5d3e92ccc092be4b9c27a9da4379b05bbdc817f41078ff4318dc4b7863774849

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 06:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 64KB
Sample260729-g4tpcaee88
SHA256 5d3e92ccc092be4b9c27a9da4379b05bbdc817f41078ff4318dc4b7863774849
MD5 4836adf709cf0262b22919bd62eeb165
SHA1 10fbc9f6935f8fe5a8248553d499c533694da1e0
SHA512 65b7bcb69ff8c179ef8cc636a1b69efac15558ca18ea5b2e34e4f76f75fefa63e650ced0820418c352c8512bf74e0fdcc09a66e088dc49686c471d6b41a35ce3
SSDEEP 768:X2cItte+WSzZdypz0ez17Kg/TU4jOT7n4BfBEZyojAM6zz0p7RC5iIwoL86UJuoj:X/yr5ypuya6zw1ERdL86UJ7
TLSH
T1DF5308F3E1A10A763F5947ECDD48B21CB8A79D55CA015FBAB4F290152688EF201B379C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3228	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297797229004044"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{C89ED941-E886-4BC3-BC60-A716FE1C31B9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4452 wrote to memory of 2904	4452	msedge.exe	85
PID 4452 wrote to memory of 3228	4452	msedge.exe	87
PID 4452 wrote to memory of 4980	4452	msedge.exe	88
PID 4452 wrote to memory of 4980	4452	msedge.exe	88
PID 4452 wrote to memory of 4980	4452	msedge.exe	88
PID 4452 wrote to memory of 4408	4452	msedge.exe	89
PID 4452 wrote to memory of 4408	4452	msedge.exe	89
PID 4452 wrote to memory of 5072	4452	msedge.exe	90
PID 4452 wrote to memory of 5072	4452	msedge.exe	90
PID 4452 wrote to memory of 5072	4452	msedge.exe	90
PID 4452 wrote to memory of 3316	4452	msedge.exe	91
PID 4452 wrote to memory of 3316	4452	msedge.exe	91
PID 4452 wrote to memory of 3316	4452	msedge.exe	91
PID 4452 wrote to memory of 3856	4452	msedge.exe	92
PID 4452 wrote to memory of 3856	4452	msedge.exe	92
PID 4452 wrote to memory of 3856	4452	msedge.exe	92
PID 4452 wrote to memory of 4564	4452	msedge.exe	93
PID 4452 wrote to memory of 4564	4452	msedge.exe	93
PID 4452 wrote to memory of 4564	4452	msedge.exe	93
PID 4452 wrote to memory of 2832	4452	msedge.exe	97
PID 4452 wrote to memory of 2832	4452	msedge.exe	97
PID 4452 wrote to memory of 4512	4452	msedge.exe	98
PID 4452 wrote to memory of 4512	4452	msedge.exe	98
PID 4452 wrote to memory of 2712	4452	msedge.exe	100
PID 4452 wrote to memory of 1988	4452	msedge.exe	103
PID 4452 wrote to memory of 4556	4452	msedge.exe	104
PID 4452 wrote to memory of 1952	4452	msedge.exe	105
PID 4452 wrote to memory of 2712	4452	msedge.exe	112
PID 4452 wrote to memory of 2712	4452	msedge.exe	112
PID 4452 wrote to memory of 4324	4452	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8f47ec188,0x7ff8f47ec194,0x7ff8f47ec1a0
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,8544772577378917298,1175935416653559277,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,5753409326548383075,9306553505215510301,262144 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,10402649204655396144,1381008945241422101,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,10556389033096631372,6925397888118163513,2097152 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,6446664280284873630,8443091099560202854,2097152 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4128,i,6904845303265241284,629778963809197645,2097152 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,10574548686835981985,1313975708571527621,2097152 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,17267466553953610274,4985196745857169097,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,14263551789846964736,17511795464215393630,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16142425192576943353,16408452836975507575,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16142425192576943353,16408452836975507575,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,7196453255117623099,8075586850979302427,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5839120544687602156,845737470968936437,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,12130704177446067990,5071916299036321958,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,12577951187094480463,16441953568721729877,524288 