0cae142a0359f5c1b89dc7b017d7725aeb9d4f35e8aef76006086f5bb3ac5418

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
info.html
Size 1.3MB
Sample260810-g6basaee57
SHA256 0cae142a0359f5c1b89dc7b017d7725aeb9d4f35e8aef76006086f5bb3ac5418
MD5 c929a907e13694a086b5c12cb1a30f79
SHA1 0ccb13eac605e9235a29d3a6aba8b27512644e39
SHA512 ae0f70d67cdc178604a2dbd4bbbf9a253122fbab67637c81cca61237469d5f6ec30d2667f9c2d7773ff12de7cc15e01ffbce5bc8d21cdccdfb373d4d877255f0
SSDEEP 24576:k9+Db/9J9s9N9p9QDb69WDbT9NDbq9+Db/9J9s9N9p9QDb69WDbT9NDbT:phnrThnrT
TLSH
T1C3555944F22655B9A97B133B73CBA58D7220A403EAF2E995B2CC15005FCBEFB1417789
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2188	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308166912047427"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{45D5B7AC-30EA-4E4D-AC3D-0A1E5079937F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 4264	1644	msedge.exe	85
PID 1644 wrote to memory of 2188	1644	msedge.exe	87
PID 1644 wrote to memory of 2976	1644	msedge.exe	88
PID 1644 wrote to memory of 4368	1644	msedge.exe	89
PID 1644 wrote to memory of 2976	1644	msedge.exe	88
PID 1644 wrote to memory of 2976	1644	msedge.exe	88
PID 1644 wrote to memory of 4368	1644	msedge.exe	89
PID 1644 wrote to memory of 2624	1644	msedge.exe	91
PID 1644 wrote to memory of 4392	1644	msedge.exe	90
PID 1644 wrote to memory of 2624	1644	msedge.exe	91
PID 1644 wrote to memory of 2624	1644	msedge.exe	91
PID 1644 wrote to memory of 4392	1644	msedge.exe	90
PID 1644 wrote to memory of 4392	1644	msedge.exe	90
PID 1644 wrote to memory of 3312	1644	msedge.exe	92
PID 1644 wrote to memory of 3312	1644	msedge.exe	92
PID 1644 wrote to memory of 3312	1644	msedge.exe	92
PID 1644 wrote to memory of 3512	1644	msedge.exe	93
PID 1644 wrote to memory of 3512	1644	msedge.exe	93
PID 1644 wrote to memory of 3512	1644	msedge.exe	93
PID 1644 wrote to memory of 2480	1644	msedge.exe	99
PID 1644 wrote to memory of 2604	1644	msedge.exe	100
PID 1644 wrote to memory of 2480	1644	msedge.exe	99
PID 1644 wrote to memory of 2604	1644	msedge.exe	100
PID 1644 wrote to memory of 3276	1644	msedge.exe	102
PID 1644 wrote to memory of 1936	1644	msedge.exe	113
PID 1644 wrote to memory of 3052	1644	msedge.exe	114
PID 1644 wrote to memory of 4732	1644	msedge.exe	115
PID 1644 wrote to memory of 2764	1644	msedge.exe	119
PID 1644 wrote to memory of 2764	1644	msedge.exe	119
PID 1644 wrote to memory of 5052	1644	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\info.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff8e9d2c188,0x7ff8e9d2c194,0x7ff8e9d2c1a0
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,13026797319635260125,2140436924740695977,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,13875633993543609623,3473827015020690585,262144 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,3006764721255296968,1754211561370967908,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,8197045133632045881,14569874987782194909,2097152 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,17439340319689222161,6223943541288300276,2097152 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,6754677489880545535,5521177173363266241,2097152 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,10338298663497624883,12946351359125587359,2097152 