134b03d5840dae5c833f7b419113c65edd14364e5e6ca8539c6b18370130c0e8

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
docs\_template.html
Size 26KB
Sample260730-ptc8lsan71
SHA256 134b03d5840dae5c833f7b419113c65edd14364e5e6ca8539c6b18370130c0e8
MD5 2927af91ce00b6ac0f627a4dfea5f76e
SHA1 341f5890708528e7168cf4aab626974a6575517d
SHA512 73e28aaf4c61deb326fcf4460c5c167c26c589d95e25b99e1d38696b30b8f6b7af7440802b6c0ccef54d667aa1beaf24e66c392f97238f7f783c3eb4878ba692
SSDEEP 768:q1BnXbx9AtTJNwRC4X7t81GtU0b0xADfqTm7PzImDUQ1hd:qgad
TLSH
T1ADC2D05158F1343F015665F5C6F02A197E988037F587AE067AECAB799FE6F02BD03828
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2308	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298888992731122"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{04B36029-2556-484F-9183-9CE165EA2B83}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe
788	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 788 wrote to memory of 2244	788	msedge.exe	85
PID 788 wrote to memory of 2308	788	msedge.exe	86
PID 788 wrote to memory of 3832	788	msedge.exe	87
PID 788 wrote to memory of 3832	788	msedge.exe	87
PID 788 wrote to memory of 3832	788	msedge.exe	87
PID 788 wrote to memory of 5008	788	msedge.exe	88
PID 788 wrote to memory of 5008	788	msedge.exe	88
PID 788 wrote to memory of 3520	788	msedge.exe	90
PID 788 wrote to memory of 3520	788	msedge.exe	90
PID 788 wrote to memory of 3520	788	msedge.exe	90
PID 788 wrote to memory of 2512	788	msedge.exe	91
PID 788 wrote to memory of 2512	788	msedge.exe	91
PID 788 wrote to memory of 2512	788	msedge.exe	91
PID 788 wrote to memory of 2212	788	msedge.exe	92
PID 788 wrote to memory of 2212	788	msedge.exe	92
PID 788 wrote to memory of 2212	788	msedge.exe	92
PID 788 wrote to memory of 2224	788	msedge.exe	93
PID 788 wrote to memory of 2224	788	msedge.exe	93
PID 788 wrote to memory of 2224	788	msedge.exe	93
PID 788 wrote to memory of 4624	788	msedge.exe	97
PID 788 wrote to memory of 4624	788	msedge.exe	97
PID 788 wrote to memory of 1468	788	msedge.exe	98
PID 788 wrote to memory of 1468	788	msedge.exe	98
PID 788 wrote to memory of 3628	788	msedge.exe	100
PID 788 wrote to memory of 4432	788	msedge.exe	105
PID 788 wrote to memory of 2560	788	msedge.exe	106
PID 788 wrote to memory of 5040	788	msedge.exe	107
PID 788 wrote to memory of 3556	788	msedge.exe	116
PID 788 wrote to memory of 3556	788	msedge.exe	116
PID 788 wrote to memory of 5000	788	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\docs\_template.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa394dc188,0x7ffa394dc194,0x7ffa394dc1a0
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,2644754037023743841,12850797243848174255,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,11658205262844355876,6089701042898038430,262144 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,4581761508835310594,14656934417210033541,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,16355655830433424783,14022495979032698344,2097152 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,13359783217787347044,2957603906093914006,2097152 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,18217040660213028792,7083207210506239322,2097152 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,17537563942243799295,16131198364426303880,2097152 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:2
