a566ad747639fb6147bc4dd406751a91b5c073c113fe42f54dddf2f4d6e42ec1

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 609B
Sample260727-plcbcasvhs
SHA256 a566ad747639fb6147bc4dd406751a91b5c073c113fe42f54dddf2f4d6e42ec1
MD5 ad4f665c5e8211f05b972615f58d9b96
SHA1 ef9bec711fa69c91318b0d9c91caded741313c05
SHA512 54cd6abfca5c0061445e558952baa2e3d98e460ffd528c70569cfcb0e4f5614fc169d2237b55f95296fee97e8153aff9f88669e2c6c9031b745a8e614fc45484
TLSH
T14AF08B293A92499480B05234EFE6F154ECA2103BA3104A01BCDD951FEFB5F8498C36C2
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4140	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296287553389388"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{5BAE901E-235E-42BD-8C33-38AFA17D994A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2960	msedge.exe
2960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4740 wrote to memory of 3628	4740	msedge.exe	85
PID 4740 wrote to memory of 4140	4740	msedge.exe	86
PID 4740 wrote to memory of 2420	4740	msedge.exe	87
PID 4740 wrote to memory of 2420	4740	msedge.exe	87
PID 4740 wrote to memory of 2420	4740	msedge.exe	87
PID 4740 wrote to memory of 2540	4740	msedge.exe	89
PID 4740 wrote to memory of 2540	4740	msedge.exe	89
PID 4740 wrote to memory of 1484	4740	msedge.exe	90
PID 4740 wrote to memory of 2364	4740	msedge.exe	91
PID 4740 wrote to memory of 1484	4740	msedge.exe	90
PID 4740 wrote to memory of 1484	4740	msedge.exe	90
PID 4740 wrote to memory of 2364	4740	msedge.exe	91
PID 4740 wrote to memory of 2364	4740	msedge.exe	91
PID 4740 wrote to memory of 5032	4740	msedge.exe	92
PID 4740 wrote to memory of 5032	4740	msedge.exe	92
PID 4740 wrote to memory of 5032	4740	msedge.exe	92
PID 4740 wrote to memory of 828	4740	msedge.exe	93
PID 4740 wrote to memory of 828	4740	msedge.exe	93
PID 4740 wrote to memory of 828	4740	msedge.exe	93
PID 4740 wrote to memory of 1980	4740	msedge.exe	94
PID 4740 wrote to memory of 1980	4740	msedge.exe	94
PID 4740 wrote to memory of 1980	4740	msedge.exe	94
PID 4740 wrote to memory of 2964	4740	msedge.exe	101
PID 4740 wrote to memory of 4784	4740	msedge.exe	102
PID 4740 wrote to memory of 2964	4740	msedge.exe	101
PID 4740 wrote to memory of 4784	4740	msedge.exe	102
PID 4740 wrote to memory of 5072	4740	msedge.exe	105
PID 4740 wrote to memory of 1500	4740	msedge.exe	113
PID 4740 wrote to memory of 2416	4740	msedge.exe	114
PID 4740 wrote to memory of 412	4740	msedge.exe	115
PID 4740 wrote to memory of 2928	4740	msedge.exe	117
PID 4740 wrote to memory of 2928	4740	msedge.exe	117
PID 4740 wrote to memory of 2960	4740	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffc052fc188,0x7ffc052fc194,0x7ffc052fc1a0
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,1402958125491440999,12491175851242062478,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,12646945572782669812,6037998004254611112,262144 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,13727484606523315667,17055864491879331987,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,1001232785669083016,5987685985093422046,2097152 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16798073443806673544,16253202878945654648,2097152 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,12597842764546886102,6873858062863072493,2097152 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,16494228565530294892,9160146513043984272,2097152 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3572,i,10137632419129043731,715457780678517467,2097152 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,3804152641757739208,18352299992170626989,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,342424516897747327,14319657512061913565,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1671039324169691423,7926156211237281015,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1671039324169691423,7926156211237281015,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9210672778254017434,17515771018758562782,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,11214214175553522716,13556214852463360486,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,6501130276567011777,4039726814346525130,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,6069888082471746626,17621630601707486243,524288 