c640a33b0a320c6bf54bfaf46a9a67eddd0a959b87259eea94de2701a6605168

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cookies.html
Size 10KB
Sample260729-ap2cbadj71
SHA256 c640a33b0a320c6bf54bfaf46a9a67eddd0a959b87259eea94de2701a6605168
MD5 f1abd95019d5cd040cdf574f557dbdf5
SHA1 f840fafdefd884a6d35daf6823fc21ea06d69f73
SHA512 0424278ebc02e4277962617497bc2e4f7d52bd5883f6b330089f23a526de544c110355f0a566256b2bc3016e97c2d8540188b914ccf92c19f851c9f317ba0172
SSDEEP 192:7jhpNkszAfPJ6ro4LrYLM8W6/Qu7Vhp9E1nAPgbnWyn2d1oW3PoJ:HxkAAsr/GVhp9E1nAPgbnWbdu
TLSH
T1BE220737B2AC617E034203E43292F3BFF30AA1A482955E223C55653C57D2FAA4A37197
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297584390860369"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{61E3A86D-5910-45B9-87FA-CCE11012B941}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe
3884	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3884 wrote to memory of 2876	3884	msedge.exe	86
PID 3884 wrote to memory of 3752	3884	msedge.exe	87
PID 3884 wrote to memory of 4280	3884	msedge.exe	88
PID 3884 wrote to memory of 4280	3884	msedge.exe	88
PID 3884 wrote to memory of 4280	3884	msedge.exe	88
PID 3884 wrote to memory of 520	3884	msedge.exe	89
PID 3884 wrote to memory of 520	3884	msedge.exe	89
PID 3884 wrote to memory of 2344	3884	msedge.exe	91
PID 3884 wrote to memory of 1920	3884	msedge.exe	90
PID 3884 wrote to memory of 2344	3884	msedge.exe	91
PID 3884 wrote to memory of 2344	3884	msedge.exe	91
PID 3884 wrote to memory of 1920	3884	msedge.exe	90
PID 3884 wrote to memory of 1920	3884	msedge.exe	90
PID 3884 wrote to memory of 2888	3884	msedge.exe	93
PID 3884 wrote to memory of 3208	3884	msedge.exe	94
PID 3884 wrote to memory of 2888	3884	msedge.exe	93
PID 3884 wrote to memory of 2888	3884	msedge.exe	93
PID 3884 wrote to memory of 3208	3884	msedge.exe	94
PID 3884 wrote to memory of 3208	3884	msedge.exe	94
PID 3884 wrote to memory of 4284	3884	msedge.exe	98
PID 3884 wrote to memory of 1164	3884	msedge.exe	99
PID 3884 wrote to memory of 4284	3884	msedge.exe	98
PID 3884 wrote to memory of 1164	3884	msedge.exe	99
PID 3884 wrote to memory of 4172	3884	msedge.exe	101
PID 3884 wrote to memory of 2660	3884	msedge.exe	105
PID 3884 wrote to memory of 2036	3884	msedge.exe	106
PID 3884 wrote to memory of 4044	3884	msedge.exe	107
PID 3884 wrote to memory of 1744	3884	msedge.exe	109
PID 3884 wrote to memory of 1744	3884	msedge.exe	109
PID 3884 wrote to memory of 3744	3884	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cookies.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x278,0x7ffcb753c188,0x7ffcb753c194,0x7ffcb753c1a0
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,3595545087560883861,1210299510256542000,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14698526301567388452,2449548625966991551,262144 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1352,i,10545116106176817909,5933719094796069356,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,10621005045783521183,3013906322283853204,2097152 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,5722318126477145851,5308247043521511882,2097152 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,14318050288014279116,16902556565204261361,2097152 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,16602891635038505931,16724651574212486559,2097152 