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,16069777427881555144,7885075184050397434,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,5492291712634522357,9540106291237873614,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18370959562764462234,902210281492495829,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18370959562764462234,902210281492495829,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,16316407560701122511,15695358296826267269,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,11694490418648773801,7975889729055167118,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,10533387957280652216,9850088085589977670,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,8458543977085363505,806994290184572006,524288 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,1663033590851791754,17329689706184220376,262144 --field-trial-handle=2760,i,3454993321629006565,10508121130734528838,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 28d4b7a27d56954a4640225249d0c6bffe4a857d277fb6ce23d7aab07b6f67c4
MD5 4956e9d85c47251ff9154974a69bdb54
SHA1 bb13ab3f0a8bfdb9cc21a952f1ea31b03df61246
SHA512 83e61fec645fb3935e26b0e776e527c9dfec3c91de8fce0060c0ed4e5f34b90e183606a3d4580655ce5449951f165d49b8c274a2e62ede09629d1c56576ab027
TLSH
T1F2611B380B5E0482E3A256B1B4E20105717182F9FF9FDE4DEF149DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bea8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bea8.TMP
Size 3KB
SHA256 38ca24178b828c92b94fb66c88b62a29d61b147a61c1d5ecc3520c11cae79b1a
MD5 ca82300336dfd6c1dc762894d05a9f1b
SHA1 be544baa3542183c05eb208bc54156bd3666947f
SHA512 41cdb9e7ab6e600f02d96b792802605d82a04f7d51b6e60e97ffbedfdb51ba78a049bc3465230e8df25e956dcc7efbf7bb1c62c21c45a3129554e9a5a4270daa
TLSH
T1DA611B380B5E0482E36156B1B4E20105717182F9FB9FDE4DEF149DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9764f32e77e228a732e239549cd230a8cff1932caabf98229572aacde88090ac
MD5 9907ea31ed5c770c1b4f4c5be59d75d9
SHA1 addccaca9334dc25a0f95e69b661ba9aa2282377
SHA512 9dbd4d69ad42d0fa575bb16b3cb71fe86864fa23388933a8571816725dd60053dae5d391555624f23adf9b0a6ee84853ab771cebc93b5c41fce06e5f848c526d
TLSH
T17B2181B7C3E5866E891156F05A24BE1BCE1D0606422C3C66CAE4FF1F93E20B5D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b88b4fa55eaffe448e4c7ca60aa5d6358ab3a5ad6de3058841e40fcacd96e97c
MD5 7610d628710ea4fdc429aa2c5cc6d408
SHA1 e45473e715a91fa41370c345eb74edc9e5d5217b
SHA512 022b2318c7c6f875923f3ca71f0122b372e852d731160464bc747a41348367d03700918082ea27aad5e019ed2b50138b06f279da981bd3041bced088ba9501fe
SSDEEP 192:sxZ7RwyM/jK1Ml8Mki/fksPPbsIdpdcHW6+WNGY9IKStaIgrJ:sxZ7+Mi/fksPPBiHbGS9
TLSH
T17142E7126A34A977CCCFD209BA55BF53D6F9453292940E54AAFCDA1C04E6BEC230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 090a78dab1242bbbd0651ce86e96d12579966eebed0a886fb9d37ab0c0d9b282
MD5 2a39157f674f3087d97e3fa833b1c144
SHA1 090a4f3c20266097dc5a75cf90e22129b3b211ab
SHA512 e9efb1539733077ecff2f35f7d4bf1147e066f291914a8e314bbd59fac94f2241c2686242840c39cfb834ec77b93fa083aff1babde6d3e7152eeb57ea0577f0d
SSDEEP 192:sxZ7RwyM/jK1Ml8UQwki/fksRWbsIdpHcHW6+WNGY9ICRtaIg51J:sxZ7+qDi/fksRWB8HbGFN
TLSH
T15852F7126A345977CCCFD209FA41BF53E6F9457292940E54AAFCDA1C00E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e8fd53dba36879890f284c8b5963a5326a562f1c6ff1eba5453d1d554fd367f9
MD5 8a61f5d2d34e4ed68d1afb185d3b0930
SHA1 fd549d9a392d8ccdf7904693b44255182f43c919
SHA512 f492e88c0ab67b29f81469f315bad0b06505da93293f6e1ddf15c93f4e6f2a47f19f27642742fc3e455376c15552d6a5d781dc3e328794fc5edb71d3c49f59cf
SSDEEP 768:dOcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNiro1g68:dOcv21wWvu+Z+u1jaeFLeRN51M
TLSH
T17DD20B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b4d733403d96a3073ad95c2af7d46d9c345e85c45c9d14492b6c23e5503e656
MD5 d28da87657eed80115da4d7c74470e16
SHA1 64072464649c76a1974d4a7efae6ce3c5dd81c32
