18db7a776c40eac691ff77be6c6fec260a6d623fb80a24d597c64801d2b9e282

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 04:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LWC-Basics-Bike-Selector-Trailhead/detail/detail.html
Size 836B
Sample260722-erecsavxes
SHA256 18db7a776c40eac691ff77be6c6fec260a6d623fb80a24d597c64801d2b9e282
MD5 4b51b88ccb646cec79ec2bc248710274
SHA1 e8f1f1124da682dde6d43d7470406600ffa166e1
SHA512 38b5447ac72e30f206ba6e52898baf2a518e661cca34b136a8bb079bc11500e381fb2f7bc27f8991e28b43ff24affae8858241fc1fd99a5e05aa8d30b57f5883
TLSH
T12E01FC54D4F981154B6D40A91D4196ABBFA0B353CB5A02F5B38CA6721F12D46EF17025
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291670201881952"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{90CD6BD6-0990-4F52-B06A-561B3B834B52}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4700	msedge.exe
4700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 3412	2652	msedge.exe	86
PID 2652 wrote to memory of 2208	2652	msedge.exe	87
PID 2652 wrote to memory of 2600	2652	msedge.exe	88
PID 2652 wrote to memory of 2600	2652	msedge.exe	88
PID 2652 wrote to memory of 2600	2652	msedge.exe	88
PID 2652 wrote to memory of 2624	2652	msedge.exe	89
PID 2652 wrote to memory of 2624	2652	msedge.exe	89
PID 2652 wrote to memory of 4988	2652	msedge.exe	90
PID 2652 wrote to memory of 4988	2652	msedge.exe	90
PID 2652 wrote to memory of 2880	2652	msedge.exe	91
PID 2652 wrote to memory of 4988	2652	msedge.exe	90
PID 2652 wrote to memory of 2880	2652	msedge.exe	91
PID 2652 wrote to memory of 2880	2652	msedge.exe	91
PID 2652 wrote to memory of 2492	2652	msedge.exe	92
PID 2652 wrote to memory of 2492	2652	msedge.exe	92
PID 2652 wrote to memory of 2492	2652	msedge.exe	92
PID 2652 wrote to memory of 4728	2652	msedge.exe	93
PID 2652 wrote to memory of 4728	2652	msedge.exe	93
PID 2652 wrote to memory of 4728	2652	msedge.exe	93
PID 2652 wrote to memory of 1892	2652	msedge.exe	98
PID 2652 wrote to memory of 1248	2652	msedge.exe	99
PID 2652 wrote to memory of 1892	2652	msedge.exe	98
PID 2652 wrote to memory of 1248	2652	msedge.exe	99
PID 2652 wrote to memory of 4304	2652	msedge.exe	101
PID 2652 wrote to memory of 4800	2652	msedge.exe	120
PID 2652 wrote to memory of 312	2652	msedge.exe	121
PID 2652 wrote to memory of 4108	2652	msedge.exe	122
PID 2652 wrote to memory of 3364	2652	msedge.exe	124
PID 2652 wrote to memory of 3364	2652	msedge.exe	124
PID 2652 wrote to memory of 4700	2652	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LWC-Basics-Bike-Selector-Trailhead\detail\detail.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7fff4e9ec188,0x7fff4e9ec194,0x7fff4e9ec1a0
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,12732088806154034109,10731256670229123951,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1900,i,14021759941247981487,9928932769608774430,262144 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,10340712425017232088,11686513477528016386,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,4127374177692433310,13684291559622368006,2097152 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,14820134248679625424,7399701180698513781,2097152 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,12035744772501651457,6182425048215721297,2097152 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,12820663676002729581,9182386075706396883,2097152 