29feaf747df1c3a51c2754ef2c155b7036b927a18a28da8468dec67b1f6bd8f9

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 293KB
Sample260623-g2fdyaa16w
SHA256 29feaf747df1c3a51c2754ef2c155b7036b927a18a28da8468dec67b1f6bd8f9
MD5 f40777cb7775d96026de8ee9d5389096
SHA1 877ee1cf60abab6ffb93a0b1b9a14b299a7979b5
SHA512 fedfe854d2e0c34d9f2e42983c751415703c6dc1b25aefd3a640f99b243d3d65c1768ce46a5a4cf37aac7886b3f90c69a2bc1e1a040fb071203c69e45c701596
SSDEEP 3072:NRRygVhRmquE4jmfyCUtzxMd55bZDT2BWPu+nBo42g6NaAL1D:NRRygVhRmquE4jmf4tzx7D
TLSH
T1D654A6E1D2C871E5920BCBF4E525FB76B06A30BEAF5FE25581E80955A3C1D9C884EC1C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4084	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266690725645893"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{5C7D95AA-98FE-4291-96B6-F22B288EB525}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 552 wrote to memory of 3396	552	msedge.exe	86
PID 552 wrote to memory of 4084	552	msedge.exe	87
PID 552 wrote to memory of 1392	552	msedge.exe	88
PID 552 wrote to memory of 1392	552	msedge.exe	88
PID 552 wrote to memory of 1392	552	msedge.exe	88
PID 552 wrote to memory of 5040	552	msedge.exe	89
PID 552 wrote to memory of 5040	552	msedge.exe	89
PID 552 wrote to memory of 4088	552	msedge.exe	91
PID 552 wrote to memory of 4088	552	msedge.exe	91
PID 552 wrote to memory of 4088	552	msedge.exe	91
PID 552 wrote to memory of 2864	552	msedge.exe	92
PID 552 wrote to memory of 2864	552	msedge.exe	92
PID 552 wrote to memory of 2864	552	msedge.exe	92
PID 552 wrote to memory of 836	552	msedge.exe	93
PID 552 wrote to memory of 836	552	msedge.exe	93
PID 552 wrote to memory of 836	552	msedge.exe	93
PID 552 wrote to memory of 860	552	msedge.exe	94
PID 552 wrote to memory of 860	552	msedge.exe	94
PID 552 wrote to memory of 860	552	msedge.exe	94
PID 552 wrote to memory of 5000	552	msedge.exe	100
PID 552 wrote to memory of 5000	552	msedge.exe	100
PID 552 wrote to memory of 3984	552	msedge.exe	101
PID 552 wrote to memory of 3984	552	msedge.exe	101
PID 552 wrote to memory of 4292	552	msedge.exe	103
PID 552 wrote to memory of 2520	552	msedge.exe	112
PID 552 wrote to memory of 4024	552	msedge.exe	113
PID 552 wrote to memory of 5048	552	msedge.exe	114
PID 552 wrote to memory of 2524	552	msedge.exe	116
PID 552 wrote to memory of 2524	552	msedge.exe	116
PID 552 wrote to memory of 3040	552	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff8f446c188,0x7ff8f446c194,0x7ff8f446c1a0
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,10324863559989833580,6992363311362109357,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1848,i,4795873238583465489,14259809083118610477,262144 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,15537583034906796274,791626012179447117,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,14510703205072645386,493274676806382817,2097152 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,11206865032042404570,4792958001143482799,2097152 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,12915843286838602550,8515394755214013390,2097152 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,16922092565813312872,4517978676368502913,2097152 