358f7ed686e60c350670f51c69e1827c8555f4d5f1a5739ca65ac30df935c4ce

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0mJM2v22X7.html
Size 9KB
Sample260708-wtly3set7p
SHA256 358f7ed686e60c350670f51c69e1827c8555f4d5f1a5739ca65ac30df935c4ce
MD5 0b4fd049e5e82355262999c3d95e81ef
SHA1 921e931127b110cbc2ec10b621d4bcc668768584
SHA512 4f72ff7a07639783bdcdd0779572ca40b2bcadf0bf9f1f62076c3db3f52641489fc4859c41ce2d588b0485feaf5f5cd79ff176dddcc77a5503a7672cb15f1a4b
SSDEEP 192:n09V183Jdj/+6ymQ/rR577zlLWigT4M2jU5v2LqePT/gwNJGFqwWjI2PiReM:nmVm3Hr+6yH/rRtlL8v2jU5v2LqyT/gn
TLSH
T144121A5712BC1CA982DB4C582C37278B371AE08E7B8D484CB6E4D5D48DA48CBCD19BB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280079790636135"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{477ACF55-DABB-497E-AF6B-9A1426E4D1F0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2616	msedge.exe
2616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe
960	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 960 wrote to memory of 4876	960	msedge.exe	86
PID 960 wrote to memory of 5060	960	msedge.exe	88
PID 960 wrote to memory of 3632	960	msedge.exe	89
PID 960 wrote to memory of 3632	960	msedge.exe	89
PID 960 wrote to memory of 3632	960	msedge.exe	89
PID 960 wrote to memory of 708	960	msedge.exe	90
PID 960 wrote to memory of 708	960	msedge.exe	90
PID 960 wrote to memory of 2112	960	msedge.exe	91
PID 960 wrote to memory of 2112	960	msedge.exe	91
PID 960 wrote to memory of 2112	960	msedge.exe	91
PID 960 wrote to memory of 1888	960	msedge.exe	92
PID 960 wrote to memory of 1888	960	msedge.exe	92
PID 960 wrote to memory of 1888	960	msedge.exe	92
PID 960 wrote to memory of 1264	960	msedge.exe	93
PID 960 wrote to memory of 1264	960	msedge.exe	93
PID 960 wrote to memory of 1264	960	msedge.exe	93
PID 960 wrote to memory of 1400	960	msedge.exe	94
PID 960 wrote to memory of 1400	960	msedge.exe	94
PID 960 wrote to memory of 1400	960	msedge.exe	94
PID 960 wrote to memory of 896	960	msedge.exe	98
PID 960 wrote to memory of 2084	960	msedge.exe	99
PID 960 wrote to memory of 896	960	msedge.exe	98
PID 960 wrote to memory of 2084	960	msedge.exe	99
PID 960 wrote to memory of 3776	960	msedge.exe	101
PID 960 wrote to memory of 4484	960	msedge.exe	110
PID 960 wrote to memory of 3384	960	msedge.exe	111
PID 960 wrote to memory of 2480	960	msedge.exe	112
PID 960 wrote to memory of 2604	960	msedge.exe	117
PID 960 wrote to memory of 2604	960	msedge.exe	117
PID 960 wrote to memory of 2616	960	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\0mJM2v22X7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9c026c188,0x7ff9c026c194,0x7ff9c026c1a0
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,17708489522157801502,12805097895482944568,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,421779521207735057,8261852382792586088,262144 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,8156340248965869985,13447477332430554493,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,5163257876319812927,9244808776461821564,2097152 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,4996068286481898646,2101025630444286824,2097152 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,1988193794394692695,14727642841809254445,2097152 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,6731481941895806137,11089681816867911759,2097152 