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,7597216672980886232,16235717595009190815,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,8450013648477112147,749157111347105307,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9910044244288701693,13710196659330446600,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9910044244288701693,13710196659330446600,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,11002173515985374287,2548493750180901336,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,9690195839590955439,17952353329187722860,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,8494038071085020005,1368373477696207270,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,11038037184128068786,4570731797558748146,524288 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5436,i,4758933372330349421,11082921430758850823,262144 --field-trial-handle=2296,i,4317893887303229892,8584873186461106158,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 432a85485f2e94492b94ec51c3ff2c04599bf0cd59d36158eb206857b91f02f5
MD5 ca62e97ef2c3524f1563bc97d06bffcf
SHA1 392c9d5425f625cd357adf515707107dad624031
SHA512 edd2db0a93fcd2b0df655388a30627af612e623adca9a83f87671db464019d73cc706732092613cc0845cf04394e4ffef9f33da339933ab4677dcfc880733dfe
TLSH
T166710930C6A204E8C7A249FD63C1834039F0C5E9FD872E60A2AC6AF86D467CC83DD138
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 3a33ba08a5235b541fc22d4c8ae35b4c6b4f22c09e78ca9f79e13ab612f784e7
MD5 20b2277c5296bda4862edbd1eed6554b
SHA1 f6ca496ee5314c54fdec25d0d77efb08d3992741
SHA512 3aac37a79a8763429b81334d187f2f87533f0aeca05c6bacc8e0f56ee08f1b6ccf23c1b7ed4ead25101d2c6429fdce45c6857830256ae405680abaa1c0f70b19
TLSH
T14811BDB7C3D585AE894116F06A24AE1BCE1D0602831C3D1989E4EF6BC3E3479D10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1034fbc366090381dcccca45b7ecd0df91bd1eb4d4e65fb3f168bcc267d15fe1
MD5 2995b8d3b09c392319b16434b18d4380
SHA1 cbb4893230d8bdd05813e1569b33538f047eecc3
SHA512 7e50356eee6bc5eb410efc95e99399315affab335826a9df022577da0c73abc8e43e9fecd5d1a52a8a49ad0005dead4194c3b7ed0d7cf4af20fa9d09bcbc71a2
SSDEEP 192:sxZ/R4vkC/fRsCf1HIdpd2HW6+WNGYzQyCjIgrJ:sxZ/bC/fRsCf2MHbGp9
TLSH
T13F22A656AE28A87B4CC7D209BB15BF53E6F95032A1D01E48E6FC860C05E7ADD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9346eec47ce4000d88328f3f4ac48a8c999599ae896f3ea812c675c3a8105072
MD5 dfb12cc115ff8e910c47a5a67b41189f
SHA1 f455a1bb59d282f2759d2b9fe3f9ca150f4580dd
SHA512 989581f9a65bc2cb00f8ef8af547d33b8682bfe56c7c6e008e2de72b1fa9c5761cc5a8f28589e458b7e9432ef99e714f495d7ecac62884c2185922412729f899
SSDEEP 192:sxZ/R4vkC/fRsf11HIdpd2HW6+WNGYzZWCjIg5RJ:sxZ/bC/fRsf12MHbGIl
TLSH
T13522B756AE28997B9CC7D609BB15BF53E6F9503292D01E48B6FC860C05E7ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 863fdd152788dbb20231b453b310f232165ea8623a37becd36f0009df029af1a
MD5 fc725864e087f6ba98f067e503011878
SHA1 6b4e7584f2b7fdaa803635d9b49e4da76bda409a
SHA512 f297e4e7c7646d7a1cb1dd191aab9ab50336e1636e8eed0db38706ec5471b20111e2048d53aff7d098be0f5cb3771a88f6014b1331446b61ad55891e26520ea6
SSDEEP 192:sxZ/R4vkC/fRsff1HIdpd2HW6+WNGYzQyCjIg5DJ:sxZ/bC/fRsff2MHbGpz
TLSH
T15F22A656AE28A97B4CC7D219BB15BF53D6F95032A2D01E48A6FC860C05E7ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d8472d22a6ebe7a159fd8bcd525ff0b33cf0e538e29a670a53b5b2041424aa98
MD5 647c1a3c97d528edad2a15d36b1dc22e
SHA1 d5f7bb165bf261f562ae10e16c15af6de0d84344
SHA512 cba656ba6ffc094af75d29bfa3af40ce42870a5c5a39baeca3bc7aba69d2d2464611b0280dc067e4a12bc487058dc18c44b8e661850f04475b33f78b2c820e00
SSDEEP 768:rjk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBcroy1YBD:rjk7u70WvqiEau1jai5LA3BH5BD
TLSH
T1D4C2E93B740CCB7E4F801E9DEC566F977E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 07b20cb26625db597367f98f49c50c968830332377c093afb98a63d008331550
MD5 800cfcfd8d94187d183faea42815a230
