a9a924672836b7869d1703bea02c9f3041e4e8f25ce5fc9eb19444083d9237aa

Analysis

max time kernel
148s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260628-pcrdxagy6z
SHA256 a9a924672836b7869d1703bea02c9f3041e4e8f25ce5fc9eb19444083d9237aa
MD5 e60ba3feb4d39be71ae42c31dedcd892
SHA1 16c2fb3c7a996182e252c82d54e3d339a8395c9b
SHA512 fbd09414420fdd9b0c2dd967a981358349d4629142cdc5526fc522195d93240ddbe69b4aed43a6d3349d0473f156e7142e54e4c652f0e7cfe5cf6913a83c5197
SSDEEP 192:n1agA++iMZ8avzKuz1tHmzXc1i/X31BBMYSfo5:zLu53mzXc1Y1TMYSfo5
TLSH
T135E17EF7661A26189DAD9180AF75F319C874E901D1274C48414F5B3F02DFF56C2B2D4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4844	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271222858096819"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{CD14C327-3C6C-4F2E-93E7-F76186F68121}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 3100	2228	msedge.exe	85
PID 2228 wrote to memory of 4844	2228	msedge.exe	86
PID 2228 wrote to memory of 640	2228	msedge.exe	87
PID 2228 wrote to memory of 640	2228	msedge.exe	87
PID 2228 wrote to memory of 640	2228	msedge.exe	87
PID 2228 wrote to memory of 4828	2228	msedge.exe	88
PID 2228 wrote to memory of 4828	2228	msedge.exe	88
PID 2228 wrote to memory of 2540	2228	msedge.exe	89
PID 2228 wrote to memory of 4104	2228	msedge.exe	90
PID 2228 wrote to memory of 2540	2228	msedge.exe	89
PID 2228 wrote to memory of 2540	2228	msedge.exe	89
PID 2228 wrote to memory of 4104	2228	msedge.exe	90
PID 2228 wrote to memory of 4104	2228	msedge.exe	90
PID 2228 wrote to memory of 3212	2228	msedge.exe	91
PID 2228 wrote to memory of 3212	2228	msedge.exe	91
PID 2228 wrote to memory of 3212	2228	msedge.exe	91
PID 2228 wrote to memory of 3996	2228	msedge.exe	92
PID 2228 wrote to memory of 3996	2228	msedge.exe	92
PID 2228 wrote to memory of 3996	2228	msedge.exe	92
PID 2228 wrote to memory of 2424	2228	msedge.exe	97
PID 2228 wrote to memory of 2980	2228	msedge.exe	98
PID 2228 wrote to memory of 2424	2228	msedge.exe	97
PID 2228 wrote to memory of 2980	2228	msedge.exe	98
PID 2228 wrote to memory of 3696	2228	msedge.exe	100
PID 2228 wrote to memory of 444	2228	msedge.exe	113
PID 2228 wrote to memory of 3744	2228	msedge.exe	114
PID 2228 wrote to memory of 3672	2228	msedge.exe	115
PID 2228 wrote to memory of 688	2228	msedge.exe	118
PID 2228 wrote to memory of 688	2228	msedge.exe	118
PID 2228 wrote to memory of 4796	2228	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffc04f7c188,0x7ffc04f7c194,0x7ffc04f7c1a0
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,16327784682435393243,3310234452633644252,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1900,i,13333610929496071214,8096439170377893303,262144 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,4512220775834036913,8724579510816104334,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,2815164205820717453,12987741424937825354,2097152 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,16709204864279957815,2428302540764122590,2097152 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,16252192086677900449,15917742089958957338,2097152 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,4889459697787447086,11680982303247767470,2097152 