5eb86f31ceb967e13d2738fb69dc5ef8e76a2051e1785e32d7c0abe06ade7dec

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 00:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
web/index.html
Size 33KB
Sample260808-ah9ecaaf78
SHA256 5eb86f31ceb967e13d2738fb69dc5ef8e76a2051e1785e32d7c0abe06ade7dec
MD5 451b8feec3827200e758403ac6941dbd
SHA1 7a337c1b3188333af84d13c89b6172fc7f559b4a
SHA512 ed75b2d49086ed9b825bbaccc68b05436c6fdaf9ad6321e2a5e168a22cfc8457ba0c90fb11f18de20886ddd719e99d71b1ff4e50bd0bbd18a3fe8887ba818992
SSDEEP 384:H8o9deeZvUCPhIe2jPb2tlV1PTWnFwySc40Z9tD3IMdYXfuOtrNDRYOk:F9w6UCPhIO9WnyygS9tDz6tBDRg
TLSH
T1AEE2A42484F80A730197D285B6D2DF0BFA809447DA0A825435FE17DA5FCEFA9C867789
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306216540732323"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{A9224FBB-2721-45B1-9166-15201C06D4D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 3340	1080	msedge.exe	85
PID 1080 wrote to memory of 4140	1080	msedge.exe	86
PID 1080 wrote to memory of 1736	1080	msedge.exe	87
PID 1080 wrote to memory of 4140	1080	msedge.exe	86
PID 1080 wrote to memory of 4140	1080	msedge.exe	86
PID 1080 wrote to memory of 2976	1080	msedge.exe	88
PID 1080 wrote to memory of 2976	1080	msedge.exe	88
PID 1080 wrote to memory of 4928	1080	msedge.exe	89
PID 1080 wrote to memory of 4928	1080	msedge.exe	89
PID 1080 wrote to memory of 4928	1080	msedge.exe	89
PID 1080 wrote to memory of 5000	1080	msedge.exe	90
PID 1080 wrote to memory of 5000	1080	msedge.exe	90
PID 1080 wrote to memory of 5000	1080	msedge.exe	90
PID 1080 wrote to memory of 1636	1080	msedge.exe	92
PID 1080 wrote to memory of 3796	1080	msedge.exe	93
PID 1080 wrote to memory of 1636	1080	msedge.exe	92
PID 1080 wrote to memory of 1636	1080	msedge.exe	92
PID 1080 wrote to memory of 3796	1080	msedge.exe	93
PID 1080 wrote to memory of 3796	1080	msedge.exe	93
PID 1080 wrote to memory of 3988	1080	msedge.exe	97
PID 1080 wrote to memory of 1884	1080	msedge.exe	98
PID 1080 wrote to memory of 3988	1080	msedge.exe	97
PID 1080 wrote to memory of 1884	1080	msedge.exe	98
PID 1080 wrote to memory of 2068	1080	msedge.exe	102
PID 1080 wrote to memory of 2136	1080	msedge.exe	110
PID 1080 wrote to memory of 3796	1080	msedge.exe	111
PID 1080 wrote to memory of 3564	1080	msedge.exe	112
PID 1080 wrote to memory of 4324	1080	msedge.exe	114
PID 1080 wrote to memory of 4324	1080	msedge.exe	114
PID 1080 wrote to memory of 4936	1080	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\web\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8ea0ac188,0x7ff8ea0ac194,0x7ff8ea0ac1a0
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,10416621018581668154,15498119754297806074,262144 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,18159612600272377680,903554225552509344,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,12483937699434644773,1579206001427346107,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,11163875285213774444,13344519503851286587,2097152 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,2327627692529562164,5467574626258153910,2097152 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,10828437241352204763,1564581182675412752,2097152 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,9890876446758675216,17717135921322831936,2097152 