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,11875746423751000395,6081459229720938056,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,12384394732190085702,7481680852194073336,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,6331852969246732824,16030369164352854519,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,6331852969246732824,16030369164352854519,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,8612724962776358149,1682490243166709052,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,3756691355231931081,10482206012116662653,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,12661925279663854456,4425049331455941731,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,8305082272661763188,17727688233476168258,524288 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,570460206831357885,1892287305579086427,262144 --field-trial-handle=2308,i,2274205247254236889,14767998490804191074,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f30c6491c61d5a5cc8cb02d7f11abcf6dcd3d934aa132ce79df55bf726fec81a
MD5 d2c3da262b0f5536ab8aeb4b02b7804e
SHA1 dfe2cbd25e0da99d0559e21b4a94d13329942b65
SHA512 2779af2d570b5b32236199e3cd34a28a816d3351f98343290b9ba6b07083ee526ae72f0e7327bf46d3e904727701b471c9f143ee111370186a7d1dba6be970f7
TLSH
T1A0710C303642C5ADE343C131B8D286F371336DE9F82B5E7011985E7529A5F528D1D6DD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 40e2c0188a54304dfb64ea9f214adb6f5d10736b67204bad57c76ae4f5d79667
MD5 52dcdb951682163cc04f6eadd71fd28b
SHA1 d015305b1c5f02bf493b4d6ccccd76c7061445c7
SHA512 2fa83fc86b42f93b871d7515e28e8e9088480fa12808799ab5b3aa97860f3913ceb890908a8c6346f759d8a922be25095604db86cf696236347369f09b1ac121
TLSH
T1A111ADF7C3E486AEC91556F0BA247E2BDE2D0502832C3C5989E0EF1B93F2475E00195B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0861cf69fd7be4cb39dd02952cf77374926f9716dab5434ef43181aa823ffc1b
MD5 e7c6fe9e0179de350cbe8cecb62d3c51
SHA1 fa698200745fb22682eaf3558eebb978c550decf
SHA512 2bc80149e2eaed487b9c2424c2f51ee4c98296e894c3e66644e7a242785f2cc6f223b47d4910129aeb41319d1b87437715db9723de49386ed798f586cead8da7
SSDEEP 192:sxZcRJyM/jK1Ml8Mk3/fusECz/IdpdQHW6+WNGYIkro+gIgrJ:sxZcTM3/fusEqwKHbGBX9
TLSH
T19542D7126B34597BCCDBD309FA45BF53D6F91472A2900E54AAFCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 14fdbdc2dcd564f21dd099659eaa0c8a1dc9a31e089e9a2a145ea24cd41ed5c5
MD5 1040f7839c75c97c6e7030381359740e
SHA1 2a2ad146835ee6d0db11de631eae5688ee21f719
SHA512 68129c76ff06895189068c912503f4f739e80bf31962428eb11058708123c4c243c4db618c5adfb22ed64c504d86abba89d455990926e153bc8e89936a3446cc
SSDEEP 192:sxZcRJyM/jK1Ml8UQYk3/fusKCo/IdpHQHW6+WNGYIWmW+gIg54J:sxZcTq73/fusKhwwHbGIX6
TLSH
T1B452D816AA345A77CCDBD209FA457F53D6F51472A2900E44A9FCCA0C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ccfa744f6b3dfeb8d241ce303c4217459db054dea0f782fab69b1ba701bb5e44
MD5 3a5a4575c0cd9c62a78da98897603968
SHA1 30c0884b17b280d2935946a27436dc6ed6a828be
SHA512 95d97d4bc46da3d5ce653628a6cc52baec2a5fbb2ffe3b4fbb91533b1608b00b599557525c8b0183b1e1af46b8b0e93fa5216894a06e915db3bf4096734436af
SSDEEP 768:TbsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Qrosr8:TbsqxXlWvJD6Tu1ja54LAs97s4
TLSH
T14CD21C3B694CCB7D4F840E5DEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8437db75f595f5254000e4ccfb9d27b029375cd66c81c8a62711f69e57e4e0fa
MD5 9e1e1fcfbacc454d9f92c3aef63bd582
SHA1 a83084415d70a19bb0db37bb0b5ff2618e67f650
SHA512 088fcc2664d71e8aa1224f5fd40d7d98c86cfccf785c66b4f429c17b91e6d4eebe175b089d9d65e460cf15a43d100d73120576651a5bc472d938173fd233ee25
SSDEEP 96:KYbaKYIKRktgESKK+Ea7lCk+KqLCe+mckDO0f6KQK/6u6ucKnqM5eK6YKg:ExV9/7PSZg
