ad2700d70ba92aaa9217179f081dc7855c79eba1720a9a3b6f30fcf153650eb6

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ad2700d70ba92aaa9217179f081dc7855c79eba1720a9a3b6f30fcf153650eb6.html
Size 80KB
Sample260628-grd35afw2n
SHA256 ad2700d70ba92aaa9217179f081dc7855c79eba1720a9a3b6f30fcf153650eb6
MD5 50b8e2aeb5d18909169a3fdf39d525a6
SHA1 788f69095c1e4a12c81ed2c031e11f412074f2c6
SHA512 b0258ee2cdcb8c77fbca632bd7f06a60c2a8884088f2a012838adf7119745ba46f1d6c832c43195c7d586d16e231d6c48de45b50db13c72018f6fa02fb783439
SSDEEP 1536:Po8Er+MGUIgxJ/H9tKiDTzJpRXYP17DwQWZhlu1q:+rvl9tKezJzyq
TLSH
T17383F9B9F5A170325E13F970412F410FBA3B686BE44C0DA8F254D8F1AEF69894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3684	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271001236430127"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{C0279754-32A4-41B8-A34F-0BA0ABD41B0E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 576 wrote to memory of 4920	576	msedge.exe	84
PID 576 wrote to memory of 3684	576	msedge.exe	85
PID 576 wrote to memory of 5020	576	msedge.exe	86
PID 576 wrote to memory of 5020	576	msedge.exe	86
PID 576 wrote to memory of 5020	576	msedge.exe	86
PID 576 wrote to memory of 1696	576	msedge.exe	87
PID 576 wrote to memory of 1696	576	msedge.exe	87
PID 576 wrote to memory of 4128	576	msedge.exe	88
PID 576 wrote to memory of 4128	576	msedge.exe	88
PID 576 wrote to memory of 4128	576	msedge.exe	88
PID 576 wrote to memory of 2404	576	msedge.exe	89
PID 576 wrote to memory of 2404	576	msedge.exe	89
PID 576 wrote to memory of 2404	576	msedge.exe	89
PID 576 wrote to memory of 3452	576	msedge.exe	91
PID 576 wrote to memory of 3452	576	msedge.exe	91
PID 576 wrote to memory of 3452	576	msedge.exe	91
PID 576 wrote to memory of 4376	576	msedge.exe	92
PID 576 wrote to memory of 4376	576	msedge.exe	92
PID 576 wrote to memory of 4376	576	msedge.exe	92
PID 576 wrote to memory of 4328	576	msedge.exe	96
PID 576 wrote to memory of 596	576	msedge.exe	97
PID 576 wrote to memory of 4328	576	msedge.exe	96
PID 576 wrote to memory of 596	576	msedge.exe	97
PID 576 wrote to memory of 708	576	msedge.exe	99
PID 576 wrote to memory of 4620	576	msedge.exe	102
PID 576 wrote to memory of 3100	576	msedge.exe	103
PID 576 wrote to memory of 3796	576	msedge.exe	104
PID 576 wrote to memory of 3256	576	msedge.exe	105
PID 576 wrote to memory of 3256	576	msedge.exe	105
PID 576 wrote to memory of 4468	576	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ad2700d70ba92aaa9217179f081dc7855c79eba1720a9a3b6f30fcf153650eb6.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbcfb4c188,0x7ffbcfb4c194,0x7ffbcfb4c1a0
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,825837118937526619,16762658144431727366,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,8140097841440359235,8507708693326683112,262144 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,5901875286774451905,8892503953304146854,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,14577704436548855236,3498778795788287306,2097152 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,16354589103268603325,3114336657781568866,2097152 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,12475774779590999479,6386221829573765014,2097152 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,9960695924194868320,2514136255496434407,2097152 