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,15615636618823814828,10495344754623123729,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,13130808004496901157,4477196291543457069,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1424935626069398657,12191653610215004056,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1424935626069398657,12191653610215004056,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11216184493937870534,5909433296415950518,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,9653521115661458128,10762939345920087118,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,6405061852828051256,12497437885523114252,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,16250312022337901311,15703901711386152665,524288 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6288,i,2904340586743855570,12714545439818589741,262144 --field-trial-handle=2856,i,1857108842787838856,6624309048161724971,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 96b0b594663b67eaec062f75f5c3b438544d0babbc6adf6adab9977f60ca8821
MD5 412eb9244f1a8082a95fa48a3007fe51
SHA1 2828772ed2636719738f1057474e5617c115f934
SHA512 8fc11db01d6526d8806ae7e070c7e16b823289c24bb5637085342a5c4edcca56647282906da8515b9a03cda3f3985b662095af927f6c6f6d61f666cba5dda811
TLSH
T1F1611B380B5E0482E3A156B1B4E20105717182F9FBDFDE4DEF149DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bc65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bc65.TMP
Size 3KB
SHA256 7c4a8289667b95397f3f76d2c95d673e524fa37fd20553e3379cf19c50558adf
MD5 facacc599b597ecd1782ff2fa2d5b267
SHA1 3e2d727da79a37e55a8b4631bec72cf553e5d243
SHA512 162edf520b6911212d51ed338e7c4ab162bdabf7d8a6e0457714457f329d5752db487826fbabf010b54ade859105ce9bf1c2a1e1668b039f954c71ff50460f6d
TLSH
T176611B380B5E0482E36156B1B4E20109717182F9FB9FDE4DEF149DF55A3632AC9924AB
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 79ad7da09738ca9ed5cd431b341291606258add293f8b79a1592725c5a2e68f1
MD5 2435eb138d048989431acd89f7cf0a88
SHA1 c2c44b04db4789ba721089c3176b2d2011059217
SHA512 3f02ddce715d757f79e66cdc2d1c0cf7c647675d21cab8ebfaab2d3c28ed0ca4b3c8d6903c905dc367f07eedbd921a53dde9922867319c6e573354d069dc0968
TLSH
T14041ACB7C3D8876E881256F05A24BE2ACD2D050A42283C2ACDF5EF5FA3F2470D10129F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a12947ed19c3ed4203623a8756fd8ddaa8696c1d3dde0db75f6f25efbbd356a4
MD5 563e575d17726422ffc37496dfe11392
SHA1 aad1ddb9cc880de6c56c7109be430360780406ce
SHA512 9ba10c41ea3aacfbd5f673ab5ced94253715e86105d5fbc8ec9800bbf281d8f582ba7beeae65809cf5640e07dcfe30e1406948ffbe2408a7474e943fec28bf02
SSDEEP 192:sxZcRhyM/jK1Ml8MkF/f9s6CUZs9TEdpdJHW6+WNGY9IKsn2IgrJ:sxZcDMF/f9s/WPLHbGy9
TLSH
T18142F8016B386977CCDBD20DFA55BF93D6F9056292900E54A9FCDA1C04E6BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a896b3f843f81159bde86005d88e492478cc699fc73b186ff9034438c10a66a4
MD5 c88e0b03bdeb0c55440c1f0e257f41cf
SHA1 81aa0183b36e11f96896135828d8e06dca1c270a
SHA512 35541a02ec563b2094c21c093ba64b072bad9f8794395f8d644521e3d9a6e15a8b8cfd9cec61b7501488d8a58e0ae78b9b2c23ec89edf22e99ea7de12c645dfd
SSDEEP 192:sxZcRhyM/jK1Ml8UQDkF/f9sZCdZs9TIdpHJHW6+WNGY9IsVi3n2Ig5LJ:sxZcDqoF/f9sovJpHbGUV9n
TLSH
T18552F8116A386977CCDBD20DFA517F93D6F4053292900E44A9FCDA1C04E6BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e4a1a78d82ca2a17859ee1861f4c955eb851624a969c818c98d5e72d84b5822a
MD5 cfcf95dfa535a2fe858336f59dd5edcc
SHA1 14e1ff83135ae76374ce45eb055c377dcd6a66c9
SHA512 28634868cf56be1764f8071f36760abb81000f6c00111383500d25f1ebd08a009bc689855d8a214aa1249306beb7afb94a2392f0c501dc39a79a9f2191ace042
SSDEEP 768:e7cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNlrotg6x:e7cv21wWvu+Z+u1jaeFLeRNeth
TLSH
T143D20A2B280CCB7E4F845E9CED2A6F8A6DD801CB56988D5447FA884C03C77EB511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc35a30ae4073f6826be2ffb8042a01c5bce24c61596bb5487d48ab1ab6e2082
MD5 50a2359aa09ac7555a2689f253c7e222
SHA1 7fb9aafb83b5fa4e872244593476f90a4b1f63fe
