3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-527357-bp7t3a.html
Size 171B
Sample261001-pmwrdaxtcz
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4828	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{789819A6-3847-4EBF-9810-E34890615E1D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe
2068	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2068 wrote to memory of 2132	2068	msedge.exe	87
PID 2068 wrote to memory of 4828	2068	msedge.exe	89
PID 2068 wrote to memory of 4660	2068	msedge.exe	90
PID 2068 wrote to memory of 4660	2068	msedge.exe	90
PID 2068 wrote to memory of 4660	2068	msedge.exe	90
PID 2068 wrote to memory of 1036	2068	msedge.exe	91
PID 2068 wrote to memory of 1036	2068	msedge.exe	91
PID 2068 wrote to memory of 2920	2068	msedge.exe	92
PID 2068 wrote to memory of 4360	2068	msedge.exe	93
PID 2068 wrote to memory of 2920	2068	msedge.exe	92
PID 2068 wrote to memory of 2920	2068	msedge.exe	92
PID 2068 wrote to memory of 4360	2068	msedge.exe	93
PID 2068 wrote to memory of 4360	2068	msedge.exe	93
PID 2068 wrote to memory of 3164	2068	msedge.exe	94
PID 2068 wrote to memory of 3164	2068	msedge.exe	94
PID 2068 wrote to memory of 3764	2068	msedge.exe	95
PID 2068 wrote to memory of 3164	2068	msedge.exe	94
PID 2068 wrote to memory of 3764	2068	msedge.exe	95
PID 2068 wrote to memory of 3764	2068	msedge.exe	95
PID 2068 wrote to memory of 4836	2068	msedge.exe	101
PID 2068 wrote to memory of 3868	2068	msedge.exe	102
PID 2068 wrote to memory of 4836	2068	msedge.exe	101
PID 2068 wrote to memory of 3868	2068	msedge.exe	102
PID 2068 wrote to memory of 2688	2068	msedge.exe	106
PID 2068 wrote to memory of 3916	2068	msedge.exe	115
PID 2068 wrote to memory of 3132	2068	msedge.exe	116
PID 2068 wrote to memory of 540	2068	msedge.exe	117
PID 2068 wrote to memory of 100	2068	msedge.exe	124
PID 2068 wrote to memory of 100	2068	msedge.exe	124
PID 2068 wrote to memory of 2388	2068	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-527357-bp7t3a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffdefc0c188,0x7ffdefc0c194,0x7ffdefc0c1a0
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,10622454590788896467,6672340620033009236,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,763007608532181640,11969100430021151500,262144 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,17199027912889847323,7946669650809372204,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16690076766181790439,17790566361481388666,2097152 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,3047882023846503129,7742635701931008169,2097152 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,4411064184465981105,10592528376849547075,2097152 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,16799692951409355071,7648858849830435005,2097152 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,11406439565787211250,2365611773457964092,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14684050564168494721,8376768388973005044,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12201655709279710930,5873719006117640543,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12201655709279710930,5873719006117640543,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,17865750261821635176,5643165522296694688,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,17891092973689753383,2565396522939929399,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,1114962915459945593,513036115242461957,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2188,i,8159227930572334453,17048275797462020438,524288 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,16004704773460627387,14312120046871603272,262144 --field-trial-handle=2224,i,1229642389410086741,348488168872657703,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 33ba711cd1842eaa24ef8d8b774abfb7c4e610c2545e1a0356ee78041541f16f