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,10608251502689583739,15217979666979307333,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,2272645689726094752,1885331162676093917,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,9351928375735876411,14383963582361000863,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,9351928375735876411,14383963582361000863,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,5030462085508516811,10759150046418440092,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,1999577805386377726,3246868001675844815,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,7170384916529983964,8944479908494811384,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,5357837685454424664,6867837551574827934,524288 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,8309587476647460951,3132706131894381724,262144 --field-trial-handle=2900,i,17076924416465116397,6505643056864246,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5e12329df596a118f72d1dff9c1f610485e29899e1179121d65f9c5a8edea40d
MD5 9b62aed8b1e920dc7af47c7e7fa82fa2
SHA1 33621c19d327cda5e07e9ac502eec95666703e93
SHA512 16dbd9039027a50a91876bf3937ddc13b79509b73d291ae0b401117fcd4bc8bcf75cc4a39d1984de67dd309134dc66051a35adb9fb99bfd2ef30d33f87c459bb
TLSH
T1C6517F3C1A110862EBC00533F0FB9A54717985EDFA13AE73C6B36D7A6B0A325C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c1f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c1f3.TMP
Size 2KB
SHA256 ac3fffc6bf21c51245aa6a844a70e4f07933b786254b4908c18e67070764d598
MD5 6e5627cbaa689588216134bd87d63c44
SHA1 b1b29751b2da554eea7efdda633590e0bc705e8e
SHA512 21fe16417d86ff2fdfdd49de97d1ad372259f60a65ac6b63e0266974c7bc3e9ecfb7aa5f1eb057eb7c169b4f8949ceafe8e60ed7f9d4ae25316f1a717a05d9bd
TLSH
T177516E3C1A120862EBD00433F0FB9A54B17985DDFA13AE73C5B35D7A5B0A321C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 550e4352174a6cb70bc0e03cdda07b84fc9502d230a3b7d02047652f9394285a
MD5 156a6394acbe202da06804d036c7f072
SHA1 924d74a8d05a05b6133118e54b66c051647942b8
SHA512 902484e2015ca95c6ca1b46deecebdd279c7403159a353f54507c94b488496fbfb188203b3a2bfe83bdd82c5f9ccac2963cec641d9c2367c5e7c968ced5b185c
TLSH
T17521A0F383D585BECA1156F06A18BE2BCE1D0511431C3C5A89E4EF1B93F3475E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a74d878c-ad9e-412d-8044-3c9c466e2919.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a74d878c-ad9e-412d-8044-3c9c466e2919.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9b6dfe8221ac86e40d5d54d6ad0e04cae77659770e7dea5b5968c5817629b1ec
MD5 608d3670497ed0c5661600e38b17d385
SHA1 4b17c1f95ccf5eba32c9e6c4194349900e1afd3a
SHA512 3b394ebcdfbdd4e292e76f88c279352624fbb009b659eb1646bab8c1eb7ea637f6fb4b3f136618b140c60443898330a0c81b46fc79e778ddc293e29a140cdd70
SSDEEP 192:sxZDNRpyM/jK1Ml8UQrkY/fVs1rg7KIdpHQHW6+WNGY9IqDr1Ig5eJ:sxZJpqAY/fVs1rgnwHbGaE
TLSH
T10752E916AA345977CCDBD209FA41BF53D6F4457292A40E44AAFCCA0C05E7EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4b1eb5bbcd36bf0f4f567f9efaba5919d34f15e482682cf2eb20993359ee52eb
MD5 4e56b53b430510b5ee325b7475b65bfd
SHA1 526b046b2c5bee3174e2a9e13ea04505daa9c363
SHA512 fda9363b64d0e73faa120f5152f1fd6636c979210ac4bc66ce0b3e653fa64ee0af650d2bdfe075597808deae532fa7309ef1de5c384e6d4d40f95ed83389634a
SSDEEP 192:sxZDNRpyM/jK1Ml8MkY/fVsqrU7KIdpdQHW6+WNGY9IKgr1IgrJ:sxZJpMY/fVsqrUnaHbGR9
TLSH
T1C142E9066A345977CCCBD209FA45BF53D6F4457292940E44AAFCCA0C05E7EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9857dbf0bccaaadcb814e534dcd9729cd922f6d4e6b134a97c6f8455f8b2a9c7
MD5 62bfc4470dde2502f9a49cc543703a5e
SHA1 a41a2e350bea0178c9657b5cb6d79107159efdbb
SHA512 bea39ba7e82cba0806ed6fcb0ef591ade7c44aac3cc1f186f3f43dbbd0f46e404f780ab30c4822429566d50579168a48727d76e29a645a3120644c4117a747f3
SSDEEP 768:b8cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNcroHg6BJ:b8cv21wWvu+Z+u1jaeFLeRNHHb
TLSH
