79750e550e1551b0d10e7461d7e3b787e538d7ec65a58c55e6ea9b37ee0aeec2

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
j/83097940198pwd=Zxa7bbEtlbuIgquGluyd/index.html
Size 9KB
Sample260727-pkgvfaah73
SHA256 79750e550e1551b0d10e7461d7e3b787e538d7ec65a58c55e6ea9b37ee0aeec2
MD5 1a28d2f6d86d0f079d0d44999b9da244
SHA1 02a88bd4bb92384ac0cca0bd368ec7fda7ca2f27
SHA512 ec2172cb0c6dcfd4c40ee83beda879a37e8f2900865a6bbe7d5a23086f3f8929492890fa8aaae9714ef0a7a52a3779baa4006a471c701c1244d148fa78866b4b
SSDEEP 192:rhyPvB6QQxZEAqPVo//TVSBp8VzXxZCUF1:rUycVcjz
TLSH
T1BA22761A8980201695334674EB63A748EAE6806BC386D2D67EDD23DBCFF7540C563F9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4324	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296289169381385"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{125E9479-AC00-4BD2-B234-B1A02F787573}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe
4380	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4380 wrote to memory of 4556	4380	msedge.exe	85
PID 4380 wrote to memory of 4324	4380	msedge.exe	86
PID 4380 wrote to memory of 1552	4380	msedge.exe	88
PID 4380 wrote to memory of 1552	4380	msedge.exe	88
PID 4380 wrote to memory of 1700	4380	msedge.exe	87
PID 4380 wrote to memory of 1700	4380	msedge.exe	87
PID 4380 wrote to memory of 1700	4380	msedge.exe	87
PID 4380 wrote to memory of 1244	4380	msedge.exe	90
PID 4380 wrote to memory of 1244	4380	msedge.exe	90
PID 4380 wrote to memory of 1244	4380	msedge.exe	90
PID 4380 wrote to memory of 640	4380	msedge.exe	91
PID 4380 wrote to memory of 640	4380	msedge.exe	91
PID 4380 wrote to memory of 640	4380	msedge.exe	91
PID 4380 wrote to memory of 2032	4380	msedge.exe	93
PID 4380 wrote to memory of 2032	4380	msedge.exe	93
PID 4380 wrote to memory of 2032	4380	msedge.exe	93
PID 4380 wrote to memory of 800	4380	msedge.exe	92
PID 4380 wrote to memory of 800	4380	msedge.exe	92
PID 4380 wrote to memory of 800	4380	msedge.exe	92
PID 4380 wrote to memory of 2516	4380	msedge.exe	96
PID 4380 wrote to memory of 1116	4380	msedge.exe	97
PID 4380 wrote to memory of 2516	4380	msedge.exe	96
PID 4380 wrote to memory of 1116	4380	msedge.exe	97
PID 4380 wrote to memory of 2188	4380	msedge.exe	100
PID 4380 wrote to memory of 3488	4380	msedge.exe	112
PID 4380 wrote to memory of 2192	4380	msedge.exe	113
PID 4380 wrote to memory of 3496	4380	msedge.exe	114
PID 4380 wrote to memory of 2352	4380	msedge.exe	118
PID 4380 wrote to memory of 2352	4380	msedge.exe	118
PID 4380 wrote to memory of 5036	4380	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\j\83097940198pwd=Zxa7bbEtlbuIgquGluyd\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc3ec1c188,0x7ffc3ec1c194,0x7ffc3ec1c1a0
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,420020941569496940,1877159563436846828,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,14647334598424084349,12059019462237813980,262144 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,551047134468441245,1865149034786378068,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,9180827741957907694,229015080831692806,2097152 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13643685794796030663,4892523365893573040,2097152 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,16145031621895494518,14935638602720178942,2097152 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,9119609448470003886,9119778697040789514,2097152 