MD5 6df8accac2bccc55116539f984310d0e
SHA1 c6e3216493b5e22ba492115d42a6f9826cbcc556
SHA512 764f957766ab426373042c13fe2ae8478a7af865ffd5f2fe415c18a2842e137ab9c308ff1a5d8be3645693d2b5f956243422b1f8346c75c7829b228e2194b4f8
TLSH
T1EE6170805551E9D1FBD8707092C53183FE774A86CC839E3A12A4DBBA4A0A7D41F490CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58aa35.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58aa35.TMP
Size 3KB
SHA256 18757c98bedf3fbff62230dcdf3d48a4129bcad3ff12ee50b569c095ec284813
MD5 ab521e1756c879ed488625089f547875
SHA1 b66e0bbb560bd06e1f9fb991c38046943c985b86
SHA512 abe6f44924a899e633c573264e3c3897cada0427509146445dea537eb9279c8f16f6fa093299802fae4ca3bf2a47dabb231e0ee0d19428a35b3659011f327bb5
TLSH
T1016170809551E9D1FBD8747092853187FD774A86CC839E3A12A8DBAA4A0A7D41F490CF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 309b058b9cd99a43730e8113d3d3d6cbe80ccc9da2190d648d86fd9ef0fb0be9
MD5 6630dc8302fa3d9db76681c81127e610
SHA1 feb4f6910aa3c0b3c2db726e1ede29d156234edc
SHA512 859a6e02216ceb2f74787ae1f4a7611c1c59b5c28cacb80b9ad96e398923e37461b1d21ae39a098b4a8b5fcb0fdbaafb70df706cce76a5884c7aac93cfabefb9
TLSH
T1D8117DF3C7D595AE890516F05A28EE1BCE1D0606421C7C19D9D4EF6B93E3075E00159B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 08c91ce71ca02f71cd6fb3cf2c5038897499264fd3a862ed39092faece015096
MD5 e1c362c93b4a066d8992aef69f711989
SHA1 2dc02ccada5dabef945016924869ee546a8e6bad
SHA512 9941039bc5b5558be45a5e1e02aeb6b0729aacb6555f7e22d7dc1dc4685a8397f4874316d627d76aadc5e7fac0974f03ac4b10e66c37baf070d217ba6ef970b8
SSDEEP 192:sxZMRdWY/fmsRTPUIdpdhHW6+WNGYapYnxIgrJ:sxZM2Y/fmsRTVHHbGQ9
TLSH
T1F322A5126E38A97B8CC7D21DBA25BF53E6F9603295D41E48EAFC851C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0f8ef2924b404dff2b150ac90c1490e9eca3b20a02f6a4e5b0039253aa96bc31
MD5 4af81fca99841b41df60faaea63053b2
SHA1 18147ea4ca349e42e971bda66444f25e4e74a6b5
SHA512 69a5bd50841a9b4f3095b92ee88839a9e329074b77ed109e4352856744738abdf5f05a04ff393078b3d8b1ce4b2f72d6595d214076118f5833ca8c7a3e6113d1
SSDEEP 192:sxZMRdWY/fmsM1PUIdpHhHW6+WNGYap6nxIg5UJ:sxZM2Y/fmsM1VBHbG6e
TLSH
T1C222B7526E38A97B8CC7E21DBA15BF53E6F9603251941E48AAFCC61C05F76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5b45be0a8973645c88d2948a46b7e724bbdd6942441367e180ef4ef33daf4aef
MD5 bed17220e45377adb1245bb71fab449f
SHA1 d5fe58bb0fbe0c3243b296791dd196fa0ef0d7d1
SHA512 8dfeb49f4d16a5a5830c46e2d76ea076446380918fc3fe1e8c9e9729f782410f14ad9162602e49cf153bfc1065a3a161a3da32221163cd896b2cf312e0da9476
SSDEEP 192:sxZMRdWY/fmsM1PUIdpdhHW6+WNGYapCnxIg5UJ:sxZM2Y/fmsM1VHHbGae
TLSH
T12A22A6526E28A97B8CC7E20DBA557F53E6F9603291941E48AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ee6ffe897b9fdf5a370a2bd24fc16137cca8f869e08828a8c4131386e56bcf3b
MD5 e0850d8b93e7a6347121986f1384e220
SHA1 9b2c9d34b2f738611a75e6732f422c4f702e106b
SHA512 4f7d183b4c093783fca9b04b89a1b225c97e2f1e0594fe967660604383cb3c2a5adfedb491480451b15483512637ccf6fa39c9d5fcc351d84866b7eb57d20c95
SSDEEP 192:sxZMRdWY/fmsMTPUIdpdhHW6+WNGYapYnxIg5+J:sxZM2Y/fmsMTVHHbGQ0
TLSH
T18922A5126E38A97B8CC7D21DBA65BF53E6F9603291D41E48AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bc5f92dd17f6ce8daad8c20186aed387582aef2b1f617ebee8ba49b5c9734ca7
MD5 968c31e56a4bfb0e63d373e95f59022c
SHA1 03c396e6a33ac40c2f6cd7d7aed5496cc51fc028
SHA512 1883c2b6918750436e73f2d15aa8abbac0a08719c90567910e15d0c8e05eda01b9ca3f99ae850aee7b22971ed4d1edcd3c3083965d57d533f45901cc117b27d1