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,4948888603568558626,4777036944251692749,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1620,i,11767970046912455704,17725367717335394925,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,7123787049657937912,6815023202300887352,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,7123787049657937912,6815023202300887352,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,14245032900004653041,13271871271490502842,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,12469022361708283588,4735725519123842099,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,747821714462706936,14334540371789322245,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,4869287126850381230,4516853029183821194,524288 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,16638506969014911097,13503087589929557174,262144 --field-trial-handle=2252,i,12783258238273736925,14973422618190314592,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 786af8144bb67ef5acbc913a13d38361c5c7fc05e0c86a74b337c22da0daa049
MD5 71eccdaa31eaec9b5201f6c6775411bd
SHA1 91a998a67ae89ba5a735a786d92340dd3071fb55
SHA512 14f613cd2a3df82006652d78b488c1e4c0327a651747cd2ff0801f1391dabaa902d959a267522d340c70f41e8fee6bd25eb31dcabdff208b7b3cef1e9065ca44
TLSH
T11761E7BD0582EDF6E3D13A3190C03A8738F190E8FD63FD5D01E348B5640AB114A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588c2e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588c2e.TMP
Size 3KB
SHA256 0f20d3d9df6edc8744fcfe331c53855ead007d5b89f5424399a2f0035d064427
MD5 fccdd8b4f43fe25ee6e927402cb9481a
SHA1 deb81bf06da645fecf484fed153b61b64e887191
SHA512 9c2774f393b8d83fcfd6bfaf9ce3fa9b1e794252a64eb46ae138af50268f85b91281fc6ff81bd1c4ce099db6a174032568b5acc7e9a809d193801dbd32fab418
TLSH
T1F961C3BE0582EDF6E3D13A3190D13A8738F191E8FC63BD5E01E348B5640AB614A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e40afa1b9e48c110d86963367263d788ae5e415ea437f02b8a9b65edc252334f
MD5 534e2eda703c16f51258ba4d983a88a3
SHA1 2d5c758c2e60e760f0ee17d722d1c5a329e823aa
SHA512 25cff594aa1fa220003e5195df68c1322962adeec773b52db186008813d76513e2381e98d23f11cf988d0541fab7ace8607a9e1cc4e998a6a41abd3abdea9d40
TLSH
T16E116AF783E486AE890116F05A24AD1BCE2D0516432C7C2589E4EF2B93E3075E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f8927b23-fa40-4f86-aee1-fa80775d16ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f8927b23-fa40-4f86-aee1-fa80775d16ca.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 98f7d311409f9550af2e57e1e3dc193500d62e5fff2a47591ef74bae8e52a96d
MD5 9a0902cdc672f1cb34633a2e21bdf78f
SHA1 7d0788bcc412058660ec7890e4ea8217a0e0452d
SHA512 249dd63f62148c9d4c2eccf63c307acb61226557f5b6e2fa7b6d896960e046f6dfdf720116b1187afcfc97644c32fd9098157efc9253253845d469adefd308e3
SSDEEP 192:sxZCRUyM/jK1Ml8Mko/fCsgpe2IdpdfHW6+WNGY9IKqVpIgrJ:sxZCqMo/fCsgp0JHbGV9
TLSH
T1F042E9166A3859B7CCDBD20DFA55BF53D6F94472D2900E44A9FCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5ed6265557a66542e39112278cbf968414e80052f51d21ddd16e490339f7cbf3
MD5 34f9e39bf05a95a184908e86fe997075
SHA1 84fed02782bf1529cfefa5b3bfeccbfcd57ede40
SHA512 56ae543ac810ab0b18b47e02ebc7c3b520814cb9deb5ddb14fa2c5c11669af52dd2af2e7a4e413f442adbc4efc599cb0e98521637bb9218667ead0e035163bb1
SSDEEP 192:sxZCRUyM/jK1Ml8UQ/ko/fCs1Te2IdpHfHW6+WNGY9I4pVpIg5+J:sxZCqqso/fCs1T0/HbGwg
TLSH
T1F152E8166A3859B7CCDBD20DFA51BF53D6F54472D2900E44A9FCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9153870b7e6f74858da843d705903b4adfd1872c43b29d643daa442811103844
MD5 ec923a237fa91e767730512c76ff23bc
SHA1 878a862aaf0039cb2e4fd4ebf5dc69599b0cf75d
SHA512 1ab8856f0611680bbebc92020776334b9c977afbfc21f7c9c35cb32da183c34e46985e55cc4256e752e6a81be0738b9e820ccfcaa3b46eb0d7cfebba1cdf1d48
SSDEEP 768:0Bcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNfrogg6BO:0Bcv21wWvu+Z+u1jaeFLeRNMg8