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,15634329832103774124,8093318683180739593,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,2696098487772993998,2835475050126547676,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,11064188406053497774,15000388811804252412,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,11064188406053497774,15000388811804252412,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,5194233851171244959,12627844987447362868,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,12670818537438255467,14717318187265041183,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,11181098939480426234,10619633290722090810,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,7322357811132250094,14149458829534594560,524288 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5912,i,1436504045767687403,17654404742890739980,262144 --field-trial-handle=2264,i,16210211398966677635,1417163784721494935,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d563b91cafb2f9ed3fbb8187669054f63c7d04a1e12fb5df44398e6e4b909a33
MD5 e7226b1c934ef1f45d89b2e4b641d9e8
SHA1 a62b86dbbc51c13cdd413612af967ecf188fec4b
SHA512 8a0d3be1256388ab293e74936119def6da15809044cb065298e77707d42c23df8233649e92f822284919b45e4499ac97583174b4932553df033c7455a117afcc
TLSH
T12971537427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F324667B1D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5891db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5891db.TMP
Size 3KB
SHA256 a98f986bdfcd8f98c6850f9f8f95531ed427e2bee0f1d4195887d8e74ff8cc8c
MD5 ef63d24af0b92c257ff9e2c2e93ce0a0
SHA1 703642e438b6df2594af98e3fcc2d9c4b003983b
SHA512 3bd4abaa510069d10123dc68508c6c2281f69f1a11367aaa5db9c92ad0ea7a1a5b4d5340e56e172e480d00424da9981dfbf404c2fa15c6668ca3e0e07625004c
TLSH
T1A471527427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 eedfff469a19f6681e104f693fd586b32fb02adb2d042a3b1f4b43126af991d5
MD5 8303f1d854f82af7a0ff7e1bef54f705
SHA1 914e6e69d36d00f77abed1eeb73636a94cdc84dd
SHA512 4cf0b7060127c5cff86215ba29e012f0764ac9b3452dea391b025dba34d048e3627d1cf3373473a9cc98985cfc2ffdc85ae8febf9f1a19e2e10cffb1d5abda9b
TLSH
T1E6318DB7C3D886BE891116F09A24AE1BDD1D061742283C5689E4BF5B93F2471E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8cabc380d87546d6d261285be69abc055af5a030d2d98c347b695088b18d91c8
MD5 4c6326343d61e8990e13d96d2665a22f
SHA1 8e42086808fa4f5ddc9ec147f4a15214552948be
SHA512 b277c4d35120f08c9407d1b37d17dbdb3c5c0ceb69a8fa512d531afd7062f450c939020c9a044b23b731d030f5908a15c5f5b24d49007272f0bd84228c12cb8a
SSDEEP 192:sxZsRmyM/jK1Ml8Mk0/fOsmAzvVKIdpdCHW6+WNGYvr5jTlIgrJ:sxZsYM0/fOsmAz5cHbGOF9
TLSH
T1BD42E852AA74597BCCDBD20DF941BF53DAF51462E2900E44A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff87cb60f29e9d0b5e139e9d5918caa58a98dc3dcdb35d1068c7eba9aa446f44
MD5 953057e9943268745bd907e54cf3fbd2
SHA1 6a78eefff29de33ea2c233c8b604f670e34fcd6e
SHA512 9ec92bc13225df79971dd919b202ccb28a1064f67544e3fd396557814b349fb3fc525e36d5840ead089d8cf46b9e11fd8cd93c081984fe39c1afe58cc9438d98
SSDEEP 192:sxZsRmyM/jK1Ml8UQxk0/fOscAivVKIdpHCHW6+WNGYv0ojTlIg5aJ:sxZsYqC0/fOscAi5iHbGyFA
TLSH
T10152C656AA785977CCDBD20DF941BF53DAF51462D2900E44AAFCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 fa08a12cae17bf2c85a9267f2ff50fcab9c59109711f18599e38351f5b3d5647
MD5 f02bb8487666dc232aefcc9874159e5f
SHA1 c816466382d00b72d2d2a48c19fef9ef90e76980