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,2318544955431540475,10510068144608218213,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,9771905098120704876,2882851355164432206,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,7793268486560919752,522939968743477937,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,7793268486560919752,522939968743477937,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,5986342528716158616,12522874547766098611,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,15726669508519730460,3825791062084098713,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,2082826420279300616,6224313880321968422,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,14778630615003889851,10151078358808028572,524288 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6356,i,18239195495915115630,13241137948727187768,262144 --field-trial-handle=1968,i,13129918004604651208,8230460962707187352,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 31bfeedab44daeb73eb8c2b5e76287e3458c15d968a985659b22cd6173eed41d
MD5 e54079a818f5ffe777d34fb099670614
SHA1 cf241cabd09e6d02b8e175a06f92932abb738912
SHA512 c6944aa6493f87b60108f32249d76970a95dcfea5062519fba71d4243297cb3d4d203ede46d683c44bf6210df5e1f416ef8152e47c8ec49e4396e5e25ad5e03d
TLSH
T1A6714E3701C940D2DB92013A64F26284F8BD82EAF53FDF5110F7AABE4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b9f4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b9f4.TMP
Size 3KB
SHA256 d472d9ff06f4ee2c8803827d7fb617bc6266c4b77a0418fee149d5f6d4202a6d
MD5 926add00bb6531fdd7b7c732130ecf54
SHA1 bda21cf20214494855cd8e6eaec39b9e26916321
SHA512 8ed65155c1bd6d5eebb10f56e0a0c3a79c6dc9444ca656f5266660ce216e4b208acef0d631d331dcb506722b3c094d2d3ab5168ab58c2f23cb7e88961fefe4ba
TLSH
T111714E3702C940C2D786013A94F26284F8BD82EAF53FDF5110F76A7E4B93711819A17B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7c27b60b25a9e6c8e47d6782681b02fa8de5b224dffc04b797dac3609525f503
MD5 f0f35414bb256d8f9b112c24203764dd
SHA1 0945d0562dd5811ef8d2684f392c1b14fbae2719
SHA512 83bcbbb95d218d2a690ef3710a3e142786181feed3fedb5243899a1e69126becc6cd45e0579eb0983fb66588480da0b3b6e46effeceaee4dd4f03163bfab5ed4
TLSH
T10231ACB7C3D5866E895116F1AA24AE27CD1D061783283C1AC9E4EF6BA3F2071E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 363b244da38da257f21029c19bd2aa9cf9a0ed8275d0c60f38fd3c0231fcc19b
MD5 6a5396177f5c39d3dddce35a175e1263
SHA1 38ff54042c9cf9130d358c09abbc5e1f2964462e
SHA512 c0805a52eef0dc27f956079b44d191173c796296ceb4becab8fcee0b3ba2664fcffb074d79fd500ae4b6a9cf28c3a20f52dadcab32ce49e41f008f232a58f8ea
SSDEEP 192:sxZ2aRtyM/jK1Ml8MkA/faxsCT2d+BIdpdjHW6+WNGYzQFfnIgrJ:sxZ2abMA/faxsaKj5HbGZ9
TLSH
T19A42D7126B34997BCCDBD209BA45BB53D6F51463D2900E48A9FCCA0C05E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9ab5fb99a5829e7792fe3d396d6ac67314b163dd3d215289147ca58615deaa29
MD5 c24dea7ce19b5c3d9d44b26b1b98a8aa
SHA1 9fb7c79f0879a5cd1b016fd2b74cbb7b9c6ae79f
SHA512 2e65dad95eced745112f09fd1f2ce06d4de57e417fc5dea32b6e0b0c70bee9ba5b9cc9a8140ccefc74a1a01685f677010fc52d4ff50f02a21c0b3f9e950f9f03
SSDEEP 192:sxZ2aRtyM/jK1Ml8UQikA/faxszTsd+BIdpHjHW6+WNGYzOAfnIg5RJ:sxZ2abqhA/faxsXsjDHbGk1
TLSH