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,14385519584871092458,13462479600281954771,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,13391122576611653427,10515144155752826530,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,8717391487762646568,690319084179711930,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,8717391487762646568,690319084179711930,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,9455118338506590458,10382718445570686058,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,14310143402179270761,11375299822290745073,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,14775499469731503355,3942446988894964990,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,11871513814830490357,16725907002702780178,524288 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,5931902920639905456,10455838101173036053,262144 --field-trial-handle=2160,i,10242372460505689130,13755749247072365807,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 558131d986fbae0e3519337171ddba2f065ba24149396b4a0966e846c675a233
MD5 9258fc68e7c874519767442be3c12078
SHA1 bd4c1504e823ee962f2193c6280b20c8b2ae48f6
SHA512 5d58acdda121fc05f2c38bcb98cab80de9063c86c5fb9c586937a4c801c36a6658f3624f749b7a9ac7f4bbd356f3556ff76606daaeffb70e006d14f061268ea9
TLSH
T1C96170A9216244D3E3633670F0D2C28278B0BFB60B53DF9AC160A87EF5097118FA1C17
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5df5c2d90f0983a504965b10bc97aa82445379a1fea81d6009b819f39945166c
MD5 e57b3a6dc10272cfbc20817485c63233
SHA1 78a6fdad3f72b1afb4db9a0d7e8896db7a8d96b0
SHA512 9dc77b504e4c152c3655bc708debc0418d9228a55c6fbca7e10dcd2dd92db58a304bdf58a08c2d45ec5eb9b5213f587fab0cd9f9403aead6ade028ca5bdadde7
TLSH
T19731ADF7C3D4866ECD1196F0AA246E2BCE2D0656832C3C16C9E4EF1BA3E2475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d2bbf4412561c707dee8bacc70513c03988ec506728a04039a32cb885dd3b082
MD5 4067fc3a446da9edb4b9467db3068d05
SHA1 39d701d5fef6a07f023203452e215df60a7d8bb7
SHA512 7f7e6ef4560731567fbb26ed0368c448839c95b6b99629c61d3d84b1a374f0eb09141f7a3f4dd2f9ef9e62299ac355bc99c00f86b3f3773d5081a28e6ee23978
SSDEEP 192:sxZIReyM/jK1Ml8MkN/fKsi6cKIdpdLHW6+WNGY4wTVnIgrJ:sxZI4MN/fKsi6cDpHbGm9
TLSH
T1D242F7526A346977CCDBD209FA45BF53D6F94573A2900D44AAFCCA0C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 57894ab563c6726e833b4ffd2ea0630de8d29c83649feb9ec99c245d66f21bd8
MD5 4af7ea53ba82e398c845c254ab185061
SHA1 89c687a0b5291b6e0b2a8104a5f2e8ba913e255e
SHA512 2c42a0fd0f4342e9136ab77e596263034017834f5fae92a11293a1146fe964196a62f24ee8f8719a9dd17d45954b8d002258d84760f6fd8170b8d73762e7bf9a
SSDEEP 192:sxZIReyM/jK1Ml8UQZkN/fKsr6uKIdpHLHW6+WNGY4TEcnIg5XJ:sxZI4qaN/fKsr6uDrHbGDj
TLSH
T1BB52D6526A346A77CCDBD209B945BF53D6F94473A2900E44AAFCCA0C05E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2eb6f9c109f249fcc226e06af3bf58764917439b553783cafe449d364510b830
MD5 7e004b052f4144619e561da9cce4f0c0
SHA1 67f6de1dda78e3dd9905080dc21eaa569e778205
SHA512 0f137859905e6e863fc3aaf4777353310145c31330727d6de4749564480792f457f23a69ed866b06b62654db0b0b1f311025bdb15607d5fbe1187727baaab844
SSDEEP 768:8K8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdHrorkdUnL:8K8iJPNWvx76ru1jahALocdUaUL
TLSH
T1DBD20A3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 75ca454df7c8e34d8d2376d330eaf56d22de4e62bc64a3f7f439210497f2511e
MD5 3946e31db3ef5dc8a787d806cc4c1443
SHA1 0d6540c9e2f7daa4e5a4b2e0b311cc505c27302a
SHA512 22e896ebbc60a2c6ad5e32861a3ed4341e76c346f9457693ed05e0c60a507c986fd5536da016e5a537845df0a46fc3bff8e534b8025ef8289b9f5011777a3fd8
SSDEEP 48:K0WoIbKxiMPyvdGxNHzvk/zQPIQVkKpBRPkFt0WwHfiIfKnKQ7:K0Wo4Kxi2qCUKbCkikKnKW
TLSH
