2feabe91feba42214891dbfd04cde4970c200e27c65d7e0b682e70c7e9d007f7

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cp_errordocument.html
Size 10KB
Sample260722-pfl9csvana
SHA256 2feabe91feba42214891dbfd04cde4970c200e27c65d7e0b682e70c7e9d007f7
MD5 c98a0329551354fbef1e6202681d570d
SHA1 574599da747937e3015316c0073732a626d2cd63
SHA512 9877ff50956b470fb426ae75dabdd502c7d3f283f39e3eff9cd7fc6d6a8b2e05488a02c4d00064e0c282c5d54ba7068f3b1760c70db51d7e596c4253344544e4
SSDEEP 192:93lYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93A:vVGaRF8I8UB3
TLSH
T18222735737E3001F744361B567BE2601BA29A943D22FCD603E4EF2A5DF869818D9374E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291961903733329"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{87D1CB91-ABDB-499A-BD8A-B0025E7C56BC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe
1936	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1936 wrote to memory of 2356	1936	msedge.exe	86
PID 1936 wrote to memory of 4052	1936	msedge.exe	87
PID 1936 wrote to memory of 4876	1936	msedge.exe	88
PID 1936 wrote to memory of 4876	1936	msedge.exe	88
PID 1936 wrote to memory of 4876	1936	msedge.exe	88
PID 1936 wrote to memory of 2304	1936	msedge.exe	89
PID 1936 wrote to memory of 2304	1936	msedge.exe	89
PID 1936 wrote to memory of 3552	1936	msedge.exe	90
PID 1936 wrote to memory of 3552	1936	msedge.exe	90
PID 1936 wrote to memory of 3552	1936	msedge.exe	90
PID 1936 wrote to memory of 3808	1936	msedge.exe	91
PID 1936 wrote to memory of 3808	1936	msedge.exe	91
PID 1936 wrote to memory of 3808	1936	msedge.exe	91
PID 1936 wrote to memory of 2820	1936	msedge.exe	93
PID 1936 wrote to memory of 1340	1936	msedge.exe	94
PID 1936 wrote to memory of 2820	1936	msedge.exe	93
PID 1936 wrote to memory of 2820	1936	msedge.exe	93
PID 1936 wrote to memory of 1340	1936	msedge.exe	94
PID 1936 wrote to memory of 1340	1936	msedge.exe	94
PID 1936 wrote to memory of 1228	1936	msedge.exe	100
PID 1936 wrote to memory of 3316	1936	msedge.exe	101
PID 1936 wrote to memory of 1228	1936	msedge.exe	100
PID 1936 wrote to memory of 3316	1936	msedge.exe	101
PID 1936 wrote to memory of 3448	1936	msedge.exe	104
PID 1936 wrote to memory of 4692	1936	msedge.exe	113
PID 1936 wrote to memory of 4624	1936	msedge.exe	114
PID 1936 wrote to memory of 1820	1936	msedge.exe	115
PID 1936 wrote to memory of 3948	1936	msedge.exe	116
PID 1936 wrote to memory of 3948	1936	msedge.exe	116
PID 1936 wrote to memory of 5032	1936	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cp_errordocument.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a4,0x7ffa394dc188,0x7ffa394dc194,0x7ffa394dc1a0
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,14660785065442459314,4808732915094338977,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,13256859228263167584,7587291279863356930,262144 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,1865338560005727645,4660778261588202317,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,6978907550787882707,3161070474577653280,2097152 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,3019942995461310268,13512762002794431166,2097152 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,17689181660371667109,12358229841002167998,2097152 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,1805914609585303289,16880759416617770984,2097152 