c19550375bfdfc51cf44c6e0dee012409ddbf3c14cfeee5fbd5dc78818ab55fd

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 567B
Sample260728-amn9zagm5v
SHA256 c19550375bfdfc51cf44c6e0dee012409ddbf3c14cfeee5fbd5dc78818ab55fd
MD5 8a365fc142be3972f36bed7a97f62339
SHA1 f17c704148e8d60eaee84dc11a3332d5940341d3
SHA512 3441e9be3bb13b091e0629699e8eaff9ef2b5e9a7f165cdd891c4b22a65e3db5e91ea8a50f6db24299858f2bc3d4395296a2d51dc428dfb03d50f9f40fb3a8e3
TLSH
T1D6F0C082CCF3C44C225041556EB1B21C1D8AE8DB7B62D84A38DDC3396F97B9D8C9B8D4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1500	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296716054642053"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{DE804C2E-C8E5-46C2-AE7E-76F5FFB3FECE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 2936	2180	msedge.exe	85
PID 2180 wrote to memory of 1500	2180	msedge.exe	87
PID 2180 wrote to memory of 4472	2180	msedge.exe	88
PID 2180 wrote to memory of 4472	2180	msedge.exe	88
PID 2180 wrote to memory of 4472	2180	msedge.exe	88
PID 2180 wrote to memory of 1424	2180	msedge.exe	89
PID 2180 wrote to memory of 1424	2180	msedge.exe	89
PID 2180 wrote to memory of 4968	2180	msedge.exe	90
PID 2180 wrote to memory of 4968	2180	msedge.exe	90
PID 2180 wrote to memory of 4968	2180	msedge.exe	90
PID 2180 wrote to memory of 2588	2180	msedge.exe	91
PID 2180 wrote to memory of 2588	2180	msedge.exe	91
PID 2180 wrote to memory of 2588	2180	msedge.exe	91
PID 2180 wrote to memory of 864	2180	msedge.exe	92
PID 2180 wrote to memory of 864	2180	msedge.exe	92
PID 2180 wrote to memory of 864	2180	msedge.exe	92
PID 2180 wrote to memory of 4504	2180	msedge.exe	93
PID 2180 wrote to memory of 4504	2180	msedge.exe	93
PID 2180 wrote to memory of 4504	2180	msedge.exe	93
PID 2180 wrote to memory of 1580	2180	msedge.exe	98
PID 2180 wrote to memory of 1580	2180	msedge.exe	98
PID 2180 wrote to memory of 1176	2180	msedge.exe	99
PID 2180 wrote to memory of 1176	2180	msedge.exe	99
PID 2180 wrote to memory of 4456	2180	msedge.exe	102
PID 2180 wrote to memory of 444	2180	msedge.exe	114
PID 2180 wrote to memory of 2884	2180	msedge.exe	115
PID 2180 wrote to memory of 4832	2180	msedge.exe	116
PID 2180 wrote to memory of 4788	2180	msedge.exe	117
PID 2180 wrote to memory of 4788	2180	msedge.exe	117
PID 2180 wrote to memory of 4460	2180	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc3ec1c188,0x7ffc3ec1c194,0x7ffc3ec1c1a0
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,7924140451059199957,17906630550493206796,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,10411458908706165900,345651413949155797,262144 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,12368650063250977539,10494274562418224846,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,7589016675227124321,18343411483911335708,2097152 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,6087668700705904474,12219453116939209859,2097152 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,2424106631986065395,621801797034757996,2097152 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,6976000866273802363,2682588628096245285,2097152 