a34821045b54b7f4fc9a33a4ee57056cb7941093e5b858df5ada765f5c84ce67

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
category/guitar-pro-tabs.html
Size 64KB
Sample260809-gx2rdaha98
SHA256 a34821045b54b7f4fc9a33a4ee57056cb7941093e5b858df5ada765f5c84ce67
MD5 58654e873fd26e36b9e0e86c9e084dd9
SHA1 dac9443580781528ccb1debcf449f933e424de65
SHA512 9b11a6f4fccf8f689291cccc9a561eefcda5fa33ea33dbb5455bd4088ec2e9518226db77d0ff586eb7b9da7da871972f64da373859539b6603bfbec463215cc3
SSDEEP 1536:FKhapGf2kvuHFjIroc2ZHjrPWU+779N7eHQQWCK6VCQo6OBz:he2EuHFDZHjrPWU+779leHQQWCKaOBz
TLSH
T14653093194A844732A9BC7D9F69B7F1AF5564804CE01AFF2B0BC2165E7D0EE2007B86D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3168	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307295330780834"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{347DE450-8FA8-492D-BE12-8308A2EBAE6F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe
656	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 656 wrote to memory of 2328	656	msedge.exe	83
PID 656 wrote to memory of 3168	656	msedge.exe	84
PID 656 wrote to memory of 1488	656	msedge.exe	85
PID 656 wrote to memory of 1488	656	msedge.exe	85
PID 656 wrote to memory of 1488	656	msedge.exe	85
PID 656 wrote to memory of 3108	656	msedge.exe	86
PID 656 wrote to memory of 3108	656	msedge.exe	86
PID 656 wrote to memory of 2536	656	msedge.exe	87
PID 656 wrote to memory of 404	656	msedge.exe	88
PID 656 wrote to memory of 2536	656	msedge.exe	87
PID 656 wrote to memory of 2536	656	msedge.exe	87
PID 656 wrote to memory of 404	656	msedge.exe	88
PID 656 wrote to memory of 404	656	msedge.exe	88
PID 656 wrote to memory of 4248	656	msedge.exe	90
PID 656 wrote to memory of 4248	656	msedge.exe	90
PID 656 wrote to memory of 4248	656	msedge.exe	90
PID 656 wrote to memory of 4496	656	msedge.exe	91
PID 656 wrote to memory of 4496	656	msedge.exe	91
PID 656 wrote to memory of 4496	656	msedge.exe	91
PID 656 wrote to memory of 3404	656	msedge.exe	96
PID 656 wrote to memory of 3404	656	msedge.exe	96
PID 656 wrote to memory of 2308	656	msedge.exe	95
PID 656 wrote to memory of 2308	656	msedge.exe	95
PID 656 wrote to memory of 3652	656	msedge.exe	99
PID 656 wrote to memory of 2964	656	msedge.exe	104
PID 656 wrote to memory of 916	656	msedge.exe	105
PID 656 wrote to memory of 4720	656	msedge.exe	106
PID 656 wrote to memory of 3824	656	msedge.exe	108
PID 656 wrote to memory of 3824	656	msedge.exe	108
PID 656 wrote to memory of 1248	656	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\category\guitar-pro-tabs.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffeb6a2c188,0x7ffeb6a2c194,0x7ffeb6a2c1a0
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,7385908619249000860,14081578166428617662,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6880420096252900684,2452926245849995612,262144 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,15165208512016083744,17105162520692165583,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16417825253588398104,2649368887194237231,2097152 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,11649549561190039482,1112503759288304896,2097152 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,2112603354611236809,7744833585195945901,2097152 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,8159736120034228339,7275377474919100408,2097152 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,4091149433781847909,4739509511195943311,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,16016924929467656892,576983979492193140,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,15852491052728477382,15793137255286128360,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,15852491052728477382,15793137255286128360,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,5396831297535922622,8881596477983527102,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,7035907877950442327,5726915943207091339,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,10129456470288579174,6718490397463077021,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,8821025814248639515,16877031369409360091,524288 