4311b701c816a38f58fa2352cf34c397e463427e4162ead98248c65a369da711

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
loader.html
Size 9KB
Sample260724-ak48eaxyex
SHA256 4311b701c816a38f58fa2352cf34c397e463427e4162ead98248c65a369da711
MD5 7059ada5ab369d46f983b7e3d7cbd5aa
SHA1 d91b0bddd187309d3dba9c9b9c3b079f3e71dac1
SHA512 0eda35c92e9875e9adee42ffe7802a4dd6f04b8da19287c309cf11b9589c8854afb21515dc16d8487f0b6f635a53ddb800ecf4c177983ec5006150bb1725f578
SSDEEP 192:FAD9ZJZUNvLvSjv6tPDbMayppz7UqNREPnJ:FgTkc9l7U3J
TLSH
T1F222330A964211566673D66C9FB5430CEBB38063DB06E6E93DDC43C58FB6A548823FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3448	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293258423516058"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{2F6F0019-190C-4A80-AD8B-E0B2329A9A18}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
684	msedge.exe
684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2772 wrote to memory of 2804	2772	msedge.exe	85
PID 2772 wrote to memory of 3448	2772	msedge.exe	86
PID 2772 wrote to memory of 3032	2772	msedge.exe	87
PID 2772 wrote to memory of 3032	2772	msedge.exe	87
PID 2772 wrote to memory of 3032	2772	msedge.exe	87
PID 2772 wrote to memory of 4600	2772	msedge.exe	88
PID 2772 wrote to memory of 4600	2772	msedge.exe	88
PID 2772 wrote to memory of 4936	2772	msedge.exe	89
PID 2772 wrote to memory of 3208	2772	msedge.exe	90
PID 2772 wrote to memory of 4936	2772	msedge.exe	89
PID 2772 wrote to memory of 4936	2772	msedge.exe	89
PID 2772 wrote to memory of 3208	2772	msedge.exe	90
PID 2772 wrote to memory of 3208	2772	msedge.exe	90
PID 2772 wrote to memory of 4288	2772	msedge.exe	91
PID 2772 wrote to memory of 4288	2772	msedge.exe	91
PID 2772 wrote to memory of 4288	2772	msedge.exe	91
PID 2772 wrote to memory of 1328	2772	msedge.exe	92
PID 2772 wrote to memory of 1328	2772	msedge.exe	92
PID 2772 wrote to memory of 1328	2772	msedge.exe	92
PID 2772 wrote to memory of 2688	2772	msedge.exe	97
PID 2772 wrote to memory of 2192	2772	msedge.exe	98
PID 2772 wrote to memory of 2688	2772	msedge.exe	97
PID 2772 wrote to memory of 2192	2772	msedge.exe	98
PID 2772 wrote to memory of 1788	2772	msedge.exe	101
PID 2772 wrote to memory of 3472	2772	msedge.exe	105
PID 2772 wrote to memory of 3336	2772	msedge.exe	106
PID 2772 wrote to memory of 4708	2772	msedge.exe	107
PID 2772 wrote to memory of 1284	2772	msedge.exe	112
PID 2772 wrote to memory of 1284	2772	msedge.exe	112
PID 2772 wrote to memory of 684	2772	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\loader.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff84b0dc188,0x7ff84b0dc194,0x7ff84b0dc1a0
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1720,i,440504568088808809,17049202422450951681,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,1779565181840144672,12492422809816570902,262144 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,1573114716645697549,2965528595973326311,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,5452035828732873934,6254889822454211123,2097152 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,229859903468378623,10324636377266557728,2097152 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,7853633280636312609,327041173315939702,2097152 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,7909704265659021116,4259660008123596086,2097152 