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,10863318464772481303,16013263493252897560,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2573929671820563963,18241755789412673479,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,1074130717468317382,16904755703109562149,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,1074130717468317382,16904755703109562149,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,6257127475507565631,17617687799607207835,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,977252849775950465,573192473767981080,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,13713871750454213907,16906812432243247277,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,17821906422985451053,13636491414158576503,524288 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4964,i,7649368680228584565,5789795427806317465,262144 --field-trial-handle=2316,i,2516175827585795828,14529634881583907128,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 da5ec9fe725a894225b04dc2d9df2e4e364935b5cd63c910724127453e5a9d43
MD5 924bd9213185768c24f52201da09e0cc
SHA1 921d5d0b7fd9ff129e935c9a88308a388f8c383c
SHA512 0b725b0079ae09e5f063b477a38ca601b0f8ce0c73f80bd3773abfdfb6db3a9823e80e07be65b810c0549d61c45091b9b777b4d8259049c5c73a90f0fdf4719c
TLSH
T10971527427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589361.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589361.TMP
Size 3KB
SHA256 93b4e0cf42f2a3883484e19dbe3ef673616df10492440f34cdc6b8447ae6d45c
MD5 fee14b7702e6c8849b6458ee5a95e2c7
SHA1 6e8b03db3daed34294a7027b65aeb9cb64b8c915
SHA512 755ccb74986c050ef5384d196e87e69e0090d0fa6f008555c91911caa9a0cbe36edbe1c0115e1068a2cd81d775820cfb6d97bb4e82dbdc234bc4033600f48383
TLSH
T15A71527427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e30654c5c3ec395b574d869d62d82d10f5d2374c16e055e64e181d78120cf80a
MD5 80ef3bf000a8557902ae9e8009f16534
SHA1 456c7ea310f873795566d4e545833a343de3174f
SHA512 f2ce4707e018d5cdcf21603275ee96a03affd34a3ff813ab109c2b66e39b1bcddf5b1aa5bedde79818d0c66c40aef459c50b320fb9b8f273dcc293637ac7d400
TLSH
T1A8119BF7C3D585AE890116F06A24AE2BCE2C0901821C3C1589D4EF2793E3065E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2fc79cb1d1eec42349cb591c069f6ccebe5b0c1177f19dad361023dca662fe03
MD5 bc5296bd7419968e26c9eb9ea85ec244
SHA1 f9af7ed617e0ac5f6f7d16d47f5af8f33b7ade34
SHA512 2705d90ba468c213e3386dc8fbf7e362e2cdb983bd1f31ec06097046dac936ca09f43f9cb561b2201b1ee11b1c0272015da0fdf93eb24c575d45777e7ba3a29b
SSDEEP 192:sxZIRiyM/jK1Ml8Mkp/fhsUGhVLIdpdmlHW6+WNGYvrDjJ8IgrJ:sxZI8Mp/fhsUGYAHbGwy9
TLSH
T14D42D7166B345977CCDBD20DFA51BF53D6F91462A2901E48AAFCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1a169176bfe0c6ec62cca18783e046af5f7e443cfec9583a084f41864ac45624
MD5 7ed9aebc25e75fac472e5a3cbbebeea4
SHA1 f0299e0945ed2278401b7c8b9a2a7db4ccbcaf2e
SHA512 9e017ef8e2fd11c1f220c3759074152c9f5b9202c45312d9bc58695715470d5f848605735d05e0af40cc726a22bdc4c0039b303a4bcd71665b1c70e1ec15cc80
SSDEEP 192:sxZIRiyM/jK1Ml8UQMkp/fhssghVLIdpHmlHW6+WNGYvJOjJ8Ig5RJ:sxZI8qXp/fhssgYCHbGnyl
TLSH
T14352F8166A345977CCDBD20DFA41BF53D6F91472D2901E48AAFCCA0C04E6AEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 eb7622e3f6dda24d807fe53b643c0e7a7b45aa81f7d7d82bcf072f259e162765
MD5 868341cd94e110bfdeb41248ea4ae608
SHA1 df3e9610c9021c338f34d377c2563752c186dd8c
SHA512 1a595f3bd7a8975aa27a8d934c0bbdcf3ed311134797095b572f7dc906e70bb6e24b26a4e8cd9db629ddc96db98cf61f2388f6255235c7ad05f8a4fe55545faa
SSDEEP 768:3vseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pporoM1x:3vseJ3xWvhfynu1jaVcL88pTCx
TLSH
