ONe6wlDNQmiUy+dg4X58gZAOK6zveMqYU6:1ONe6kL9g4X58EAOry6U6
TLSH
T174120935B9A8FC3B5DE2A544F08731039FA95127EB85AF90C6EC2A1C01DE2AC130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb04b026-dd56-4568-b907-d987fb760fbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bb04b026-dd56-4568-b907-d987fb760fbd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a61be0fb58ce7e777ea2c7868177225f8f955d80d5677165a5aee607bb447374
MD5 d59681dd5cc4cebe6167d908ffdb9bea
SHA1 93127cec9093410ba14afbfb1c772402f78c58d4
SHA512 1092c7b4eeef0c9917a3a622ec6723cad7b6e555978a12648867b7ea0e7344ed1508e5404cc11708de26851ef0141921ffdcff8c894818f6bf3ece968aaa5c03
TLSH
T119411858B6FD1148B3B76B5A9BF7586D447EBC773E06945D00110D4E0A26B01C9A2737
MD5 SHA1 SHA512 TLSH

Submit Download