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,1600263040235235821,12879494086098927911,262144 --field-trial-handle=2308,i,13774354696268409424,7498689415053226504,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1248

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9f751771cec5b8275837367148fbc6ef7c4e98c37fd4fccae24e98baa744a4a9
MD5 c09cf1c0f170980b0f44821ee417ad67
SHA1 a1c1a3870a1dbeb25f2f479d1d77923a560fa198
SHA512 3c4f8b21fa1696b92fa1b7b292cdcf4ba6ebd28055cb4fccf01d7ad3e4940fbe7784d9c7d521fdd7a2354087b4182e5afb1bec23363632785548704fa4a2b592
TLSH
T18B61A3B80552092DE3671571D0D11500307086F8FBD3BE9782CCEABAEB37BA3805AA1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d879.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d879.TMP
Size 3KB
SHA256 29ff459346f374fa140c079d65952df5fee6114f1c2144a27c6d3ebb0cb5b98c
MD5 2f75b2f9d6430c51f9cbdf3e71f20470
SHA1 f3b7f1165b1f6afdb684d0658722d6979db53542
SHA512 12e3ad9f24733f8a73a76531cb45fafde1c93d5c8295b79ee6311f5dd22628d03b1cb822df9bb289dcd7b543fe37724c36a9b511c527de5023ceb343505fe4e8
TLSH
T1AE6183B80652092DE3671531D0D15500347086F9FBD3BE9782DCEABAEB37BA3805AA1C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 931dda2a5c37aa07a9fd42c4ddf57ab800a9831f646a7235cb53aeb90496d458
MD5 38131ca3f102c8ae4e76123b924373e3
SHA1 2feee640563d65aa162a8720d2bf3a5643620871
SHA512 388e429e5c3cc783a7ba491960d7acf1ddf63e0f3836a37253a3515f2c638d4ec055e117d0f3a44b49d20afce6e615381eec75457711ed1786d2da7ed7a833e7
TLSH
T1F9419CB7C2D4876EC85552F05B24AE2ADD1E154A42283C5ACDF5FF5F63E20B4E10229F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d566aeef1e6601b3698759ae5aeff75e56ef730aab52f7ad37756a138fce289c
MD5 769ef34ada3b8dbd49abea870be68348
SHA1 f4b592e78c42ede6af85d08182268ee032bfad6d
SHA512 1b65ea92e86f066b64740913370f6d86a1b83841bd9d22663ed857f7fc39cb1b4b4cd7a4b1d902c063b6467994fcdb9e901fdac744f3c20094cb5ff9b99e8742
SSDEEP 192:sxZRRfyM/jK1Ml8MkJW/fKsU8CaEdpdGHW6+WNGY9IKpOBIgrJ:sxZRPMJW/fKsU8MsHbGJ9
TLSH
T1D442D811AA386977CCCBD209FA557F53D6F50572A2940E54AAFC9A1C00E7BEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ba69b7921a193868a3826e89c25fccc4bb306acd9b57723dec308a154b920cea
MD5 360aa29f34e0f8c7f31504ec4b24a682
SHA1 1bfdebcc94e1320150cc6f4c54fd1804ef5f11ed
SHA512 0e40df734abaf800fe431a447d4c50862e7c947a3988d1423a436001a53d77c28d584c415d8936aab4cfd1f5cc0dfc0a0394c248eb95652ad5c6c608df2160f8
SSDEEP 192:sxZRRfyM/jK1Ml8UQ6kJW/fKsIGCaIdpHGHW6+WNGY9IHkOBIg5YJ:sxZRPqJJW/fKsIGwmHbGXe
TLSH
T14252E712AA385977CCDBD209FA45BF53D6F5047292900E48AAFCCA0C00E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 537effd1819e5faf75d535e6d61daeb32d030c03bf41762afc3d817143c04642
MD5 bf984a244008c0f9a08c4bc712c96b57
SHA1 a6615ed2e46b54f3f3b45d95ee96ca39beb3bde3
SHA512 eabb2f917634b34de3ad74ef96e16514b78afdc1f6a88b61f569464cd7a6f4969fc34024383f22052981a4fd6efa9e85306d33218e6cbb909a36a7c2a930c611
SSDEEP 768:hKcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNGro3g6x:hKcv21wWvu+Z+u1jaeFLeRN93h
TLSH
T1D4D20A2B680CCB7E4F841E9CED2AAF8A6DD801CB57988D5447FA484C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9b3a09cf18d7fe48735f69406daabd7c9c24c7c90171abdeb2e864113115ce77
MD5 8b24262b73fc5ba7b8522a5726aeb688
SHA1 c1a6835b6c4d1a3d244bf40946e5454d3a420472
SHA512 27dd55703b20b0ed009cfffc2c3d42e1120632ebae0ea9995cc373cabda18df7c3b35f6eeb141132f9e8d696312fe89615ef47160ec2bef7f8110f2d51a69fd0