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,8350010170259309337,2925179302862111248,262144 --field-trial-handle=2060,i,3442352614730325405,12966966575824357727,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a951528bda4b311f15c4dfa2ebd80c2f27d8a8d1c096a300d9b61a61f1998f23
MD5 506716231641669cd2b536f8ccac4337
SHA1 e388c2e1bb7a020d6e8c512e21d35cb6f3816000
SHA512 e09eff2bb50d57535ca5c7860036465f80991b9976069632fea0b40e516824794619b576f72df4892a2c3526443c46d166e6b188e35e70bcffce999708d0bff1
TLSH
T12A517F3C1A520862EBC10573F4FB9A14B17985DDFA17AE73C6B36D7A6B0A321C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c38a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c38a.TMP
Size 2KB
SHA256 b4b3417fc9bcb6ef3e98093d04ba91734c83f4653c755dfea2c46cc146df9d16
MD5 368f2b4acac2f3fa14f7b0d226423180
SHA1 666f11992eb47e3bc2a34a463d477a8f923458af
SHA512 b41b378f6fcc56bc35fe17576b97e6c2cb703d6d831626480575d15a95bdd7c9791c25b2097f29d80cbf9afcaad639708fbeef13fde26c80be32aaaa589a322b
TLSH
T129516E3C1A510862EB900473F0FB8A64B17985EDFA13AE73C5B35D7A5B0A325C00E389
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e0d3e89f8c89bb97b53dd05f08861038271c436a4dabf8bd976a3244e8d288d5
MD5 4f8d25d91ab690b3a5814e22ea4dc921
SHA1 e82078f26d65e787801acc757eac89e44ab2e194
SHA512 21e2d2e855c1ec3e11c7d11118c25e7ad04f343988e6b6f3d7898161498cd2cc7e3eb7c6096a39df9cb715c98326c5482e555935f7bb5f7135523d8b90a0a5dc
TLSH
T1DB117DB3C7D585AEC91516F06A24AE2BDE1D0A06831C7C1585D4EF2BD3E3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fc9e7214749cd1ea381fa0c72afe4da623203b27c4edf017550ada20174b587f
MD5 0df5bc45c3ada8623bdcc90da1932db2
SHA1 15674425d82a7c9baa6d054bfc9155fdb765db23
SHA512 644d05482a9e4baccb79234ff15f82035f772982f0ddf3c7f45a108ed5bd335dc31c77a4d385fafd6398364cf70c2d5f6ae4039ca045896e08970d5a674832f7
SSDEEP 192:sxZb0RRk7/fBsDw4BIdpdQHW6+WNGY9IK5srIgrJ:sxZIk7/fBsDwDGHbGl9
TLSH
T1F722A7166E28A97B8CCBD309BA25BF53E6F9503291941E58E6FC860C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 253f1a16913871d366c319d1902b1386e2bb871718a19a1c7ee1834fe1069f0b
MD5 bfca8dfb009c95b5ed1698d353db0325
SHA1 14075870359c3b2ce514664715e32d81dd0cbf41
SHA512 a7a18cc4aeae19d3f1c6e0a8d86caa558d1cde88989a63e59755e55698b815143d2cf79c249af60a1d04cc93fb8defe2a11fa6db8148e73f73e424ae0a30765c
SSDEEP 192:sxZb0RRk7/fBsNw4BIdpdQHW6+WNGY9IK5srIg5pJ:sxZIk7/fBsNwDGHbGlZ
TLSH
T12722B716AE38A97B8CCBD309BA25BF53E6F9503291941E58E6FC860C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d64c853064cdee1363cc112d0037cb6b48d7a9c826d220ce179d0bc29da5debe
MD5 b9a3b1dc6f97712150e6cbf69d5e3012
SHA1 50c5c5478ee8233d42ec4bbf16674d85be55c06f
SHA512 97deab3a92d6d1da89cf9bfa869dbf21174b82f8ab2d7dce779e6de66ac4fe930a51d80e752369231aad1250275e5b5deb0a4614bf7eb6364b744258125f1ebe
SSDEEP 192:sxZb0RRk7/fBsNg4BIdpdQHW6+WNGY9I0/srIg5TJ:sxZIk7/fBsNgDGHbGbv
TLSH
T1D222C756AE28597B8CCBD309BB25BF53E6F9503291941E58E6FC860C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 48862174fbad60a83ea46b7a767b14d70f0856761c374c362b764824dde6a644
MD5 4047fbcc1724c876e29dfda6ead3c99c
SHA1 926e47d454dfa261be09dd9aa01ae7aceabc6044
SHA512 c3218e022a56b0183f71fc213b81e2ebbc23d3f3dc3707969a04a8fd258becd02bc974f28c69e61c4e09a4449b45716640c9499c04c9ec8f79fb7a6f1bb76ed3
SSDEEP 768:1PyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7Krooebqwx:1PyvIZwWvu+Q+u1jamFLeR7hoeD
TLSH
T1ACC2F92B240CCB7E5F801E9D9D1A6F9B3EA802C7A7588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0538d96eb80cd55d4de32bfb1b70722b9765981767960447b7defd1996526664
MD5 d56aebe3d47d89987de6e583e98e09e7