SHA512 0be495d1917a0469af9e21371124c59fdb4ff7fdbd7ae88dec9e3ce40fc44793101082350189b63bb04e4550c101ccb257791f0e456119c2f5e2513b62464b32
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDWCmYK3Kqit8R9Pbfg7DOzFFgK91FngBVFE:mTg/PH
TLSH
T16A919405347F53813CBF684CD26986760F4231A3742AB5BF7BA800A60E6BE159DFD8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595942.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595942.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 61fcdb410caa5485d3f8e5d1535aaf411936d8171577ae8ca279071c2a749d87
MD5 1aae94fd41c1f1b4a696271ce70e7e2f
SHA1 b28059abeedf439d7c557d2b5e696cba6aeff804
SHA512 d03588d066b4ebe92a5cae5ae543cd7118b4d8a42bea2a5baf5b25167aeb70145be22a3d2c710195ac2f416dd8aae4674304f7f304911dc719283a3c4d8aab64
SSDEEP 384:pZcIhsN9OQKziU/u0e+CBd0eskU6HlytEDq1X:hhrju/JxskUoy6DqN
TLSH
T1E8928E3198742D775AEFB501F84735039EFCC127EAD52F94A5FDAF2C01EA6A8130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 6a41f467c59fffd98426dd3eabd784deae9b85dc62a97790edd0e070689d2c26
MD5 6b3c12ae11076d702a75e8506f0b0dc7
SHA1 474d26a2c23d87371f4704bf3a2323997deedbb2
SHA512 b54f3b04c7582bbfb756ba5230973a56926dfbe5b8a9a887fe301028cbb39f435f1a34e7bb5de882bc109507cf5dabe6c764b7cc81f76fddf817a46543f8b9f3
SSDEEP 384:fiFiZcINzsNH8TUNTUlIlOQKziU/u0e+CBd0esJU6HlytEDq1X:qFQ12wgmju/JxsJUoy6DqN
TLSH
T125A27D324864597BAEFFAA41F84A35038EF98173D9D57AA4A6ED9F1C00E71E8130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d9ca183488a8e83a7119a0dfd9a547d74e475eda8c9b701bf4c13dada4cb11a8
MD5 6317361d8bf8b602498ce6dd2996f30e
SHA1 2430ef54ca81c31a7b13d3c7c7e5f60f0839d64e
SHA512 a9713b98792ecefdf278ca57126180caac69d3e9e808ce16fc37c84a9ddf8f64300c3cde8da0929d3c62c2843c6d2853fe940abc36bbf60617a785130f883076
SSDEEP 192:JONa6v+YLNQmiUyJyZh+CGD+FdeP9ospus42AU6:JONa6vz/tZh+CBd0esJRAU6
TLSH
T1C202E935AD382C7B9FF2AE45F5873A175FA82177E9912F80D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fb9ef348c96e14fc56b505b20d69c64fedcf1de2c627c2f0a1968a849942b9b0
MD5 8aeeee677fc52f60c72e2082b99713be
SHA1 a5f3b9d7caccdc2432bd9ab067282d47727dca6d
SHA512 121d6641a8f6b4006c643e89e6cf23d19c74ea4c2e19f442508c9d4f3d71654ac97183e5a6ef93e8b77a8d28d57f0567efc39792e671eaeb5028bf639ce2599c
SSDEEP 192:8ONo6v+YL2QmiUyfyUh+CGD+FdeP9osNOeByCHJqFU6:8ONo6vzulUh+CBd0es9UU6
TLSH
T1F2121B35AC786C6B5EE26951F48735139EE89237EAC63F90D5EC2F1C01EF69C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7c339c0-66f1-4583-a215-364c97735709.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7c339c0-66f1-4583-a215-364c97735709.tmp
Size 19KB
SHA256 f1077762c4487c44b184d61d81dc96e6fcd4d1b7034d4010c3e384584c8d416c
MD5 9942dc77b5833b202d40be5828b2f798
SHA1 1ee6d69691ef011a8353271668f423e93365fbc9
SHA512 10a3991a7e2463a642621b3c6fd0b0151642e5992bed1f7704ffad93fd3415266c7fea55d075471f910da6df3ed971ad6b2e901cf5e24def8b53cb6b25ab64fc
SSDEEP 384:bZcIhsN97QKziU/u0e+CBd0eskU6HlytEDq1X:Dhwju/JxskUoy6DqN
TLSH
T1EC928E3198742D775AFBA501F84735039EFC8123EAD52B94A5FDAF2C01EA6A8130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe7a1fa5-7ab0-4117-988c-be4c41cdc527.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fe7a1fa5-7ab0-4117-988c-be4c41cdc527.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f65062b7508d38b893256c6527ef032f4ccfc43f548aed5632f5507fd4776a2c
MD5 fddf52986d5b95cf4c3044ee54caf4e9
SHA1 cff1dab51de760a688a3bf66a403dd72c2e05bbb
SHA512 f7ff0c6536cb20456a3f20e5a2ea78a4d592febe1e84a1deba0d3a2df5a0e1f5624eabb369395d3a2586c92629257b54aeea03914155d20ce463275f038ab602
TLSH
T16F413B58B6F91048B3B72F5AAFF6A86E887FB8772E06D55D10110D4F0A62740C871737
MD5 SHA1 SHA512 TLSH

Submit Download