04dc3338fab6246ca15248adc0532deaf29b6f6d6efea66dd7d530218063845c

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 13KB
Sample260728-amn9zaea49
SHA256 04dc3338fab6246ca15248adc0532deaf29b6f6d6efea66dd7d530218063845c
MD5 dbd3ba8fbfb8cf08c6207da462ebc303
SHA1 6d9251c966c92a4dce20fc5b317b4c6342a5dc17
SHA512 cc7da7cf051b8990e660aef4e3ee79f6656511f567423689d0e2c004af656de20af0ddc7db80f80b4af7284ca7bb2d0146b65a31acde83b03369434b5b8a88a7
SSDEEP 384:/1kdkA9kktlQ7eR8XqIdK3Up27o7ETWZEjqR8mjESxcb+dIc0QVzkaa:mRQVzha
TLSH
T181529D18368D917F06530393A83577B8E86FCE77D6724A9270FE1337BB51A158C2B06A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3476	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296716033313943"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{DA4941CC-C584-4DCD-AEF8-0F228630D635}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1060 wrote to memory of 2972	1060	msedge.exe	84
PID 1060 wrote to memory of 3476	1060	msedge.exe	85
PID 1060 wrote to memory of 5108	1060	msedge.exe	86
PID 1060 wrote to memory of 5108	1060	msedge.exe	86
PID 1060 wrote to memory of 5108	1060	msedge.exe	86
PID 1060 wrote to memory of 4384	1060	msedge.exe	87
PID 1060 wrote to memory of 4384	1060	msedge.exe	87
PID 1060 wrote to memory of 3176	1060	msedge.exe	88
PID 1060 wrote to memory of 3176	1060	msedge.exe	88
PID 1060 wrote to memory of 3176	1060	msedge.exe	88
PID 1060 wrote to memory of 5000	1060	msedge.exe	89
PID 1060 wrote to memory of 5000	1060	msedge.exe	89
PID 1060 wrote to memory of 5000	1060	msedge.exe	89
PID 1060 wrote to memory of 4732	1060	msedge.exe	91
PID 1060 wrote to memory of 688	1060	msedge.exe	92
PID 1060 wrote to memory of 4732	1060	msedge.exe	91
PID 1060 wrote to memory of 4732	1060	msedge.exe	91
PID 1060 wrote to memory of 688	1060	msedge.exe	92
PID 1060 wrote to memory of 688	1060	msedge.exe	92
PID 1060 wrote to memory of 2404	1060	msedge.exe	96
PID 1060 wrote to memory of 660	1060	msedge.exe	97
PID 1060 wrote to memory of 2404	1060	msedge.exe	96
PID 1060 wrote to memory of 660	1060	msedge.exe	97
PID 1060 wrote to memory of 2056	1060	msedge.exe	99
PID 1060 wrote to memory of 4892	1060	msedge.exe	104
PID 1060 wrote to memory of 4448	1060	msedge.exe	105
PID 1060 wrote to memory of 3500	1060	msedge.exe	106
PID 1060 wrote to memory of 2912	1060	msedge.exe	107
PID 1060 wrote to memory of 2912	1060	msedge.exe	107
PID 1060 wrote to memory of 2880	1060	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb719fc188,0x7ffb719fc194,0x7ffb719fc1a0
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,14896306170052807994,18086995936851774483,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,6053067367884478645,18966692872566674,262144 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=1768 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,10377859065469125342,5554022523778284777,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,1570127833517691778,1818819239784440237,2097152 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,4237705069058613683,14013220515137215880,2097152 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,13257153199416678293,5793639983757557983,2097152 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,384711296039929672,5191872355182927517,2097152 