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,2002333760792866087,11553917429084607765,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14477843058028904044,11557321833888045503,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6724541907100877455,3605359668136662809,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6724541907100877455,3605359668136662809,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,6076917067823463938,14369143121767153136,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,3136383206414673961,1755360574292838683,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,15464746875029478793,3535268926031540264,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,7990114903526072350,9226518371877353183,524288 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5276,i,4398764021724312534,6057523122083342470,262144 --field-trial-handle=2312,i,10319693685628780018,17913230167582958225,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01d44104ff5171e85c7fd5f05c1b8c9490ab651a3674c76d0997fe0cf1eeddbd
MD5 6e095acb4b6a7eda56cefef8aa69f3a1
SHA1 afdb809e7b0a75d8a883fb2010a78fc5737d758c
SHA512 8de785b2c6dde23885f7770532291980a1604d016aa9271e4f17320d6d428a0407ad00e93f850a544e68cd4f9d604a2cebaeaa957e192f59037dc8ca6957d02d
TLSH
T1BF71E93C026243B7D36E01F193CD720D353282FAFBE32E8980976A7B5922760C159BC4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bacadd907a2a0a52b7ae8e0fb294c27c74c608b511ac367970c3cb1ae293f8b2
MD5 f4b6950692ef9d54f8847f8dbda3fdb1
SHA1 d9061370d5bc4e34da2f837ee89e1e1eb2bf7147
SHA512 23399f5f7f718ad0a9080dbe4b7884d60dd00ef1d149733bcd53bbe710858c7d51a5b64173d77fcfaecf61b6b85f26098f1ef90a5c241b3e089bee09c75725e3
TLSH
T15F21A0F383D585AEDA1156F0AA14BE1BCE1D0505432C3C568AE4EF17D3E3475E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 040ba11f5637c58e6d6831780ce31d8b77bf94b5b5aba8b118778eaf6d0f8e2a
MD5 a9d5075a4738e4da1520bb4482eceea1
SHA1 c6ff2cd7d2ca3f16da71c237df597d94028d8fe1
SHA512 4e7f4d9768cd0eabf4d9660ddfac41dad1ba62909858ce95eb53a37374686df2b4b5bdeaaf74c5432335045b0e96ad16adeb3e3b6f0d055043f60a3356e98a39
SSDEEP 192:sxZbwRbyM/jK1Ml8MkN/f+TsxbOyUIdpdFHW6+WNGYzQRoaIgrJ:sxZbwrMN/f+TsxKg7HbGZ9
TLSH
T19142E9126B349977CCCBD209FA457F93D6F9147396941E48AAFCCA0C05E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 31fe5ea26fddb79d038faab10aa075a82690f4884ba20257b611f198b173dc33
MD5 3b351c5761edf26b2da9976889b47301
SHA1 e0a3b3182bc1b46590594e60adb3247d77a33401
SHA512 3cd8e9e63aaf3c94c12b00525d667527392b1b2bfb9557db51d51138c2e258e1e81f751e090998d908847e4d217511ec096b87adfc074567f44876d31551531a
SSDEEP 192:sxZbwRbyM/jK1Ml8UQwkN/f+TsCbPyUIdpHFHW6+WNGYzaUAaIg5uJ:sxZbwrqDN/f+TsCrglHbG68
TLSH
T1F252E8166A349977CCDBD209FA417F93D6F9447396901E44AAFCCA0C01E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5ba7a717812e54726423a7b9214cc0cb343bacd6e0d68dc8f71ab499c0146728
MD5 36fe5deabb7fbbd10db01167b8da3658
SHA1 23e2cfa2d649a16a8ec1b0b5e8006125025e4a61
SHA512 a4842a6926be56dde9530ba87acfcdffdd5f5b72d4fac448bf367f705ebe1b4e57e8b96a603412240e3d2016264e59c7e5de81f978ce0e64b1527693d19b4eab
SSDEEP 768:bGW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjoroISi3YQ:bGW7kf0Wvqidau1jaa5LA3jTVQ
TLSH
T1BBD20A3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1cbd9ded6ed1f2801983aa1e8b535b8b754c85a5f8b0b612dc65fa1f6d4fa825
MD5 ea4ed3e11cd469185d226c16d89faeac
SHA1 dacc5767642d0fa138fb73190656018f74d9916b
SHA512 0ec9f75fa3627800451f1b31f73298bb75976c1c0944b910e5bcd2ae1e79fa12088afcd7f6e548a4a65759b100e4433f51f9ec1d493a735b918e9886cb099fcf