T15D913B1631BF13523C7E280892B5976B474177A3B118E42B7BA800B25E27E241DFDDEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ed2ce4405146a6a971352c14a2090368117ac961a84820c992ec2f7d0c0ba186
MD5 381e5de17d38b7eef6f0b6bb5efab20e
SHA1 d48367091931d2502e31e66573bbba5dbfca8671
SHA512 25464cb9504676dcf96007490cae9751aa294e0d8f8407b3f6773e587977b7b0597e81cf340318656c7c592894ce63b54bc6b4e5a3ff1200986029c38fb54f6d
SSDEEP 384:h8sNKU2vUfLQMkIKyEt1Bmn15wbAjEO8k:GJGSZ1Bmn12bfZk
TLSH
T19D725B76A8785D3A5EA3D445F44633135EB884B7DBC82FA4D5EC5B0C06EB288130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 8ab501e0ec0349e4860101f9486d9cc0ed098a1c6555070143905d0779f63fb5
MD5 05fe1fa24fe119dd353db81efae82991
SHA1 e36b803ab7570a32cf4b0682e60f941f537e9543
SHA512 faafc5f9bb9971170c45a72df954493b870c705fa6c00127ee9de7ca330350535062d37eead4036fdd1cc5cdc4e42dc12259db59a6bd43916d08446320618268
SSDEEP 384:+izsNfR2vUfLQMkIKyEN1Bmn15wbAjEO8k:31GSB1Bmn12bfZk
TLSH
T1FE725A76A8785C375DE3D445B54A33139EB884A7DBC82FA4D6EC4B0C06EB28C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8b51923992e9fec019d448e45f74fb926503452c559275dda7f6a75a8f0af530
MD5 2aaa01818e7550562534f37688ff9c33
SHA1 8596327c09dda820adefef450509c004a268c33e
SHA512 a9de341ad1713be01717f0fc584685989821e0318210a193c0972bf8aa995fc134197d8d66a31e3a3b42e8546fdb6244512ef639aed230dbdc8d2cac1a724b6b
SSDEEP 384:28sNKR2vUfLQMkIKyEt1Bmn15wbAjEO8k:5yGSZ1Bmn12bfZk
TLSH
T11A725B76A8785D375EA3D445F44633139EB884B7DBC82FA4D5EC9B0C06EB68C130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 1f1b3a1e62fd617ae4a0a86435efb0499eeaaea8b1c7dfccff92edb6dae37da0
MD5 389f0bd345bd3226353d56dbdffe8f2b
SHA1 ea28ba4fb36da2ed81096d3aeee99abd9f1428dd
SHA512 0f44fe6e38251784ead084baf734dc3368529240376afb20cd1a6690ae90c4340a098fbbfc2455c29f0fb258c8b9dea1555d0518eb592d7058f9cb329c4acf42
SSDEEP 384:+izsNKR2vUfLQMkIKyEe1Bmn15wbAjEO8k:3yGSy1Bmn12bfZk
TLSH
T1CA725B76A8785D375EE3D445B44633139EB884B7DBC82FA4D5EC4B0C06EB68C230A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9947f8db448a2e4961315a5166e8bdb2bcae2e4c068558c23ab90b457b14b4fa
MD5 e5aa1154dac3f25b15557a84bc1d3a1f
SHA1 d7852c6093a031fce9c983227717af1f24e5dc6d
SHA512 b7ece7f05942c874b199b606d6ccab5fcf2c2debcc1975a98f0453c60520c697f15d749c9c313bb1644d8dfd09bff1792c1e9d7a5e665bb1f7f0b2ee16cd9168
SSDEEP 96:ZqONkfQsjpfmUTmDK5ih/cIPURHl8h4otop5Y5DdBhPwivh50xy0SFYKcAxZYDMr:gONf6kDfQmiUyqDZ903lKvQi6ARxU6
TLSH
T18502F835A8786CBB8EE3AE05F48637275FA5216BEAC02F80D9E41B1C01D764C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b1b8b6fca572e462feeb2f4b5a479641f7a0c5dd6ad99c49ba1cf12e9869512f
MD5 5a1f7b5678a31d7d31f8364bcdce6ba2
SHA1 c58205cf4abf56d6186ee4fc54069c122adf679c
SHA512 a44796392bfb6ff2bfe1beab5dd15836f827bd136e484ba6ce5c0c4a95a2a5ffd3f012cdb059ce9b57dc2c38aea757c28df07bfba6b098a6f944c22c877a0904
SSDEEP 192:QkONT6keeQmiUyxDQc903lKygFUcR6jrqZ9HU6:QkONT6XaKQc9IKyE91BU6
TLSH
T185122B36A878A87B9DE3A545F48333135EA58167DB886F91D5DC2B1C06EF69C030B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dd24ce8-6f61-4235-9fc2-58dc9623495f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9dd24ce8-6f61-4235-9fc2-58dc9623495f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8a1b6eef7fe90bb29d7427b606a2ea66dd24a2eb7d2a5ccaa82f9694ada52da6
MD5 25e9bf719667898696ef02b23a73aa15
SHA1 ef47af7eb3d367b2af090225b4cc3aadf557dfdb
SHA512 485bfff4af7e328ef4e44476080d9895bac20f5ec02c78a4d7c1f3c9f0bffa2e35bd9f8acd8dbfe032fddfc2d39741deecd508a1cc6696df7621f4d6c8648767
TLSH
T132412759AAF91108B3B76F1A9BF7A46E447AB9372F06D05D00110E8F0B63A41C9A1B37
MD5 SHA1 SHA512 TLSH

Submit Download