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,15838792382098627973,14266903952024457038,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,12050629442880336324,17661220009305721753,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,11298794611497911168,6228634801798543806,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,11298794611497911168,6228634801798543806,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,7226309732911416319,15083957579189587974,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,1338001505287711540,15266465326943923622,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,4118972576932894104,1764640096283096784,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,7827679739748004115,1044093487475733750,524288 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,5443320535057080606,17373998148029440870,262144 --field-trial-handle=2072,i,18405493388492257954,9071987675393976612,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dd9e2edeb306c4daad50c933615f61ddd48f70e96e7d4fdfbd0efc203843ceaf
MD5 5fe479f344183c250ff00365db2cdf2a
SHA1 7e71314fed12885660d1c799d5ff195eaddcd9ed
SHA512 af157102c0e90c480e4d3e122edb0dea4f28b73f984df5d77110e27bc3db4c85a660f3fd268cd8c8cb4ab7a691f5412412ebb8afd4e51132a0fd8a48843e55f0
TLSH
T1386181340DDE66F5D761C4F298E10349347BC9E6F9335D4DF290DCBA2A867F2511812A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b3bbcac0c03267c5e4045a7e2dda51f674bcd13b8e1415b6631253b69d541e2c
MD5 771f7bab1e763d84bddb9f8ade90e7fa
SHA1 f090365145d214876589cb37474e9810c0cc250e
SHA512 ccca4e0d4dd239f0c8d753e808d526bfe313e43f64615b6cdef0c10fcbbd85f8e25a7877122f6b92f2c69bbd93a28d867299c8eeb9b5344f566e759c041acaf9
TLSH
T15C1180B7C3D5856E8A1116F09A24AE1BCE1D0606432C3C1589E4FF2BD3E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e56e45965f64dc4c72a89f494506e0a819e2c16050e5b11ea1e4bda610b0f371
MD5 e327a411c3f074adae2d525664dfa981
SHA1 4980cba477d5def4dc4e49e6597e2db4dab38ad8
SHA512 a1a69242babdf11230a5af437773191bf91a8b6c602390237cb24ed01286341e6c14c66438c121758754d2c2833eb78008bb785dd61824ddfc6b18ade3a4aeec
SSDEEP 192:sxZjR5kU/fssO3rIdpdfHW6+WNGYCkdrYoIgrJ:sxZjgU/fssO30dHbGm59
TLSH
T13522B7167A3898778CCBD21DBA25BF53E6F95072A1901E58E6FC860C04E6ADD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7d14ad663d302410fa79607ea5e0f83ac67b4e394a688cbc93d9a83fee4e790c
MD5 5925de586ee2c992185e72e53fa32591
SHA1 313a67265d4bd94c1ac033520b5680a1cfb42cd8
SHA512 f136310d360b61d59244977ba8cb53a30b08810e44f782a1d90d894625a16b4d8d94140be8ae13ba3b6eed2980fea01f6a31c9d62b923a00ffa5dd1dcb6f6709
SSDEEP 192:sxZjR5kU/fssP3rIdpdfHW6+WNGYCkdrYoIg5aJ:sxZjgU/fssP30dHbGm5M
TLSH
T1BA22B7167E3898778CCBD219BB25BF53D6F95072A1901E58E6FC960C04EAADD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 01400cb0e4e0f1a7b3db697231e049f0f90bfd819101d2e2d88ac771a57e498d
MD5 626bc65d80c6c4715d76b968934cdc76
SHA1 0fe2d897074266c65fb9e6076f5f5371ec9ac82d
SHA512 7bb81e26f51d905bc9a803c89030aae27e2e3701f1fa73b76e789dc8d44dcbd9fe562ca285fb62065797d54c3b5993e4665b17670b6ee390d9da8355b55b7b14
SSDEEP 192:sxZjR5kU/fssP/rIdpdfHW6+WNGYCZdrYoIg5wJ:sxZjgU/fssP/0dHbGr5G
TLSH
T10122A7177A3898778CCBE219BB15BF53E6F95072A1911E58A6FC870C04EAACD630740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 352874ec6ccbe748b11332877b1c8179b05802fdf7136440c2ae9f5c57098be5
MD5 35fac06c73c35d41e336bb94324724ac