SHA1 285a3316602dd84eb16640771667dfae85d022a8
SHA512 06b3431a7746e9c16fccef1f15513f02e3c9217b8f48f61fbb63f8061a6950acef1c59ef8b78d7c07118ef3e6e3ac5d380d9a3604b958a9fe944d2afb9c13448
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfrIRKsY8HydfIFKEcAM3INKwsc:KIbCKcfruKsY+WfmKEcz36Kwsc
TLSH
T1D6911095353A4A53387F2944A3A6857BDE8231A33464F86F7BB810A51F27E121DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca8b3ef3-3ade-49dd-8d8b-23ec8a452339.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ca8b3ef3-3ade-49dd-8d8b-23ec8a452339.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3cb98079a9624bdbe7cca390781e264e24c2ccbb922b3bf01bce3cf0c238c1d2
MD5 7f553d4895a044b0a79d53c546c4152e
SHA1 38cde3ef701301b9f1a3c78570395e7674d02ca0
SHA512 a527c5386e2dbad581a679722f08f3fbe2316430b87904f862c63b578bd5878b6530368157c2e1ea63afb2f44fcd33f956ffdc70aa4973ce9584f6aa1c88d372
SSDEEP 384:ktNn/s3n9SfsNAKgR1b1l9tdMbkIScjmwt:kj+9U/R1nnkkI1j5
TLSH
T16B928E366C766D675EA25186F44B3B078FB8917796C01F84EAEDAF0C01D96FC0313A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 fc0b010136ecbd71cccd9f21e5813f252df2c9f6ab5dd02977d72ee7a81f5227
MD5 e8497cb42e77bfbf1e50c968f9786bd8
SHA1 0136b021ad1b8708578d55880e222801879290eb
SHA512 fa6ebc2e720b00176f4a59591ae0c9a07105086935d4b935583ae4e33b31046077a5228cdbf632eb74926de7900c0f8660b23d4f7dd28f115fcdfc531760ac4e
SSDEEP 384:HiF1tNn/s3n9SQzsNA8TUNTUlIlngR1b1l9tdMbFIScjmwt:CF1j+9XxwguR1nnkFI1j5
TLSH
T1DDA27D375CA5996BAEA25A86F54A3707CFF441B7C6C16A94FBDCAE0C01DA1EC0303D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d78ba83a75e4e7d6876039c502cd1f1e721cd8dc5322909503707c66966218ce
MD5 babf0adc38e0289d47212b740aeae2c9
SHA1 cf31cd9209ed8598b437dad6f83da751e02b1a4d
SHA512 d01338ca3d02625078252e30d17c9d283e58fcf86efcf84dbbaf75fda1b0a73e56ecea84b80f258f97fd73505a39d0d21e0159d4f9318472717969a30b594450
SSDEEP 384:PtNn/s3n9SfsNAngR1b1l9tdMbkIScjmwt:Pj+9UYR1nnkkI1j5
TLSH
T1B4928E366C766D275DA29186F54B3B078FB8917796C01F44EAECAF0C01D96FC0313A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11208b87decee5d10a26c9264b1908f62f82106120537f3579112933cb3060ce
MD5 231d5ad5b3a52cae32e7942a00189cc7
SHA1 71d1713aecc8ac2e45990cf062acf8dc87acb6db
SHA512 8cc833f843fd8e1989645ff07b64cddfd5beac413e9c45fe0ea69191cde9593db24e03b582939b9f547fc599aeed94a0f0cb8aa1458d82e8c7b95f1b8f1b900b
SSDEEP 192:MONG64BAQmiUy+13RW5GBPKm2+FdGr55aDIZU6:MONG6eAtTWidMcIU6
TLSH
T141020A396C796C7B9EB2AE45F58737175FE8113BE6951B44EAE85B0C00D725C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 25e04f0c8e09964b8e1ccde32a8d4f0bb61e0777ac79e4dd32fef3d4ad14ee8d
MD5 7bee69fcd9bcbc6c64cfc8a31455d44c
SHA1 25f40a406da602a335b8a50773642847512731fa
SHA512 1dc4491971868421784b402808ff26fcfb60c9c0e49e485e5fb1a12215de2d0089da6fda5f50b0ba02689d3af1612e9cef8ecdbca53fdf089145b783f42df7b2
SSDEEP 192:xONR64BqQmiUyj3Rf5GBPKm2+FdGr5VkE2WwdqGGU6:xONR6emwfidMbUIU6
TLSH
T1DA121B366C796C6B5E92B581F48737035EA4423BEB856F44F6EC6B0C05EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

430e838e-6ce7-4c39-8329-03db687237aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\430e838e-6ce7-4c39-8329-03db687237aa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04d1d5767ec3ade9b6755dee92a849a4576b516b54707d61ee415a4b6a247812
MD5 87a3f09fe31af6e39435bdf0d4e39635
SHA1 98835c7ec4e9181aed1fb850fadc1786160f6f62
SHA512 cf8294fa6b5f5b0e2a63433b60bf778bfebcc2d9f783cd1781a12c317e5e3e01bc16573194788610be63e5437d25ed577d78f6208b458e6e2f3d5022e46477dd
TLSH
T194411A5CA6F91104F3B36F1AABF7A86D447B7D772F06949E10110D4E4A23A41C861733
MD5 SHA1 SHA512 TLSH

Submit Download