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,7618547366846069667,6046605112339158606,262144 --field-trial-handle=2300,i,3787149780475181306,17675702456455355206,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7879445c2b07d0f4ac1699ac6ab584d2b46be13d21954235bb6fad4e7db46490
MD5 33e35f3b61547a6fbb231ed396012083
SHA1 8d66103f9485822b6bd7c3edd0f44675abf44a3e
SHA512 489fdce36023397e474ae59cc0f4a7eeac9076549bc30beb32652110bc7523eebfb146ecdbbe2a0b98ccf3e1aa1dba3bf0f0cb3dd2d0a720bee50c52550f0c7d
TLSH
T16A711B303642C8ADE343C131B8D286F37033ADEAF82B5E3010989E7529A5F228C1D6DD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d49eaa389d00062faf47b768958c92049b5f3d29c44fd9112c267a375f03b621
MD5 1cc29d3d04f493e5e32fab838cf21384
SHA1 93004c041f433d0e4f10c77b0d5f570f95cd39eb
SHA512 9b75accb99eb61a16e8bed7e99fb44b116e9fb40d1279ea624a95f8cb664be6d27938c3342ec50294655ad704a5dc9a0ba3ee928e0ca8ff97df485398d13ea5e
TLSH
T18521A9F7C3D5877E891556F0AA28AE1ACE1D0906822C3C19C9E4BF5B93E2471E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 67209095b433c2dde1b65f0bad5afe0727b2b45954c568c3d1c44030992686e5
MD5 b33376b95db2df47b9987933e6deafdc
SHA1 8d1f4ee8b934ecf5008ae41b310c59f3907073da
SHA512 1224695b146aac1bd6c5991d1db7b91769085b3fa2e0dd429e6286b3d4f1049896f834109bca0960a39ea2951fc77f21d001843360183d879badc5fa273491a0
SSDEEP 192:sxZHIRGyM/jK1Ml8MkQ/festXY2KGIdpdwHW6+WNGYIkDx2bIgrJ:sxZHIcMQ/festXY2KniHbGCg9
TLSH
T17B42E9166B3859B7CCDBD209FA557F53D6F90872D2900E48A9FCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 89d64815192117ace8fe478d05e14d83170f44b5d152ebd9453b976d65a64d5c
MD5 cafed7a6941c58eaeddb98d9f4de15cd
SHA1 47f3c1debc9dfdd4502d060456af144e175a3263
SHA512 dc808ad245bd80c47068cfc0ebf1fbd0add818be701d9a39e6f96328ce41e3c99f267ca25a9a912110bc255da9accbd4817f19b9ff51bfabf09f85c691116822
SSDEEP 192:sxZHIRGyM/jK1Ml8UQQkQ/fesyXYAKGIdpHwHW6+WNGYIm+K2bIg5aJ:sxZHIcqjQ/fesyXYAKnQHbG8gc
TLSH
T1DD52D8166A3859B7CCDBD20DF9457F53D6F51872D2900E48A9FCCA0C05E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3f762bad6f3992f3ced885337b31b05cd8fe6543df9aef86c120cee270659597
MD5 9316c195a84b7a921b727f54780a3cbf
SHA1 0a2b44d956f78dfe2919e667f955cb599a34a00b
SHA512 2504d9b20e1df116a4a33f67147dccc6c1ed7eb1da5abb91184fb4508ee475bd663b3b6774d0ea9d299d717870b80af48946b9d4aef1c0762a9a920073e27ce5
SSDEEP 768:+AsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Jrosqlb:+AsqxXlWvJD6Tu1ja54LAs9isS
TLSH
T1A6D21B3B694CC77E4F840E5DEC26AFD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fc932859e5f23a422d0939991605693933fe81378583ba82b11c957a2bbe96dc
MD5 ea2010922bfa6068107410108135d646
SHA1 8f46946a70fabd5784bb8e14bdd141c91c92d89b
SHA512 74fb0ddd33906dd560206f5d28f1c91694dc69dca2162352b9c56c46153c1f981adfa0f28cc429fe6c7b1a9ae634dba7f3076c94d2f130ae6eff82da5052aad2
SSDEEP 96:KYbaKYIKRktgESKK+Ea7lCk+KqLCe+mckDO0f6KQK/6u6ucKnqsz:ExV9/7P/
TLSH
T153C1F01A317A0A1339BD3988B66A86361F4132B33118B46F7FB840614E6BE135DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7f86fdf22a2153e9bb1b65625d280b0eaa89a4e0b400ad155e3f94bf4256d423
MD5 a17ef13a1e8b8ad36b71fad0d967bc22
SHA1 ed7c95e8a947a2ed0e419346775a09aa2c56b9d7
SHA512 d79d6bd854a8f658c1901ef6195ac5564888412eef99399c3caddcc91291135d2a7b923743734cd528bd26dd9dd7af8a51aa8d81115b529d6fd2cb3c751400bb
SSDEEP 192:u7LsNwzKQkkRbnZQmiU1Hm34VRNW+Fd102o1U2tSJri2SReqbvU8:8sNwzKmb3woVRN5dc5sJri3U8
TLSH