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,9863196556572514023,15533039137928291362,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1620,i,17284233419910234759,3593868050967289949,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,5502319189122500867,13813910033140287220,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,5502319189122500867,13813910033140287220,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,18217904767268780108,5969140300388243254,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,12611974892933557557,8114372157460956290,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,6627740930517103954,17849835573548457482,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,17395829141063422496,3855815163998202356,524288 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5236,i,11452129384856456776,7406905303462102748,262144 --field-trial-handle=1772,i,9595053958624175519,11646807340279977675,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2880

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 60b063b06cc652fd3cb04e6a533769f0db4b448f486b21acf7189dfd8fdba6ff
MD5 99b9bc698ca4b553e1ca0d46f0c754f9
SHA1 f0cc25cdcad59c0131b29522aa8cf6163ddaf107
SHA512 42983f8dbd2a6d9b3fc920bfd78234c1dbd0ce98763f85152a28ef077b3d3ec93a631dd2c5b213a3d168ffa705bb0924ae8cda3d971fcc47966d10e43cbdce08
TLSH
T12C7119370BF70062DB65B7B1ACE0C1033475C6C7F527AE66ACE4AABD1D187518D98009
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587e34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587e34.TMP
Size 3KB
SHA256 91a77bac67a0822268e05b52ca1aa2414f574e7067fce0442f62c19ebef20e87
MD5 d1cd0bda0298d8398b05f9a9e1bf4b1b
SHA1 15d366089ec8c4052babe8aec913e08b5ebff3e8
SHA512 81da478b4eedbdb85e2649ea5e9cf9474869153a17553cf82c5f7c89eb1463a260ee51622c0232610962f79fb73ecf396cf01c2dac4a2c2dfc13907fc4c379ab
TLSH
T1FB7119370FF700A2DB61B7B1ACE0C2433475C6C7F927AE66ACE46ABD1D287418D98008
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e0f4c6b68f6978aa8a9e78da45ba9025d0f08141a2a0431c4804870f980a9638
MD5 b27b38946a96ce919d553ce9ff3a6347
SHA1 37128eaee24ba29a95d6b9b666fdf843051ce597
SHA512 15821086cd8553e4a55cadbaee89d98d7152883f67efc08264d38b300ba22245401cd43b6832ef5eefab5e94519be701e379f1b1db5293ccc0d21b1b564b6145
TLSH
T133117DF7C3E585AE894116F06A24AE2BCE2D0905832C7D2989D4EF1793E3079E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a29a4697da20814c7fed107a16cf03625ed96df52517613f690d4a999525b0be
MD5 5e4fbc62e7c5b81070e775c8adc3620b
SHA1 e9e862cfdec21ec6081a750f9ae8816fe8c3af2c
SHA512 1b633de16651d7022701892ab6d9472f7590d2a266c3c54261ea1a4cfe200e87c295b14bf0e916f254f5438aebe3e31cdb181ffb4a1dd24c54f622b64e71bd00
SSDEEP 192:sxZ9RDyM/jK1Ml8UQgk8/fmsYe2IdpH3HW6+WNGYIGKZ+ZIg5DJ:sxZ9lqz8/fmsYe3XHbGnSH
TLSH
T1FB52D716AB345977CCDBD209FA55BF53D6F81472D2901E48A9FCCA0C05E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8849485ee3c8b4ec4143704ab48a80e019fb3a522ea883c25e4eac4b6c5a9e4f
MD5 8be6b91800b87b5023de49e263fe1491
SHA1 12b11c964a73f7eeffef54f978c2173de272af00
SHA512 6f58cb6da518da7c4f9772f9d8910e8fb51415427a1f96acf2681311908de9965d5e6f4aa8bec97e32edfdbf584c850017b6eac746a0fc2824b6ce74a1143135
SSDEEP 192:sxZ9RDyM/jK1Ml8Mk8/fmsGw2Idpd3HW6+WNGYIkXZ+ZIgrJ:sxZ9lM8/fmsGw35HbGKS9
TLSH
T18542E816AB345977CCDBD209FA55BF53D6F81472D2941E48A9FCDA0C04E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bfbfc07a95306cbd5e74138c1836c9ead91d2c0619e4c2d52392e4fa0b10fafd
MD5 40a521c70a0e03ba25747763f1300f93
SHA1 36582d47b48dd56e4380bea7cc78a601e1993009
SHA512 80bcbd015214be923473c4bbfc457414bb8fbd1566c78f2760d9e81cbb3a632bfabf759d5ee8f6a7c6181f223fb505c2eb7f20c8f0d6932e95375a72ffe492a5