T1F352C6166A34997BCCDBD209BA45BF53D6F55473D2900E48A9FCCA0C01E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 78ee6d1509e33a030c94a9fbbc326e53a0a6207498697444cfa2130d13f27b6f
MD5 134e77dc1f712ce5ab50a463133caa95
SHA1 43ac5de44ee67e6329ac78bf15894ef98f27e8bb
SHA512 dc6ef6e72bbe1d52e114f56f2e92893a0989d491278318f347fa0927ffab30abbb17af52a8534792d58261e1efa1e930862a004f44e112804e294ffc743b2bc9
SSDEEP 768:JwW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjeroIYiwYq:JwW7kf0Wvqidau1jaa5LA3j1aq
TLSH
T1BBD20A3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 2e5ce6d5ff40182b1630f55dca84b3567f630306e1921df4d58f7b6b74bff52e
MD5 ee86419203b7f96dfb119a6a67c69558
SHA1 430c4b3c0d407a3f72f02d4f51d4a32d31b34d3a
SHA512 ba483b10ac3e2a5fc7632dcc7dae8d02a1b5598acd0d00b1240cbf9325ced8e163a833948cafd0bd45af39aed8801a7730b8fc2080d974b45273619fd2d730f0
SSDEEP 192:uXLsNBT9QlvvWxeTBbqcQmiU1YTI0B4aGBPK7hCI9jlEOdNDqF8:UsNBBUuENbPWc0ubM2My8
TLSH
T131422A767C789C3B9EA3A281F58637032FB4416BE7846F40E6ED6B1C01DB29C1317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cea55f5c2c535ff4a052024ba53d999722cfd67fcb34e5c2571f752cc99fdc83
MD5 881183a21cc0e5c39a0c3a435821ec96
SHA1 3e1a4fcb062e1569cdfaace66092c885dae9a9c6
SHA512 305666ffd413c983ebe4657485fecb4106891d59a6eaafae4429e67e0610632ca9e2f3d6919c806cfad802b1660960828bd8b60919a393825d41cdf4306300d1
SSDEEP 384:5qZcI3zsNBYUuENbPWc0ubM2tyOObjI9G6w7z0:6jQLNaclzty29Mw
TLSH
T124929D727C788D3B9EA2A151F4C53A031EF8917BE3C85E44B2EEAB0D05E769C031741A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 731714a77c8d9106b60ccc3a13c03bf9e372a85ec89b3274c7f7a8ed6da1d014
MD5 91eb41eaa9097c32c80e5fb3f129314d
SHA1 9adc6030218ca357ae07b3dec94f46dbb594cd30
SHA512 6de9d7c8eb13b0ab78b065cf8f68b63b76352dde1e654275880059c1d3aed19aa1be7fbb6dbcde1633abeb2c24a789fd895e4479c35da0dd6c1f77ccb1515ebf
SSDEEP 192:MONo64BAQmiUyA1PW5GBPK7hCI9waDXXU6:MONo6eAndWQM5nU6
TLSH
T109020A396C796C7B9EB2AE44F58637171FD8117BE6945B40E6E82F1C00E764C234392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 707f0b90576dc65c13a4daf3e65697c50fa99d96d4416f22e075cb73ef72989f
MD5 5c52b5e6c1193012026ca361d2d27853
SHA1 85b7374446090a6d006a8911d7d110a130133e33
SHA512 f0de70e8bc2706b7bef508f1fa990d1584895ece88fa21f157cd16c24410e697386d839d8546ca069edfd828e5039afaa02e779a984d156bcc7796decf3bb880
SSDEEP 384:qZcIhsNBYUuENbPWc0ubM2MyOObjI9G6w7z0:IhQLNaclzMy29Mw
TLSH
T15B929D727C784D3A9EA6E191F4C53A071FF9907BE3C85F44B1EEAB0D05A76AC0316416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a1c53d5eb858b1a6e4f19040374b545270d72d22feac611d901222e32b80b098
MD5 7f32252555456091e98ca3ebd2179ac2
SHA1 2b6c19b1411300fbba1ff8b995de7fca636f0843
SHA512 1b095bee149abb017595154a3ffcda9fde075de53c31f124934e2d3f0197ebc5871229419fa721a7f0686ccc68406b06300c1489f2fe1c415aec70a0ee9bd6a5
SSDEEP 192:kONM64BIQmiUyM0Pf5GBPK7hCI9jlEnWwDqFU6:kONM6eoDMfQM2TyU6
TLSH
T159121B767CB8AC3B5DA2A191F48637031FA9416BE684AF40E6ED3B1C01EF65C231741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 863389849cb456bd072c4c846b67d15fd1d5ef5ea1ffbda840cd20fd3407638d
MD5 dc271c00520718bd8472c877e4640c2b
SHA1 0241c77d6dbc9a59a74abd34e7681bba5b5a83ee
SHA512 603cea038041817e6235c38bc38b8c87f0805b7b51b933c5bfcdc2fb3da4c782375d8e12940b7d66510bb95318b98112983f404edd42b449432df41f3dc36b65
TLSH
T14F410769BAF91148B3B77F5AABF6686D447BB9372E07C49D00110D4E0662B41C872737
MD5 SHA1 SHA512 TLSH

Submit Download