SHA1 49f46b6002f0f4b002f85f61137795ddb30857d8
SHA512 9325688025b9f4ef81394f8fb791add418a19bda72048e01ba8484e22b4f9e8d12790621d3cdf2c222dacb729a5ce4bd0e58fade3238e0d33273dc0fb205dd06
SSDEEP 768:aOqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrdro4De:aOqbUj+WvSCs6u1jaaZLbWrWoe
TLSH
T193C2E93F340CCA7E4F801A9DDD5A6F972E9802C7A7588D4447FA994C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 62ef2372b335361f2f65ca3ac5bd3f75f51d590ac1a657be0cef18c387fceb2b
MD5 ed4e6448a1904ba5ca7228a2d325e418
SHA1 e4240e5be12af94a442794d1e619991b2b6194c1
SHA512 8d780c314cf27685f0a48ac8630f1c938cf602e494097180a2d3c1849be00257034b03024f92b2ad3b3f3bf64fd2210412bafeea6285f20c07bc4ff610caaf5a
SSDEEP 384:9ZcIhsNY/87roetQGEa++d5uiOObjI9G6w7j7:lh47rEVa73ui29MX
TLSH
T12D929E366C384C325EA6A514F48B36175EF4D1BBE7C82B44E1EDDB0C04DA9AC5306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 058e367e9f4b58e30316bddb7683e0b4541f698c0838203420b98133d1a2da58
MD5 40b1460f4915fcfaa0340a6bd5592f13
SHA1 2645d1b47c2212b4c55982fd5586c254ad974326
SHA512 4fc6cde7b61503388221b2daac11813015a300063e3bddaaa85975557ea12ded41dd3a6e70de974fb4df83817baf9574d9ac9a41ad921c0aec21dd096bdf8104
SSDEEP 192:vONR6Db6QmiUyalHBa+j1+FdCKHRg9xU6:vONR6u5HBa++d5GzU6
TLSH
T1F402E73568785CB79EF26E49F48B37275FD4206BAA962B94DAD84F0C00D764C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3eee524fd22ab0273d7b7f99c864729d48256a5a5c1e03e0e39ab83f60fe16f5
MD5 338b18ba37ada051c47e025e7320b412
SHA1 69862ba60a21fbc41098afae3f794e8dab9141f5
SHA512 a73be82087e79bdb04b03c35d207283ba1c7e4b4af0c8da8cf16b0e24b17d37dbeaef8c91157808c09a9ea63275f0bb808da2d2f4ef3c8e22f3c4485b7e82a3a
SSDEEP 384:FZcIhsNYW87roetQGEa++d5uiOObjI9G6w7j7:9hL7rEVa73ui29MX
TLSH
T19B929D366C384D339EA6A514F48B36179EF4D1BBE7C92B44E1EDDB0C04DA9AC5306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 17ab082672540422f2f6b74c4413c9d61acc2f59d31f43a4eaea7ab398980f56
MD5 f5597676b5993f030de00bec356e1487
SHA1 06741f04dba15c90532b28c7cc84d3428d5146fe
SHA512 f471803a0981607810f22ac091eee1533115865e309a269d5174a5ec855bf03d3a7806de7e1f379a84a4ad91ec37226f23f2bb255fa1d397c030f5f8c62b8190
SSDEEP 384:HFiZcIozsNI8TUNTUlIlW87roetQGEa++d5XiOObjI9G6w7j7:HFQU1wgJ7rEVa73Xi29MX
TLSH
T10DA29E335C688D369EB69A54F48A36138EF490BBD6D8AB84E2DCDF0C00DB99C5307C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2f22404952303e7bd0d4d77a7772a4c24757397219bcc0e7c0cbc2687da6fde3
MD5 3586688fc31b60ea594c65c5469cfae9
SHA1 cdb569b1a1b7e949a5337159a1df127247ffe630
SHA512 93fa7d00f168f08942f8b5906f9c15f3c4ff0cf06f694cefaba09018906cc7a2c7db0684c4e29077154080c960f8d6ae4489381aa8e222538ea4d87c5294958a
SSDEEP 192:wJONx6Db1QmiUyLlSBa+j1+FdCK2bNznqZHU6:WONx6L2SBa++d5+iU6
TLSH
T16B12293678789C775EE26944F48736139EE49127EA8A7B90D5DC5F0C00DFA9C630BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f23074c9-f952-4161-a62e-a088bf21a3a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f23074c9-f952-4161-a62e-a088bf21a3a7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 40a374ae15d979ed9ee194da9c205126c97dac54570419ba1109cc0610123be1
MD5 23ed09958fe354e2ff9806ba6647bf28
SHA1 93ebb847701518b88a3714e7856c25c60695a048
SHA512 30ed6f7f05f3961005433cf571d75a38eeee360795a9341568c43768bebf8badf37c7417e6792426315857b2e9c34af7ef8e11a61e06af50e5185d22d2c547e3
TLSH
T149412A4CAAEA1148B3B77E59AFF6A86E487F7C772E06D49D00010D4E0627B41D861B37
MD5 SHA1 SHA512 TLSH

Submit Download