TLSH
T1FAD20A2B280CCB7E4F841E9CED2AAF866DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a4b194704c129fe94b088ab52321fff557050fb9394d1ac4bacbc193834f7cb7
MD5 056713688a4937e1621448c6efd21d55
SHA1 2a5ec4c9930e844705d36d75a51976e49ebf6e68
SHA512 beb3dab413033688ac052215c8acb1c40c292e9e2256924b6cca4546bd93fafb82508ed1f7af0a77d0ee39c3ef0cc57112e60820734b7d9f61bfdcabf9742f63
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDCygKTya+5eKSc6ug:mTfHhVv
TLSH
T145A1D40531BA1682387E284CA36985B75E8270677448A5BF3FBA10A14F67E535CFCDEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 44887bdcd62f3f553602615986d34dd2ae8c4ab6411d6d8d98d3e40cb3df345e
MD5 2d582b48aa4af9e2c1fb87c5273ac9dc
SHA1 75f9f994a8ab98d329bd53fc39ee6e6b825e90b8
SHA512 193a5328662916ab467d11bb55e939772030cbf7837529fde4a5be1a5d2cc7a687ecf56b784f4698ba54c729ba67722acae2754fa7292f36f1ca45065268716c
SSDEEP 384:8ZcIhsNF1LBYzinxlnse+CXOmep3JrQ2n8ScjmwWN:qh8kWHvO9p3hQ2n81jiN
TLSH
T177928E36AD385CB75AE69595F8473613CFB89073D7C52B80D5ECAF0C01DB6AC1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f71901483607e949779e17b0a7ff49ae73a49b7d7994330127bfd1ba8fc296a7
MD5 16d8239a8ad5f4f91f34c2b84c66674c
SHA1 38827a774d77cca269566949127163b810e6c4aa
SHA512 70bed40e660cfb4484c47d329bcb7b6f1f2d818febf975ba827859a0937ceddbd6d690cda3063a33bd8ea7b1e430b58ba7f97d2b5bf5ca03a746d3ec734d6399
SSDEEP 384:zZcIpzsNFULBYzinxlnse+CXOmep3Jrd2n8ScjmwWN:rJxkWHvO9p3hd2n81jiN
TLSH
T159927E36AD385CBB5AE69585F9473A138FA89073D7C52F80D5ECAF0C01DB69C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b596cfbcbd27984ddbebb3da64b7fa4ecba34e3e41483fc5837c9f8b8923ff5f
MD5 4c9f8f96f3f16e20086f661b63188941
SHA1 aa66c8de071c37081fb9266f81323993b24f70e1
SHA512 8008a923515e427af1f2cd64b403bcd3513ea06d883f705eff9703c082306140e451af8534b1d997ba8a2e00c35f86e0b3423621b29ca25fe3886a16e615bb66
SSDEEP 192:JONO6v+YLNQmiUy+XZh+CG6Om9oEusnlU6:JONO6vz/jZh+CXOme6lU6
TLSH
T16B02E935BD281CAB9FF25E45F5873B275FA8217BE9952F80D9E41F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6a580bd511b19979cd12e2d6ea3e8e98ac75284d61a352b353ab95e84007e2f2
MD5 f5c4d5da03defabb3878e81f8741ba35
SHA1 389c19c688a22baf89687f3d9a1440631608ee51
SHA512 5f6512741ca8b5a726dc975b53fd5e4f827c376cedf81c9cc125bcd2d88b22f1514337a8163850bc163f673daf04516478bd23d05bb7e84670762c46c7112cc8
SSDEEP 384:3ZcIhsNFULBYzinxlnse+CXOmep3JrQ2n8ScjmwWN:/hxkWHvO9p3hQ2n81jiN
TLSH
T1F0928E36AD385CAB5AE69585F8473623DFB89073D7C52F80D5ECAF0C01DB6AC1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f1b87f980ed0f102caae9cdb65449abaaaafd7264b6ea8fa1cb8c3ffd8253625
MD5 a39f9f40e79893698c23ae7a71366fb3
SHA1 5ec0d2839f8903f21b5f0b3ab3831d25d1c7fbb7
SHA512 504f325ef5eb80a4bee01fcb48c1005b2698cf641bc4fa7b041ba66eb5394b33c9de81070c833bea4f6e0be02df45a5643c5895fa46562bdd6a130db218dd3ab
SSDEEP 192:WONo6v+YL1TQmiUyXXn8h+CG6Om9opwSJrH0CH2bqu8U6:WONo6vzZF4n8h+CXOmep3JrN2n8U6
TLSH
T192122C3679685CAB5EE3A991F48736139EA85167DB863F80D5DC3E0C02DF75C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4523e69d-18d9-4d7e-95cf-9c3398a0de65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4523e69d-18d9-4d7e-95cf-9c3398a0de65.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 34ec0bcfd8e10e9d518c94e769e2207821902782f16b5486adb14df94214be5e
MD5 2ee1eb0c3f5c8c7ecfc7e5bf5c65aacc
SHA1 12b97b1e2ef3da93de5d18aba9f0407e5705d93c
SHA512 aca9912c8adb5dcf187d8f7ae9e468127f68206d4d79804c667738f518da40d055506e38dce89b373726286e5f9b166ec59004deff0a5b649ddf15f16dc72ca5
TLSH
T165412858A6FA1148B3776F4AABF6A86E447BB9372E0AD45E10010D4E0663A44C872737
MD5 SHA1 SHA512 TLSH

Submit Download