T120D21B2B280CCB7E4F841E9CED2AAF8A6DD801CB57988D5447FA484C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 13e96beb670d03cc750cdd0d2b0bff9d5ef408108c8e6b278065050ec153efc6
MD5 d8fbb29ba1b834665796f42c042885c2
SHA1 3394ed2b1ef3c58664f0867edfb43a58221cea91
SHA512 870544f98ca8b94fdd30d87d1c3d2c28f62eb9fdc6498507dec296087dda15825048545c639216f8e8fbbee0dca7a7ffea7650974eeb9b4cdb052bd8517db849
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDiJIgK9aiSu0KDKp:mThHvg
TLSH
T174916646B4B6175138BDB80C9351852A9E4130AB7469A43F7FA810E23F67E112EFCED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44a97926-289c-4dfd-999b-b0c6fe169c7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\44a97926-289c-4dfd-999b-b0c6fe169c7c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c9adacb2981eac6514fd5f531234ea966dabc6050c5aba5349bb92d862c578fa
MD5 e0daa2286c50f4f5e0dd6e0508b37b3c
SHA1 e732b127a75fe86f4f16fa74b376c64b1ac80453
SHA512 f1c980203695179d7b7fd0d90aeca444435b600b3394e21c9584690b87a99d19a75e2e371e677700e4363845ee519be8931a267805956a9dc11c5a1779eb5a94
SSDEEP 384:XtNn/s3n9SfsNXMqDziCbzHe+C9d6NXe9dmn15wbAjEO8z:Xj+9U0d+FLdmn12bfZz
TLSH
T1EC927C36AD381D275DE39545F4473617AEF880B3E6C93BA4D1EC9F0D02EB6A81306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 2384e817309832c49ddfd5800692d52c76f7ba01643035029074f39377d6462f
MD5 7a9ade21e74ccb6475e5a6c5663d2137
SHA1 ee0d5cfd64178b56a19a14ef318bbdb044b9e401
SHA512 044a6f194fdc75d250f620ca1cce77077eae5f844193c043dfdfc0fa3a1b3387e4f380be253a863dc57cbf1ad1b8f0077b1dd6d21741c5cf06f2b1aebb86113d
SSDEEP 384:0iF1tNn/s3n9SVzsNp8TUNTUlIlxqDziCbzHe+C9d6NXe2dmn15wbAjEO8z:PF1j+92Iwg8d+FYdmn12bfZz
TLSH
T11DA26D379D688D2BAEE38A45F54A32179EF480B3D6C53AA4E2DC9F0D01DB6DC1306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c0035584b51ddc777b31ddf8ca8f75bf259ad69c08a547822be6a9a34e20ed2f
MD5 963f2de9532f770900e8e982d9f4aba6
SHA1 f53cfbaad062c0c94222cb2a6bf851028f5bb5e1
SHA512 f79f21a3d66c8a8064d4c9170397f23a94927d4f98b5054a139b49be8f217ee0a99edeeadf461552adefdb6dc4ef70ff6a4438e1d0196e45505a5b061832860e
SSDEEP 384:StNn/s3n9SfsNXxqDziCbzHe+C9d6NXe9dmn15wbAjEO8z:Sj+9UHd+FLdmn12bfZz
TLSH
T1AE927B36AD381D275DE39545F4473617AEF880B3E6C93BA4D2EC9F0D02EB6AC1306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b947933983926dd6da54752e27918cd30e8164f5dee094bc101e32fe20878817
MD5 f35a36c4e1ad50c91a20ac9d609f5809
SHA1 ea3fa5e1871df2153aefacba3fec8e819d365ee6
SHA512 0c863bc991909502b5317f185646f6a585bc32dc25eb9e181b8dffc8c6c96fa233ca70997ce7af7dfe66a7e6920f612cc24cf475f75b1d9e81074a930465d29b
SSDEEP 192:JONWS6v+YLNQmiUyLkZh+CGX+FdeNNmusSpU6:JONT6vz/hZh+C9d6NIqU6
TLSH
T13202E935AD382C6B9EF2AE05F48737135FE4217BEA952B91DAD82F0C01D765C2306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0b30ffbf07fb1d2bf43703c2cd17333af9cbbfa6354d6ea203d80095a340eece
MD5 9329c7e99254e03992e03680578eec09
SHA1 55d58819889418ac8af93668e91e4445a6b5d525
SHA512 f705b8cca1e1559930e264a438abc8d1af478f7c2f0a236f714a911bec1f06254fe536ecfc5b4d867997567d9e22c51dbfcdd0541cc3314123f3d4642e8f35ce
SSDEEP 192:8ONK6v+YLBQmiUyJk1h+CGX+FdeNNkGQNIQCHzqYzU6:8ONK6vzTB1h+C9d6NXeMdU6
TLSH
T16412FA36AD786C6B5EE2A541F48336135EA49177EEC93B90E5DC6F0C02DF66C130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7e84d3dff314b4bd63c482bc161bfc459c9a3c8d78a50a78ad444539d9e8e944
MD5 b5f89e6d799e25f101b79eba0ab01e23
SHA1 798184063d79e43920b0432967b1e6cc5b00b7f3
SHA512 adeb432cfc2053e650361a056d341e421c9eb9c93e7c281884446f6d81d7c10fb389b2599136d926d2d03bef66e9eb47b6606f8a3bfc0c23c51d78f3af00b890
TLSH
T1B9410748B6ED1148B3B36E1A9BF6A86E487BB8772F46D45D10110E4E0A27E44C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download