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,13286525713668868123,16158260385700501159,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14248448687456038970,17606344860367030074,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,9271612380670055060,10707011966997162230,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,9271612380670055060,10707011966997162230,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,16372632931373387200,12690475862512759911,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,15152925182597208195,1615134615358175123,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,2822879227855279906,14608006233628730421,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,2539645844624435135,8370387740198390267,524288 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5092,i,6549869398805395489,16083061441892703587,262144 --field-trial-handle=2100,i,4642691166309384743,7714487393218051434,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 badb561b004e743b0d2de0fb20ecf7ca63858f9ec5151432d863fbe3118ce893
MD5 c221b7a154302f572287d71bc2ded860
SHA1 094b50b1b3f374dc1a6c00549414b92b89f665fa
SHA512 9f4a21dd718046906be7fc1f571939600a36bf71e8aa65bc4219d685a84e02246f2abd7ac36c9dcd10b18d29c3fe231300d85ca10bd60df01854ad8977ea85a8
TLSH
T1D4713D3701C940C2D796013A54F26284F8BD82EAF53FDF5550F7AABE4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58afd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58afd3.TMP
Size 3KB
SHA256 62a4041e62c4e4435342afc33d15fb2145d017a757f358499fabfc3e6df6dd9c
MD5 5a3daeaed7e7f64f04940f694e9a1b46
SHA1 1ba244cace4a5c78198c114c2edeeaa50426c74c
SHA512 42a45e51faeed51d9ef7947e671ea79fb118d4fca6986ff71687c193f0d6259bcf52a411d27cbf16c28a736aa3eab45d7b1a6bb2e1aac8dab3270e6c0537188f
TLSH
T1A7714E3701C940C2D786013A64F16284F8BD82EAF53FDF5110FB6A7E4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 53f660ce846db8c12ce6e081d43c6078f10f8bc6db9d2d9f3d7ae5d98221b956
MD5 8454bca9c7b662c39706aeb60ec49765
SHA1 f93d7c0d2c4321c3161969cbad0151a4c048912a
SHA512 9c2b64d25e8b39a0915a0d5feaf2e44d9522ec9096a6820dbdddbd111c01fb14d8a267d71a1e99679c8bf273170b7771ed695adfb61544e2f816140c50034850
TLSH
T1B90168B7C3E4956E8A0052F06A18AE1BCE2D0546831C7C5AC5D4AF1B93E34A5E2018AB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 436e6bdcd562aa9abb7f9ba33d3ae83a4c9df91d08662192725e8773f38f8def
MD5 9afadf3b87eb2b842a15dc12f06baca8
SHA1 5a073283d25b1071cd9aacdbfdaf8744d1bbc801
SHA512 583a1a3a2c3c8208ba43341e15211ffc8a30f6a0e703648edd4de49149dd99a4a41deb5e0bcba8e688ff64e54e43ec0afb7cf311d01acc4e09e26df753e5c4ce
SSDEEP 192:sxZ/R2yM/jK1Ml8Mko/fCsoxJddIdpdeHW6+WNGYzQp3+2IgrJ:sxZ/4Mo/fCsoxJQkHbG119
TLSH
T16B42E9166A34997BCCCBD209FA417F53D6F94572D2940D44A9FCDA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aee61765a96b99888c10e0df33225fea4c3bc694b194b37366a52f00017c5e47
MD5 cc09af259c7cb48023ef1bf0b380b4fd
SHA1 16dd80d5dbfa60eedb3a7cf47d40df4b07f02fed
SHA512 cccdf6f1b2175dd1fb209030f6c1cfdab7a4bea45f660187b9340f9625ca31118d6bd54be4689cc7e3a2f1efab35837228edc2862fa6d021304ae1f854c1a09e
SSDEEP 192:sxZ/R2yM/jK1Ml8UQuko/fCsJcJddIdpHeHW6+WNGYzXM3+2Ig5ZJ:sxZ/4qFo/fCsJcJQ+HbGP1l
TLSH