SHA512 b5e8fab1c0d75ce1245557a6a8404e88ac72be1dbde32d89a89adaf2fcecfb37d8998362d4d6ec522f90cbebb979a3196706b4d59d5173663665b6ae34267fdc
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDWCs4KJ+6i0gKVGl:mT0LTi
TLSH
T1FF917101317F82812C7F794CA6A5A9364A4276633528F96FFBA904B14EA7E101DFCCD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59575d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59575d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b4bc899a4a563cfa8476ff78953c061f9fbba59352e771c43de450173fcc49e5
MD5 d8af16ba16d7703054fbfa1ae8a50d42
SHA1 d007b86f716866a69432e658a0eae4a8d0174e40
SHA512 5f573c8bedcbb7fdb8e3d5784785bae195b38c91dbf9ef55bfd36acb023cddb0402339f33aeaa29535139d96a8446809bc752ee1d0843e7b13da60d2ca296617
SSDEEP 384:6sNVyfmkvrzij2UwPBe+CBd0esU4DcRX0o:6LmkvHypwP4JxsU4DcRXp
TLSH
T127423936AC782C3A5FE3A509F44736139EF49167DAC53F9495EC6F1C01EB6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3ad3290f389293eaecf2b8b5e9e87fe3db548a38a080b1dc14707ecf346a1ff3
MD5 7b1428a738fe0068188456a8e7337a46
SHA1 bc2442aa4f3d797bd720b44c043dcb128ffc649b
SHA512 ed1bcc379fd0861aa802fd87e82390ea181e5eb2aebf8fa269ba9e91e44005e4dd97dc6d683c6396054ffca909fa43d872d1ba08c510fca9c5cffe9b62159e0e
SSDEEP 384:uZcIhsNVLfmkvrzij2Uw1Be+CBd0esU2DcRnTKwBODNZOCD:MhkmkvHypw14JxsU2DcRnewBKZOU
TLSH
T126928D75AC382C779FE7A109F44732138EF89173E9C53B5495EDAF1C01EA698130AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0e575e9063e3e65f64f31b35f9bb73e207558dc7c66e779134814a6f6d34dc23
MD5 8f18af7e6bb57c721eea73103f141890
SHA1 4d8d03ff9ce740d9559f5bf39494232432d35650
SHA512 25fca54cfc65c5e5a73d4815744eab5355e4dd0756e4982f1c6819f48c15b74cd923cb78cf119f04ae733d99888244a91fdc86c7a13113757000c1be36147d7a
SSDEEP 384:PZcIhsNVyfmkvrzij2Uw1Be+CBd0esU2DcRnTKwBODNZOCD:HhLmkvHypw14JxsU2DcRnewBKZOU
TLSH
T196927D35AC382D779FE7A109F84732138EF89163E9C53B54D5EDAF1C01EA698130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d89881cc4954031c4af88dcdca4cc964859e0d8c2a3ca52ae56ef5d6a05e2bd8
MD5 1396acef0f961feabf040d11b4eb65a6
SHA1 10e6bd04cd91ffb17936aa988f72e7cb3da96acf
SHA512 2d496350c8ddc6a6c2a8f70fa36ac5d491d93ddf05829b6134da30dbacec73d1ebf6602c6483f6ef2e12dce2ac3ba8c0f1a281db6bdf182340f6ddb2beeda7d8
SSDEEP 192:JONa6v+YLNQmiUyt/hZh+CGD+FdeP9ospusc32AU6:JONa6vz/AhZh+CBd0esJcmAU6
TLSH
T14602EA35AD382C6B9FF2AE45F48736275FA81177E9952F44D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bada3822ce601b947938677d48b5a7ccbd5610bc8de5f6ef24dbd1b90d43cb14
MD5 03fb85df54486590bccab43cc610bed6
SHA1 835c65aee3786bc2df4a55d0a79638f24174eaad
SHA512 7892fefd0b8a5ca2f6df7382ad331717e16686589f3372a11e24dc93428c7af88f115b30fcc90c231a68d859c19ccf83e4eeaf89e8ac18b16531eedde982578e
SSDEEP 384:1iFiZcI7zsNv8TUNTUlIlLfmkvrzij2Uw1Be+CBd0esU7XcRnTKwBODNZOCD:8FQv2wgdmkvHypw14JxsU7XcRnewBKZJ
TLSH
T1E6A27D329C68597B9FE6AA44F84732038EF491B3D9C57A64E2DDAF1C00E76DC130AD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3ab60111c83ded90928870aca87fa1d9a51d253fa0695f2faf2599e49b8067b
MD5 8dd758d4468c30f2abfb3e47780bab81
SHA1 1634d75f23cc67a605f1ec9a636dd01eabadeaf2
SHA512 24ebe5cb1083462acaa2c98d9c100c49777a87677ade70964d2bb403af37a2a03ef6778b93cd4d1b54f23ddc5663f82f19e349219bde53ee01cf65a5a97ca1fc
SSDEEP 192:LONSp6v+YLCQmiUyou/hzh+CGD+FdeP9osNOeBu6CHcWqtU6:LONo6vz6dOhzh+CBd0esUjcRU6
TLSH
T117120A35AC782C6B9EE3A545F48735135EA45277EACA3F90D5EC2F1C01EF69C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de5a3c86-0062-414d-803f-9418c800e498.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\de5a3c86-0062-414d-803f-9418c800e498.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download