T11F3229366C385CBB4EE3A545F44735035FB45567EAC93F84E6EC9B0C01DA6AC231A81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 95383637f79a728de4a5b90c5b3208f523f8eb4452bcd38cf7dab393d760da2e
MD5 828225735df70e1033490dd629043614
SHA1 7a46b046b3eafc6ad181bc7f8c664eef0e6ef600
SHA512 687d6d85d3c6fd9193676b79c4910dc29b58027ef304576dc32d127eac489fbf83f6393c9ec7076851aeb6d8a45ae45b852892fb8173038e8585cf20c628d2c3
SSDEEP 192:u7LsNwzgQkkRbnZQmiU1Hm34VRNW+Fd102o1U2tSJri2SReqbvN/Sw:8sNwzgmb3woVRN5dc5sJri3F5
TLSH
T17742293A5C385CBB5EA3A545F44736135EB894A7DAC93F84E5EC9F0C01DA6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 0f2b854d75e1dcc33a1fc91a8987f4dd386943570f13a1b0be9df3e505ed9beb
MD5 2d5247c2798c776f84088cb8ccf1698b
SHA1 e41b4e779010e12b198cbb6154ae5dd069f5cf7c
SHA512 331a3dd66b3948a1abb432efda82c61f5dde9f5dc615e25e4e093d92e7acbc866fc30f73c20dcb90fb7ac16e9f4908b2da931251e5b3363eef78716ea3a2b543
SSDEEP 192:uqsQzsNbzzQkkRbnZQmiU1Hm34VRNW+Fd102o1U2tSJrib5xJReqbvN/9w:ZzsNbzzmb3woVRN5dc5sJrON3FC
TLSH
T19A52293A5C384CB75DE3A545F44636135EB898ABDAC93F84E5EC9F0C01DA69C231B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 50c8b05d368f34b62a5811628c77071a1ce2ba4e831a6b10505f5fb3ac46697b
MD5 dd082a03c0f6ef335c9e7cb95ce78620
SHA1 5a920499154497b7c43d68c629bd3bb81a3ec4be
SHA512 4f7ace01fc31aff838433288f81bab9789bd0b28354542e658e302d56f2727b77c4af4ce8300df08224d094d9db3ab8e966248219b48900ac440417f637c0d13
SSDEEP 192:tONnm6JkRtQmiUytsW+RNW+Fd102owh3SRJ7U6:tONm6UrtW+RN5dcQU7U6
TLSH
T15102D735AD382CBB9EF26D0AB48727175FA4217BF9962B84E6E81B0C01D765C1347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 32d0dc43b1c4dfb8d434dad24aa342fb78b4b6a1daae8421e947114359c6be17
MD5 616c94aa4e3f41107f421e9cca64eee1
SHA1 399cd200dbbcc19db31cebda8817fddd2f4b22f9
SHA512 2b8663d20107f2600078ddcd24250c3ae423006b15038a7a2ac53eb2957c25e1cb09b195fc2f0984615ea0e355c98ee929089be90e5bbcc1e0e99672f31a65b1
SSDEEP 192:uoLsNwzzQkkRbnZQmiU1Hm34VRNW+Fd102o1U2tSJri2SReqbvN/9w:hsNwzzmb3woVRN5dc5sJri3FC
TLSH
T1FC42293A6C385CBB5EE3A545F44736135EB894A7DBC93F84E5EC9F0C01DA6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 98031fea0e9d9209316ddec86922b4a20c8b1ddd5f72d3a82744abe009eee577
MD5 747db9f624b6d4721d74585afe8f3a4e
SHA1 07a7ac557b676db202378e0a8070f281943f7677
SHA512 f9fe894d2902d63a9d1e6c754093b52a5b16880a7d0bcab48d3f58d92c238c8db0110b4b5e15adb616495ee363a2f961333a3b2d9a75eccecfaefa18f304cd46
SSDEEP 192:IONcy6JkRJQmiUyxsY+RNW+Fd102o1U2tSJribVceqbvU6:IONcy6UnTY+RN5dc5sJrL3U6
TLSH
T193121B366C385CBB5EE36846F48735135EA45567EE8A3F80E1EC1F0C01EBAAC130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 08ff7baa0b98f8db47aba90a36200c27f5cbde905fa1e459d77fa13257fab4c3
MD5 5348f155156542ed70536c3ebd800632
SHA1 71ab77f65b9c3971d5f881f51cec0d3b2cf2ef01
SHA512 932a849a84bf58b00959cce1f57ecbe735c6d1e7b93d175b5aeb6a3438abd958094f53dc3071c7d66745221bd2dd10d9cb7f19dc376f0082323b2e189be18693
SSDEEP 192:uqsQzsNwzzQkkRbnZQmiU1Hm34VRNW+Fd102o1U2tSJriT2ReqbvN/9w:ZzsNwzzmb3woVRN5dc5sJrH3FC
TLSH
T1B8522A3A5C385CB75DE3A545F44736135EB894ABDBC93F84E5EC9F0C01DA6AC130681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36d9fda3-b1e2-49b6-b161-8cb27d3cd9b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\36d9fda3-b1e2-49b6-b161-8cb27d3cd9b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0fb40b8d2a4d5103b0d9c181d6f4f0b342be5707e5737b71f147b21d995ff875
MD5 6aedae28dd6ac835a362944e07989d04
SHA1 5a780d3d211b5a64fdd6c6f569695519b7c3d94f
SHA512 4522b734ff081af67c6df0871ef2a476fa32c270412306fd1572e128a89ea2d241b81e0cda5b00f1a3786b6a67715dbd38bc6716d86a6988215752bbe63c5f19
TLSH
T17341FB58AAFA1158B3776E5A9BF7A86E487AB8771F06D45E00010E4F4663F40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download