SSDEEP 96:KIbCKc//iKA83GdaKeESIVICIbIvIlIfIjIHWILIQIegI3IHK4IGgIJIHl:sm4JdinOiU0kds5ySaHgIe
TLSH
T104916456347B46523C7F2D5491A6853B5E8235A33418E4BF7BB810A60F6BE114EFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77c98746-8ca8-41c3-a9a5-c17bf960e98b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\77c98746-8ca8-41c3-a9a5-c17bf960e98b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ceee5465f0fe56654f8c90a3714ebebf9b7272c11aa6477c2e8ee77e6a751c4c
MD5 47afc33bb392b70d75255cf9c709fdae
SHA1 20732a931aabc94b2ced5d8f86961be8c902ea66
SHA512 4cd9d83e60306b22c4499c901d5e4aec41def9062edc5f655f4f29843f4cc2225ec170324762acf2bd3a9c48efbc70475575e5b1e53bf5779730470488771965
SSDEEP 384:KtNn/s3n9SfsNV8DQb17CrdPsq6cScjmwHs:Kj+9UpQlIoc1jjs
TLSH
T1B6928D325D769D6B5EA2A185F4473647CFA841779AC02F44EAECAF0D01DA3FC0327926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 97d82362adf358814dc879cb936ad8f0811b0184aa1dee2ccd86386ee8c443c6
MD5 8881c2b48a9de1fcd69aae0b6bc2cc85
SHA1 28809a29edbfc41fc1123567cfd37f3b5b811b12
SHA512 a7df7b3a650f1a1a3dd203127a0eff89a14a16da476927ad4cdab1402532cf1f0a440d221fc1ec751893b070ba8b3e823bf4d6b0f07b5c95b8d0bfe45bc6f846
SSDEEP 384:kiF1tNn/s3n9S1zsNv8TUNTUlIlhDQb17CrdPsq7cScjmwHs:/F1j+9qGwgPQlI9c1jjs
TLSH
T1FBA27C334DA5C96BAEA69685F9463647CFF841778AC06A50EBDCAF0C01DB2EC0317D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b9fd53f506b99ef44540a69c810285b588d564c7c0bc21afc6bf5309cc97055e
MD5 7161a11e31affe5064aecfa837000551
SHA1 39c9657b77d99944e0f98354c18940a023f5196a
SHA512 2c22aeae2a7d49f86574d32cc4b5a328e3b27814b212d42cd58a1afd5c7dfb02de56bab55e22ad28d161b1a97dd812445f282f7f7629a9b729c7f92e08a9d977
SSDEEP 384:6tNn/s3n9SfsNVhDQb17CrdPsq6cScjmwHs:6j+9UyQlIoc1jjs
TLSH
T1C8928D325D769D6A5EA2A185F4473647CFA841779BC02F40EAECAF0D01DA3FC0317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b32b759eaf4669c2b7e34ba021bdfdc34a1e70c119816529ed22fde8ebc3f555
MD5 93fbca55635aa8b09e749a968c355d67
SHA1 8098f77e29f91752cfff9a79c9e7d46379032603
SHA512 2da7c8add69f67e4b6078c599276b8579474fc64e64c7024124d04bc0a1b24cd706e6e25460ce28553f56283f626db548c6fbea33b30738965cbdd44970320cd
SSDEEP 192:yJONo64BzQmiUyxHe5GBPK1B+FdGw5LGPNqSWwjrqTU6:QONo6el2eUdPsqwcU6
TLSH
T10F1209365CB5AC2B5EA2B541F08736075EA84137EFC47B44E6EC6B1C02EF6AC1307416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6cb216c022730bf6f56555de258a43b44b6bdf59a9154f0b58fbe0008e54d8c2
MD5 75a41a6e945c5903c70de946f806fa0c
SHA1 cacda9e3f08429228023e776fc3762ab4a10fb9e
SHA512 c751fc8757e57326451a23c51402e02fa435ce6dd0ac593a0fdc4b8056ab7aaaea716e633ed28b358173c1f3fe5ad8751f4b17d627b775b25765952b58b4c898
SSDEEP 192:MONg64BAQmiUyY1HW5GBPK1B+FdGw5caDdmCU6:MONg6eAH9WUdPTXU6
TLSH
T1E3020B396C796C6B9EB2AE45F48737175FE8103BEA846B44EBE85B0C01D765C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb24ecf4-8d08-4bd1-8c08-0ef5f3662d55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bb24ecf4-8d08-4bd1-8c08-0ef5f3662d55.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9dcf39e14608eeef3e51c4ed1c8f7d482f545487fabde57479ad9af8cbafcf14
MD5 c89ce515910dce1e98625a4abd793a7b
SHA1 b8b436a5a61082b59a95eb7e09cdc6c9d4669390
SHA512 3f8caedc640efe768b50ad3aa3012e441cf554b6f60ef52d65af5f1fcf6c327b8886b4f7c5c4fea9137b38090e52e0659f15a48a80c50525d40d572624d38dcc
TLSH
T12841F858AAFE1148B7B7BF1AABF6A96D447B79332F06D45D10010D4E0673A40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download