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDOFWKeMTOasKricg:mTZa1g
TLSH
T1D7914005713B125239BE7C0CA366896B8E8235637828E57F7BE804A20F67E511DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6525cddeb8562972cb193a0cce8407032c37a4906c6a89bb4e6bb755781ad69f
MD5 8de5399c6a223476c2e255b65187d67d
SHA1 0ddc5df2766640885804cf69598e920708afeebb
SHA512 9a59c8727f4197e7ecfd26da21faf7cf8578363db4da3fb36fb7d20bc371bdae523672db4956785c29d38ccdb97806afee4d6cfc1a79bf933f933cdb8844cc6d
SSDEEP 192:urSLsNmYQUIlRBM+YLex7/QmiU1Fw/Y4e+CG5+FdeuInIEPJiZrqPLqyWY:hsNmYYBMzijo/e+CrdhMgSXWY
TLSH
T109422A32BC786C7B4AE3A545F40735139EF851679AC53F94DAEC6F0C01DB6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 427ca43b8c460983e37c8da83596ddb52a31eb1432149977efaf55b74a2abcca
MD5 85c3d02546d0b08b7158cc8588bc19c5
SHA1 968a4c9ec09bfd75cf4462bd39945917d9e8af31
SHA512 0cc420d44060e035c19f81f2d7fe07e2efd79c9fc47c5882bbe314442189422b01e761611135a21f7bb7d0ec31bd8fcf901f826f525facc99edcbc7168dc0026
SSDEEP 384:LZcIhsNmtYBMzijQ/e+CrdhMeSnTKwBODNZOCtKDc:ThYaNmzEeSnewBKZO2/
TLSH
T16A927C71AC386C7B8AE7B505F44735079EF891B3E6C53F9496ECAF1C00EA698130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8b7cba82a511e408852c673f43608c63686e77f2d00543620e7cfdeab2090011
MD5 e92088f2f6c8721c83cf59c0510fc807
SHA1 401d046aaa6f9537a4552b76e8a12d2c4678529c
SHA512 a0b3839414285d899c7223cfd089f5b1664a2477dd2eebcd8bb3b33feedcf56a9f24be0c27eaf11d26aeb8810c2b24a411cad41791ced64c37d8236c7a67451d
SSDEEP 384:eZcIhsNmYYBMzijQ/e+CrdhMeSnTKwBODNZOCtKDc:chPaNmzEeSnewBKZO2/
TLSH
T12E927C71AC386C7B8AE7B505F44735079EF891B3E6C53F9496EDAF1C00EA698130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4d45879ab7b61ebb20fa7791a9fd413cb055220c75c045252b4ec504da5b8b22
MD5 6b9c2e9af9148cc67a47ff726595fac8
SHA1 e371d88c6f137b2be9137c5c4fc9e17c14ebe816
SHA512 1d29338e04e6d31ac725eedade2f7a9111a919683d049f2c16702c271b9cd0f0a459f060e3e2078d5c9693e79a0963be37ffbf776dc74d32fe2fa3a54774ca19
SSDEEP 384:MZcIuzsNmtYBMzijQ/e+CrdhM3SnTKwBODNZOCtKDc:auYaNmzE3SnewBKZO2/
TLSH
T125927C71AC386C778AE7B505F44735079EF891B3E6C53F9496EDAF1C00EAA98130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ee192fe0251054fa0415c3c6eda219a109af479a3d318c7d3320a748cc809978
MD5 370f1900986adf1f11c09b792456d3d4
SHA1 f59415f3b2e1ae639eb64d1bfa3b66498d1f3696
SHA512 872e37f8c4e516c21aa8b342ea9da915d1b4d3bf03c578ac64d925286ecb7053791b8fe6b18542133c89612bf5f0b687db6c0aa509addd48754d35f047e0e1d8
SSDEEP 192:JONVu6v+YLNQmiUy7GZh+CG5+FdeuIcus6TK1U6:JONo6vz/DZh+Crdh362U6
TLSH
T18A02EB356D382CAB9BF2AE05F58736135FE8117BE9952F51DAD82F1C00D765C2303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c537102fa47753243401b5c302eeab9021b16b0ec7ec1bbe28e68d0efa79ca59
MD5 0d2a420e8b1e70a6d1d6b38cce7c5261
SHA1 c1712ce83c1e71bf988f3be2aef48d63af9e1501
SHA512 6da916f553bad0953af4939dd12d2046c7a291d1ccbf3c30fe378a067c927cb11f47db1b55067b5702248c37930662b30e0326792b3a1fc16fd55cfb01488bd3
SSDEEP 192:3ONv6v+YLpQmiUyBG/Vh+CG5+FdeuInIEMCHZrqPU6:3ONv6vzz/dh+CrdhMFSU6
TLSH
T167120935BC786C6B5EE2A945F48735139FE85127EA897F80D6EC2F1C01DF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae62de0f-eb2e-44e3-927c-60caead64715.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae62de0f-eb2e-44e3-927c-60caead64715.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7457f663aba6718daa977057f1a67b2bb6d45462ed0748d7935747a53269a5b1
MD5 53ac444bc5793127c83ecc7c2031bde1
SHA1 32e4bc5e632c4e996300f989529854da1499e430
SHA512 693108715e5277754534f38f8294e0fd9fb3c0b71a8626cfbfc447417f022b81e7411f4db4001bac5ac279e1ec3917f3a0fd4ab2e6ab041f6503ece1e1f283bf
TLSH
T10041F3A8A6FD1148B3B77F169BF6A8AE487EBD332E06D45D20010E4E0666E01CD71777
MD5 SHA1 SHA512 TLSH

Submit Download