SHA512 8ed43104ebd71f09355e23d5f1bb968623c0ca93c0d26ee5a92c9989372339e2812757f0f7a01c8d3079a5e11db25b1777637eeb206d972f60e109ba96de4620
SSDEEP 768:igseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppNro6X:igseJ3xWvhfynu1jaVcL88pmS
TLSH
T143D20B2B680CCB7E4F844E5DEC266F966EE801CB57984D5487FA880C02C76EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 a103c830aa33fe48576b4fedc79972924bc74b88da7237bfb190cc3d3ed860c7
MD5 0433b31777d98b9d25b95a743f139b85
SHA1 6bbef587c20803efd61edbf25f64720849cacfed
SHA512 d062e1aa6cb5f56cf5a7cf4ce9b118b862e78b0a24d5c010718000aecb276ffe43361047550d074317bf9c2a244de2cc210b8065ef376a63a00c1e1d3a6ea46d
SSDEEP 192:upym+xasuheOwQxMGsNnhQM1pM7PF1QmiU1ysZ4MTQj+FdLKKSnGNlS8z1Xqm5dh:yBZcIhsNnhM7tTNGkdeKS0lLH5dh
TLSH
T11B625C72DCB84C3B99A7F255F48A36034FF89167E7C46B54E6FDAB0C00D9668031A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ddbbee3ae44cfd1af4f63658b761d72ad20a601ac257a43cda6e2615c10868f1
MD5 b575345f1314b4f4304ab1837ba91926
SHA1 877a105a6054d4d90216e26f0295bc47aaa06215
SHA512 96c7b181724687e35a60227bd3b22b9a5778ce8004d6b4f365d0ca3e61001af91895a975dfedc122fb12664b52d76ca739bfc0b8f5c97a6bec4e3c48b76ebd7d
SSDEEP 192:uVcm+xasuheOwQxMlSzsNnuQM1pM7PF1QmiU1ysZ4MTQj+FdLKKSnGNlU8v1Xqmp:4PZcIfzsNnuM7tTNGkdeKS0l5H5dh
TLSH
T1C4725C72ECB88C3B99A7F255F44A36034FF89067D7C46B54E6FDAB0C00D9668031781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1083346a6e08b3654fc1b99d62bf5105bd177513f8c7196606d404d991a569b1
MD5 fc0e1fd4deda71b4e09da13e5aec9483
SHA1 4677c410b34818c10fad47e75ae4fbde58ac0967
SHA512 bf22cf43182a614bf0c2be7a974984306cf40626f6a83ca2548c9bda0b675a31a34bd2f22993bbbd5bceac25bb4884833c34121aa07f626af5bc56c6fdb72f4a
SSDEEP 192:lONQ6vMtPQmiUyinThTQj+FdLKKSh847eWU/u:lONQ6UtRNTbdeKSJ1U/u
TLSH
T15802F835ACB85C7B9AB3BE46F48A27171FE4217BE6911B54EAE82F1C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3103ff6cfb0d244f6b11e8972b9f0cc91082ea2f4f9831a1fe1a12e6006735ec
MD5 5b56e78223aae20dc138317ea48cd7c4
SHA1 689c624e57ba4c5ec9a87d1b3e9718d54ffe5b17
SHA512 e2a367025335b798c043a95db3a732ba0244d841d14ba89300f923bab858452384a7aa2ce5889dd3b41e36151f91d702cb06e671d193e140182e0174439e9d85
SSDEEP 192:uDym+xasuheOwQxMGsNnuQM1pM7PF1QmiU1ysZ4MTQj+FdLKKSnGNlS8z1Xqm5dh:QBZcIhsNnuM7tTNGkdeKS0lLH5dh
TLSH
T19C624C72DCB84C3B99A7F255F48A36034FF89167E7C46B54E6FDAB0C00D9668031B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 88a2755e440278326a5bc358ec91c53a48a20dd0c62adbf9a9b6869c76a36a5d
MD5 415fbd71ab530ce025c811d514ccb78e
SHA1 dec9a11e2b41165b64e177a5d5f3b0fcb12430a8
SHA512 1509825e2a72c5efeb04ec8839738ae1d9c401e2eb8837b75d4f4a45a103ea114b5d11a579cbc29a0aa32a39ac1bd5662044ab93a230f9c44051f462efb13b4b
SSDEEP 192:JONi6vMPPQmiUyfnShTQj+FdLKKSnGNle80IXqm5U/u:JONi6UPRWSbdeKS0l3H5U/u
TLSH
T1BF120B76ECB85C2B5E93B195F48A36031FE4916BEAC56B50FAED2F0C01DE65C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27f8d675-a78a-4a9d-9866-1ee29408fbd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\27f8d675-a78a-4a9d-9866-1ee29408fbd4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c7c64fe956fe7dfb0f52c63d6df5e71b73b46e35ef12a791ec2baaeab958ef7
MD5 8d8a87926ff005f4817bf7f6319acf6b
SHA1 c73493590eb7b39474fd143973184845991a550c
SHA512 5512b4b4edb85f12b5d5b456db9269ae9bda508e77d3b902702fe133787259c162fd467f9788162878bce4414fb089f7720f7698547aeba525b8448156cad9a7
TLSH
T1FB412858A6FD1148B3B76F5AAFF7A8AD487FBD372E06D45E10010D4E0A62A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download