TLSH
T17BD1131A3176161338BD2888B2A685771F4132A33018B46F7FB850A15E6BE535EFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5f08fcb-3db7-49be-84ba-36667593d779.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d5f08fcb-3db7-49be-84ba-36667593d779.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 9805fcac316d7d7ed24dbd36434673d2fed9919dc19ad3c9fc27cd74fadf5e40
MD5 f906fcee99c4af50473f590679d2a4a3
SHA1 b02a183ec07d8ca7061e328c306d61ffe75566d1
SHA512 6b87bde647c3bf0dd5116d69b12d3e37619a591a25f671d18987294734769b80a3484362a099b82dad323463f6a85e5de622ad829f8d0180affc389b3a7c2e71
SSDEEP 192:uJLsN7UgQoSVukRboV5QmiU1p7/B4VRNW+Fd102o1U2tSJriO2SRNqIyEQ3Xrar4:ysN7UgxahbSL/uVRN5dc5sJrfVkEQ3Z
TLSH
T1D8423936AC345C7B8AE7A502F44B31135EF4506BAACA2F94D5ED9F0C01DBADC135AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 1fbd8e056ee994915bb754ebd91793f5e60eca30b24049d33abe8162714d2298
MD5 3b46efb1db8ed511d06b851452c2e9d0
SHA1 401c96e7f2fbbbce84e0f813f0bdfaf3f05485f1
SHA512 b18119b484c4215d8add26da7b436513c5d2f37a84b553b9fa1d898003764024f1b32e35767cd4ecbd44a4c07c68689db40e886bf155ad129776ef0b1f25fa87
SSDEEP 384:DiF1tNn/s3n9SdzsNQ8TUNTUlIldxahbSL/uVRN5dc5sJrcpkE/Pb9oRVRXx97:uF1j+96Bwg0m0H5CmhcpkE/AVRXv7
TLSH
T1F0A26B3389248D3B5EE75B85F54B36034EF451B7A9C67EA5E2D8AE0C00CB5DC134AE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4e3246129f55ab288295fb804b9ea2691f206c91991bc5c0c1851f58c31b8f5c
MD5 65c16afee2153039095b6ea5cf86dc53
SHA1 e24a37a1407c094fef36ffbeba5020d4d4b20dc9
SHA512 72128e703c00de00472f58b3972d9146ab373c2ffc4f9eede4ee08e8ab3170760111860f786fbd98efa39f242f2af58cdd0ebe1095fed18124db364d1045b771
SSDEEP 192:tONnm6JkRtQmiUyI0W+RNW+Fd102owh3hRJ7U6:tONm6UroW+RN5dcQ57U6
TLSH
T19F02D835AD382CBB8EF26D0AB48737175FA4217BB9962B90D6E81F0C01D769C1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 349592da0a2967dad7953950efd21c1d55dc876bfb0b9ff42a17a37b2a64b397
MD5 22713ad8cab9c3d7d740e168c786a39f
SHA1 a3f515252462f620570d1af64d36dabe35a082ee
SHA512 25a4fd58f8164bc57fcb37f3bdbc5d7d90d583d9d993afe57ef7b953107938ff737e4c105079327c18719a03f43f992d165c9874791b5d4906689c21d6903abc
SSDEEP 384:HtNn/s3n9SfsN7UdxahbSL/uVRN5dc5sJrfVkE/Pb9oRVRXx97:Hj+9UCm0H5CmhfVkE/AVRXv7
TLSH
T125927C3259385C7B0AD36645F44B36071EF491BBBACA3F95E1EDAF0C01CAADC134AA15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f81b959ea5298016594dea6a8c27b0b046c97b30e8676ec54ae4fc6d2bdd71af
MD5 7b093c37a9fb8130e1908931c5638d9a
SHA1 3c371a4d07167a676fe3d7f19bc035e7122a8a43
SHA512 f6c52db113b07e32182e311c35b6335d6dbc50be900bc5f3e1419cab3d8d8ad9d7b7d8e719c7a0a7140050923831b6ad0ceee3ce6581740ff737a51f85f3e306
SSDEEP 192:eONR6JkRPQmiUyB0C+RNW+Fd102o1U2tSJriTVcNqIyEU6:eONR6URrC+RN5dc5sJrPkEU6
TLSH
T17B120A35AC785C7B5EE26546F48731134EA49167EECA3F90E1ED1F0C01EBA9C134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0d7f445-3f3b-4187-a23f-926e5b8f7a1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b0d7f445-3f3b-4187-a23f-926e5b8f7a1d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 15d68784c3bb4308204d51c64335c57faf7c8e284fe54ee991f3b73f0d5e7114
MD5 1819ec61400ae55c50f737ef7bb52032
SHA1 bec0ec041835d407a4cf8554037b1bbd830e673e
SHA512 f8d98c7c64b8636a37d51273d25a97b1ac00f70c3ce6a3f36a7a89f82c049f6e31d2b21520117c8133ccd8ef9d9dfbf3e7669b22f1a3a0844c8c457472fa2666
TLSH
T1A5413688BAF91148B3B3BE56ABF6A46D447AB9773E0A945E10010E4F0662A40C862737
MD5 SHA1 SHA512 TLSH

Submit Download