SSDEEP 768:qyWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Vro4VfeWmRQ:qyWPcLKWvKeEeu1jaClLiF7u4VWWmRQ
TLSH
T113C2EA2B640CCB7E5FC01E9DDC5A6FA77E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bf56769a65f42c119eaefa8733d21698119d2b997775e677f273dc761a136187
MD5 211600178a3cd3c12a5a7589156fbb23
SHA1 485a968b73bbb3219b77ee414e858115eaca12cf
SHA512 37cebdc4d811432673c09ec68ae9d5101a7a3e9567870b9c16746392af1ae29cced5e22c67f0e05437a9767d2fb7be9ec3dd831dcf2377ebc2c9454a3a2dc7c2
SSDEEP 96:KkRMNhb/LQv3uDJZQKRFJjQNpZeDR9iG0KHq076KYwyh:yPXSxh
TLSH
T1C2919641707B5240387F3E8C82A48A9A464231F37169EA2BBBBD41E65E2FE055DFD5C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7ce1322-837a-4dc6-b50d-f2b57981ee4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f7ce1322-837a-4dc6-b50d-f2b57981ee4f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a4e26172e604fe0b75bcf3dd159afcde556b5b1eb30013af49a0df0ede6cfab1
MD5 e66da8074ed7baa851a3152e8ad137cb
SHA1 30de5838bc00e57b6b88ebbda0811ce551c77a06
SHA512 63b61fbe1796e7203e23064b49b05376fc8b53b3275dfac5644c7f5e67feef42097c013c7c02e1ead2ddfe62378841d6232ac87bc26e42c02ac21fa5ea682c9c
SSDEEP 384:uZcIhsN4VtNN1wquRzIGm1nd/HPiatgOIwZOysLSoP:MhDIdendHiaXsnmg
TLSH
T17E827C329C78AC77ADF7A544F5877A035FB4A127D6C86B90D4DD6B1D00EB2A8030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 6a1d88b346c75468d899a634160f3f1375b80c4158792e0c2a3e2d34e30ea85c
MD5 cf1b1db48dd19d0855a08715950d6024
SHA1 89b610a50aac551a815686dee08fcc741f44990e
SHA512 5b2e87426e9c6e1f681692a889ed2ea50faaf326942251184d786c0d5ada3768afb81e245515ac50a46d19d34f0e08243cf235010042f78fef4fa1b587ae1e73
SSDEEP 384:kiFiZcInzsNo8TUNTUlIlYtNN1wquRzIGm1nd/HMZiatgOIwZOysLSoP:/FQzVwguIdendEZiaXsnmg
TLSH
T1BAA27C739CB8DD7BADF79A44FA8636039FB49167C6C4AB90E6C85A1D00DB198030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cdf03196031d93ca7739497e69883d51724ac426803b31d6a0a066d59ed21d7d
MD5 a682abdc26ddae5e56e62a565e0a6b32
SHA1 f842d4e6f5b7bd23726304960980fd2e51bf1b3e
SHA512 bd4e697d66e032674397095be73d78ea6c17d4cb956a299afb1f3a959f23d1cb0c0d21f2ab10614407e67ae3b043a79553efac887b69de69d87b01b8ea32558f
SSDEEP 192:aONH6IE7QmiUyHgWTPuIGm1ZFh0C7sStU6:aONH6Dth0PuIGm1nnsaU6
TLSH
T13202E835EC78BC77DEB3AD09F4877A236EA5212BEA912F84D9D81A1D00D724C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 59c59a729d1f79e0b34a9f898696ae4c7f1ac4290f9f638ff6261a8492ccd5d7
MD5 b73512fb200060b5eb1c309d70f06616
SHA1 d6f6d49a24bdb812e85dd126312b20ec78a6ae52
SHA512 efdd7fb0ac0b0dd48e47f548ceb55aff79cd23ac981f380012a6dac5f78ff73429673550e04656afc2b2c3a33f6d59ae3325eddc1482e9861d6859e117aa0eaf
SSDEEP 192:aONp6IESQmiUyEgWTjuIGm1ZFhfZ95Fk27HvqxU6:aONp6DOc0juIGm1nd/HdHaU6
TLSH
T179121A36A878BC7B9EA3A844F48339235EA55227DBC86F90D5DC2A1C01EF25C530B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 26ba155635413ff47e10073a793c8347ccd98f2621d60b121af643779f20fb85
MD5 b02e8dd460d2223a9d7ce01f92556be5
SHA1 212fae796c3e5793d1fbbf60cda3db71da895bed
SHA512 57820971487a595a24140c1f8a18f4f9b58bf540e0ecbb7442bc396cd277b6ff87e449eab21c33c36e102d5fb1bdcc2a888e1509c5668d4f1b881802104d8f20
SSDEEP 384:uZcIhsN4YtNN1wquRzIGm1nd/HPiatgOIwZOysLSoP:Mh4IdendHiaXsnmg
TLSH
T151828C329C78AC77ADF7A444F58676035FB4A127D6C86F90D4DD5B1D00DB298030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d6cdc9fde624b22da99052ba26420c1f2bdae80c1e9d489459f4863a6d9d823c
MD5 5ae49adb89e666a500d76f2003edc2b6
SHA1 bfe1bd2c65046e94c1fe66189576792cdef27e00
SHA512 ba81031ef8ba3f6e7373761b78e0fc8f134a53aa8a3ddb3b45f07f4b04076ccfe840895dc9782d99d75ee10a2ac4bf381f9fed3e627591deba8fb0de83f0ceb0
TLSH
T1AF41F859A6F91148B3B76F1A9FF7A86D887EB9672F4AD19E00010D4F0A22B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download