SHA1 e944c575a1633ecad9d743c4aa74512c6b907d69
SHA512 8b3de97dc1f66b7eac98d56ae97d4df8aee19e268d89a2b197726c97a0ba163696d4ad4c1c73453424ebb47b70213c2cc98a2f14e4befa389330402b565d3d83
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDihGMKbC+uVGKe8I:mTpDpL
TLSH
T10D916F46707A0341387D6858A252D53ADE82B06B755CE4BB7BFD10A24F6BE121CFEDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 02dbdf0b013579fe19a2b79b78fe5c2c15247def5079da1fc1567bcea3f9b1be
MD5 e954fac555d0c2646ed38930f6ebc475
SHA1 d975d38f2e214038369ab524b9dd8a0c6304530a
SHA512 7c66af8511e60d893a24e60c916348980420a8fcd9a0cdafaec5e03c0780996ed1e4a63abcdfdc1a179c1ed51d043ef217b252ab4131194e7969a8e3f449ae46
SSDEEP 384:nsN8tfziJIXe+C9d6NXexdyOObjI9G6w7bG:nBvOFfdy29My
TLSH
T15C725C36AC394D779BA39651F4873513AEF4927BDB892F84A6D85F0C02EF2AC1306415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c1a95dd832d751439ec154ca4667b52e82238ccd5a5f1210bfa14e6b37df21cf
MD5 3b4064ebab67c52b2453eb1c6ad2d654
SHA1 a9c2cc540c76d517732c720599380024d03b81b9
SHA512 2f8a1e1a8722a42e250db404880ec10ebfcea7611dc56e189a8940ea3f4c483b351c576b3e594b766a5111e9754d9aad994e8484087abf974effd28fd10aaef4
SSDEEP 384:IZcIhsN8NfziJIXe+C9d6NXexdyOObjI9G6w7bB:2hhvOFfdy29MV
TLSH
T169927D36AC390D769AB6A651F4C639135EF89177E7C82F84A1ECAF0D01EB6AC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 f61332eedf9df57c3730b37c55fa365151b0517d8aa64ec39fb9d21f5215ea63
MD5 63b8adfbf1f6daff0d2c31ad8e8b084d
SHA1 50f4408e541e40e2499c8ec5f31225f2b425b935
SHA512 7bd495492b6eff745f9d46d574cd534a5e23ce3645ed4f7d00434b0ffb80f29935a9828f5fb716f94cdd0611cad9d07471ed69e7787b23a076872d235207ba22
SSDEEP 384:TFiZcIUzsN08TUNTUlIlyfziJIXe+C9d6NXeedyOObjI9G6w7bB:TFQoZwg0vOF4dy29MV
TLSH
T185A27C379C64897AEFB69B51F88A35139EF49177DBD86B80B2D89F0D01AB1AC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dbed7c62d7d64b0a78c8ba4963e3585beb1183ce7b31bfaaa6b623e0f31a10b1
MD5 e18721df310d4361c958c0f727a9f8e1
SHA1 e13987f0042afa39bc7aa12698c8a54aec8fdf98
SHA512 f220b373f0bbf666b1bbd225189f1c3fb64d111aa2332cc3200ff2c58d1ff1382e6481016067e9bb663241784001806a4ba98f314524d811164dcb48e12ac770
SSDEEP 192:JONWS6v+YLNQmiUypQZh+CGX+FdeNNmusOpU6:JONT6vz/HZh+C9d6NIGU6
TLSH
T1CB02D835AD382C6B9BF2AE05F48737135FA4217BEA952B90D9D82F1C01D765C2306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6dfba987953fa029b127bb7fd09a33f11a1edb04d78a8b7d6f5cf5fc8a205d5f
MD5 870a777f16817a26bbbe72bef7af17f7
SHA1 5524b5df842bec3e3123c5af085170e9e6913793
SHA512 f4010a7e416830264d1ac9f8cbbffd4a7c3c1153afd4d2ffb806fc752e1d2e998f5d4a3a702adad4bebe841272d230647030078fcfb0634240e400403ef094d1
SSDEEP 384:DZcIhsN8yfziJIXe+C9d6NXexdyOObjI9G6w7bB:bhCvOFfdy29MV
TLSH
T1CB928D36AC390D779AB6E651F4C639135EF89177E7C82F84A1ECAF0D01EB6AC0306415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 45875769487887bc4d61dc24e2652ac60ef16c60fd479d3f987fcbde40ef44da
MD5 daccadaaf5176356b5ad1fb648b6c75a
SHA1 eb227fa55592f1862d1db41f5fa7479fb8b805f5
SHA512 0e1e637f004d5bfd47f1b96baa95a85beeb69eea0d5bfec027a3bcc281aeedeb706bfb4f3f3ae498454e787752ea956d6e449a0b594778e75a8a1419fc9f2d13
SSDEEP 192:oONl6v+YLJQmiUycQlh+CGX+FdeNNkGQNdCHvqV6yU6:oONl6vzDUlh+C9d6NXeKdyU6
TLSH
T1FA120C36AC785C6B5EE2A641F48336135EA45177EF897F90E5DC2F0C01EF69C1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4979ef8a-414b-49c4-8b7d-c199725d33ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4979ef8a-414b-49c4-8b7d-c199725d33ab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 29811dde49107215635fb0bc7bffc8345948ff0f8a6e34c9cbebb1caa3a45f19
MD5 15e5322f69754b220a73f6b37a271d98
SHA1 593437abb8ba4926c6e367af3a64ed20f674bbc9
SHA512 ca7f2d9cff1afd4e9539a8d168cea5c2dd9f0922a8b241746e80aab4a8545809c7f0a45b67ade8b5bb30eeda6e3c77ee19cdf5525323f756d1d4ae7c2c8d21f4
TLSH
T114414D58A6EA1118B3B36F56DBF6A86D487B7D772E06D45D00010D4F0A63B41CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download