SSDEEP 768:vXsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Mro/iJh:vXsqxXlWvJD6Tu1ja54LAs9X/E
TLSH
T1F1D21B3B694CC77E4F840E5DEC26AFD66ED801CBA6988D5447FA884C03CB3EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6342001-f7cb-4b66-b4ed-a187d164a62e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6342001-f7cb-4b66-b4ed-a187d164a62e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bec78d4007ebcdb4986b48a2091071dd93d2a87cf1fe3ba82be74944c2e598ea
MD5 e8506975dd0b85d3c26ff30e622ba909
SHA1 fbc022f529800db284ff406c27a1a1efa8114426
SHA512 074700f98921066712c31dcedb5a5af2f35334b5f5903578360098ba50822a3477a77052ff97a5772ef89b8bd9e20ce5b32ea9264604b5b8292110cf672d6347
SSDEEP 384:AqZcI6zsNPUrQVqb2BlVRNPOwG9O26OObjI9G6w7dUJp:jSIV9LHPOwG9/629MI
TLSH
T1BB929E72AC348D379EA7A515F58A36174FF8A17BE7C86E44E1DC6B0C01DB9AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2af30fd6c2b7823c46ab4ac2881306bc126a05aea82ef77e760d46bf879fb960
MD5 4b2396f73ec330a6a670be3037727a95
SHA1 6ae19a3916977dddd27820d4b3ce295cb4816200
SHA512 363e1d0ebd5b4d114f22ce29e72d2da481d0db9e8dab57a1c1cb9a947f82904ec835dc4002cef67be6eda7b12d3a0aae46e30d67be3cd423c8f5612b34e97c49
SSDEEP 192:tONY6JkRtQmiUyf1W+RNPOmlhPXh3JRmoU6:tONY6UrqW+RNPOwvTU6
TLSH
T12B02D735AD381C7B9EE3AE09B98737175FA4207BBA952B80DAD81F0C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c3e12b5f9a8b68ec1ae8b81fe1ca17a7f316cacaba471a725afc99853926803a
MD5 5602637673e113a8aff986a6cf2c005b
SHA1 2f218c6a17c74fba58dd837cd7c53fd02eedf235
SHA512 910e6c4ff45e97c2ad0d64688703ba4012c07592644e835c23928f9d4e912181794c05e07cad989bc20f7b4895dab5d994837c4639f0ddc1aa0d119646bf3c00
SSDEEP 384:LZcIhsNPUSQVqb2BlVRNPOwG9Oj6OObjI9G6w7dUJp:ThrV9LHPOwG9Q629MI
TLSH
T1DB928F326C348D37AEA7A515F58A3A174FF8A177E7C86F84E0DD5B0C01DA9AC131A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ac43e3594739a95b94bb6d1dce56eb098a92dd75c11bb04b030e34a2b4110bda
MD5 0a6c77e4f849e55b84624d5ed2cf1239
SHA1 36907108fbe8b46f16df05b6d07ce5d333438023
SHA512 408464d2321ac07d3791c9cac2cdda01b7de0c6e0ee460cb86c4f527edc3f2d5686be92c570e91ec0e223f6503ce2ba24ce1db7348405555a18bb69339578251
SSDEEP 384:pZcIhsNPUrQVqb2BlVRNPOwG9Oj6OObjI9G6w7dUJp:hhIV9LHPOwG9Q629MI
TLSH
T1B2929F726C348D379EA7A515F5863A174FF8A17BE7CC6F44E0DC5B0C01DA9AC131A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a79836f2198dbe5197a8114da1bff68ca58decabbec0099c611fe837d589cb24
MD5 596061ee43208628901505df4030177e
SHA1 6379b867c2cdabf4d46e7eb4a010b45505d950a6
SHA512 181ab21f8c06ec556e8edca6e708b84b62d1d53118ea0560eac7906ce1266ca99ce598759e2f6c5b3fed6b54844e96533482d2c6448e5b168d7a8e6692eae3b8
SSDEEP 192:jONF6JkRBQmiUyF1X+RNPOmlhPoB9SFPVc8qNyU6:jONF6Uf+X+RNPOwG9Ou6U6
TLSH
T10712F976A8384C675EE36945F58736135EB8616BEA897F80D5DC2E0C01EF69C230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

165f3aa8-79fb-4fb1-8139-0feefb9e6b13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\165f3aa8-79fb-4fb1-8139-0feefb9e6b13.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fb33c867aff6fb9d243bb688a7073b7b1100cc5824301abaa31adddd25c0a1bc
MD5 f33faf6f7e71c78b7846968ef21a5ff9
SHA1 e5d3f80c0f42674cf43c00f00d81c72b445959fb
SHA512 0e503d8139034045a284bf3f47e767f7efe3ad1f0a52690b73eefe69cfa0c8a997c9147a49f192ce61cd742129edc45ab5963d1c6e84954c33446863aa06557b
TLSH
T1BA411A59BAE9111CF3B76F5AABF7986D847BB8732F0AD49D00010D4F0A23A40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download