T11D52FA166A349977CCDBD209FA417F93D6F94872D2940E44A9FCDA0C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ca1989daaad0ecff2acbc6cdd716a459a39029c69f144b2883e60b7ebc3d0b95
MD5 d2cdab47344b0ae42adb761a85d84367
SHA1 a57fdd78c8a343ebbacdf0106e2d5ad3cc9c0118
SHA512 d859fcae53944380236e595bb0e25e7637e9c0f7887f9cd12de18beb764cb6d6b3c6ab94605edc95cd90847c289b8f85ba411f1e9c2e4836941e9895c613e9bc
SSDEEP 768:viW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjMroIJiVY+:viW7kf0Wvqidau1jaa5LA3jXU+
TLSH
T1F4D20B3B680CCB7E4F841E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ef6925a13caea85cb7c7c839dfdd85702ddd87b5e390bf229cf90c2823efc658
MD5 a0f3bb23714444ca642c6b362c194561
SHA1 c3f8a28b2b59954d4fb05188d22455916449b0fd
SHA512 acaa9e40ac56acadb84726fade82a36728cef9724b9010653aad2a53441f2ea297415212bcbece30ae91c27dd76be053504fb825bf8f76563ed053aeb45159ab
SSDEEP 384:stNn/s3n9SfsNDUMwDFbR5RbM2dJScjmwY:sj+9UFFjxzdJ1j0
TLSH
T1FB928C776C699D2AADA29192F44A37075FB841B7D6C02E84D6EC7F0C01DB2AC131762B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d6e76fc332eac056a40218e67bda1f461a7748626b33826bd3943b9f0d8f0744
MD5 ebc7fabf4a19cbd7703f77ad9cd4254e
SHA1 b3987211efbd8c00b439d52b9f683a3342cdaf34
SHA512 44ee63b5abd3963d42fec3d2e6368032e4660fe21614b18486321abfda1c2a2f1196c5c3cc8d3072545360adea5a08576c8de43371d86def8afad5127e7bbe5d
SSDEEP 384:OtNn/s3n9SuzsNDUJwDFbR5RbM2cJScjmwY:Oj+99IFjxzcJ1j0
TLSH
T14F928C776C699D2AADA29192F44A37075FB840B7D6C02F80D6EC7F0C05DB6AC131762B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a9a75357075a76f3102fa44c64f20a663edd4742c658cd398bf793775ff7e7e
MD5 9dcf14bd611407eae332a06e9a45c992
SHA1 ada7497a13d0d2b14cc53a45019495a26795da9f
SHA512 f87689d7d7d2562b3a3f97d543d2eb450c412e030c424b4ca6c835c4844b494905ba91ab9f78c4dd20b2e97e263cf0d3348f36656c67a743883356b85c3fa19d
SSDEEP 192:MONo64BAQmiUyy17W5GBPK7hCI9waDrXU6:MONo6eAZNWQM57U6
TLSH
T14F0209396C796C7B9EB2AE44F48637172FD8117BE6845F40E6E82B1C00E764C230392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 391cd4edad0549d767f3169cd4c50903a882981cb85d440bd8bd3dfc364a81bd
MD5 4ffe5c8f7c957674109e6c2e46525347
SHA1 7adb53b552488692c32a0a5e9616a1adeaf841db
SHA512 982876a362f5e2b7c47deed6af67e156460291c7fedd5ac39236eac8adfb52d7a19778ccf5e45dfbb0e7394bb5a985b0a4e72607ddf961a5e14d564bbb027c1b
SSDEEP 384:BtNn/s3n9SfsNDUJwDFbR5RbM2dJScjmwY:Bj+9UIFjxzdJ1j0
TLSH
T1F2928C776C699D2AADA29192F44A37075FB841B7D6C02F80D6EC7F0C01DB6AC131762B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3d69d82dac6ed8786625f301cd8e61197de00eb9fa2673c26d67c5aac8219ca7
MD5 81f964a380f1fd7764d212e1fec28d28
SHA1 626a71640832937bb9d14eff1504960d72537058
SHA512 3ff3e555cd87665bc07af00a5eb9805177dfb1285088a5592b626cf6aa238b76b8229e3239e3afba05408b17376b558d8dd41dfb0ee969e467df91f894425b17
SSDEEP 192:FONTV64BcQmiUyi7j5GBPK7hCI9jlEVWwHqSU6:FONx6esPjQM2ZJU6
TLSH
T139122C766CB8AC7B5DA2A191F48637031FA9416BEA846F40E6EC3B1C05EF65C230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 222e80281aae0b0f6540543c5486240e4d2a91fe56406773d8d66c5eb467f734
MD5 a083aad315d576bb841bf178c6bb0bc5
SHA1 c83c2b5de0ad69aa9e7868e3c45236ec34bd25de
SHA512 83964592470ca3ed62128ff087f8f17c4efd1696da0e130d6703ba69c1ac54bafd9a69dd045d8d4442ab0d173a0e0cfa557cd9567191185b8673a047a0e38414
TLSH
T19F412699B6E91148B3B36F1A9BF6A86D487FBC372E4AD45D10010E4F0A23B00D9A1737
MD5 SHA1 SHA512 TLSH

Submit Download