T1C6D2FB2B280CCB7E4F844E6DEC266F966EE801CB5B984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b990b6da-75f0-49c3-a2f3-c701084c1de2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b990b6da-75f0-49c3-a2f3-c701084c1de2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6fddb3d-d363-4886-afda-b92beddcc987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c6fddb3d-d363-4886-afda-b92beddcc987.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 47158cd53af39749d9d5ab17973243f049ed39e559a8c8e188b1b7b9c893723a
MD5 0224a935fe86825da4124d0a5278da8b
SHA1 10d00a3e094f5d1231d7714ca5e27f7bb524882f
SHA512 8bde9ccf73bed148b96ae77525c4d8270c3e1e831280782454b08028a44e1772770a3b84550820653b62742587e299733c266475b533ce8b884fc07cd9e193b9
SSDEEP 384:uiFiZcI7ozsND8TUNTUlIleplZq+703Vt8kdeKS0l/LYu+:FFQ4mwgglZq+8HRLYu+
TLSH
T18F825B734C68893BADB7AB81F64A36038EF45167D6D4AA94F7DD9F0C009A1AC030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 20a993724843eed038acbe78d2496f7c032b6df7f0a3c166c6a042c423f90320
MD5 92ca4fd83e756e73243ab6ab1d1f7ebe
SHA1 bb59a0513b92fd60a916b5f9a25b86128af7d785
SHA512 112b1bd3244722a54f65a156c208900c7a1132d85cdb6eed562e2ddb122abb7ede50108692b5e66854a3602d645d17aa3ba9a3f21ee8166f137dabf068e49b21
SSDEEP 192:lONQ6vMtPQmiUyU3ThTQj+FdLKKSh847LGWU/u:lONQ6UtRPTbdeKSJLtU/u
TLSH
T1C6020835AC785C7BAAB3BE46F58A27171FE4217BE6901B54EAE82F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 c7b90b542d9bd9f2a78d7c70731927d4c4e3616a30e1a4293ae1993758e3c9e3
MD5 5d93d65aec3fed7f4af76394279fea14
SHA1 e32c05ce68be9ec394d077da0db043ed9d371437
SHA512 0964ee79176749ed9b9a3527a153280cb07aa41db84a035673874ee4c3c20c873dd51ec8c7a5d33778d3b36aaf7be70126931fe84d81879115d14a0ac8bf31ca
SSDEEP 192:uum+xasuheOwQxMGsNxeQ2lZq9M7yLZQmiU1Demz4MTQj+FdLKKSnGNle8z1LfqR:IZcIhsNxeplZq+703Vt8kdeKS0lfLYu+
TLSH
T194627D725C785C3B59A7F141F58A3A034EF8A027E7C46B44F6EDAF0D04D96AC031B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 961ba662119af3d98f17de48f3353c08e150564aa8e4dc76807533b44be3ecad
MD5 3851ca51024bb46b50f61b7060692957
SHA1 87922c4de4dd09a3b013e21bc7d38c9026ca7852
SHA512 30d8f3aaeb4841f96e3e59cdcde65e749656797f7fd49e61bef11d622b9ca78ad79e8ffee3a313fa3c07b132f7efece6f59e7459d03b88491d7bbecc184f9800
SSDEEP 192:uem+xasuheOwQxMGsNx7Q2lZq9M7yLZQmiU1Demz4MTQj+FdLKKSnGNle8z1LfqR:UZcIhsNx7plZq+703Vt8kdeKS0lfLYu+
TLSH
T1A7627D725C785C3B59A3F142F58A3A034EF8A127E7C46B44F6EDAB0D04D96AC031B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 d86264e9afe7fed115d561b6bb4da8a3b5cfa57165f30363912f3afe0b3027d2
MD5 8fc658191591be0e7f645878f064fa57
SHA1 45415ddf3106b42baf241505028f305daf0bda0f
SHA512 3d99f46ac170db537e763355c7170ab75ffa0e7eaeaf95092bcb4ab37131e4711555fbb2a995c38ab3ac9d07d64ecb0fbbd740f546e685acb4b5b49512674813
SSDEEP 192:UONM6vMlPQmiUytF3shTQj+FdLKKSnGNlf80ILfq3U/u:UONM6UlRelsbdeKS0lQLYU/u
TLSH
T1D2122B76AC785C2B6D93B581F08A36031EF4916BEAC57B54FADD2F1C01EE69C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4902fe6f6994fbdf72d8d358485ade7632543ee500f9ce81fb2f83c32eae91d1
MD5 a9e944ec4d50b3138568210f12013c09
SHA1 acad580e2e549f51aadb08447e2f8e9a03260d62
SHA512 c71e473b6b0accfc5691ec487ac92469954db00ebe5094e606f1bdc703e5706b9bc2791f199e23b3ba680b9dff9ffb1adad65f4d29e58ad85c3250048ca06e6a
TLSH
T14641185CA6E91008B3B76F5A9BF6A86D4C7FB9372E07D05E10120E8E0A62A40DD71737
MD5 SHA1 SHA512 TLSH

Submit Download