9fcb53be567c648f0f1938f37595e9f8828572a04e60269d766d56d4ccfb1d1d

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
card.html
Size 1.3MB
Sample260810-g6basaee57
SHA256 9fcb53be567c648f0f1938f37595e9f8828572a04e60269d766d56d4ccfb1d1d
MD5 193efe6d0b431becc46f416d94e9ce0f
SHA1 cf3d9a62d91b7cff6e604347e86555372dc31fd1
SHA512 6c5824438997cf800e926138b906e04841c9d6d5604e87d7ade96c42d483304896a8603010fa015b177e4323b0182848214c5784cb848b73d5574f483509da1e
SSDEEP 24576:k9+Db/9J9s9N9p9QDb69WDbT9NDbq9+Db/9J9s9N9p9QDb69WDbT9NDbs:phnrThnrs
TLSH
T1C5555944F22655B9A97B133B73CBA58D7220A403EAF2E995B2CC15005FCBEFB1417789
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4336	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308166909961490"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{4D0F81E7-8B1B-40F5-8982-9B5BF1CF4A66}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2092 wrote to memory of 2620	2092	msedge.exe	86
PID 2092 wrote to memory of 2532	2092	msedge.exe	87
PID 2092 wrote to memory of 4336	2092	msedge.exe	88
PID 2092 wrote to memory of 2532	2092	msedge.exe	87
PID 2092 wrote to memory of 2532	2092	msedge.exe	87
PID 2092 wrote to memory of 2200	2092	msedge.exe	90
PID 2092 wrote to memory of 2200	2092	msedge.exe	90
PID 2092 wrote to memory of 4732	2092	msedge.exe	91
PID 2092 wrote to memory of 3380	2092	msedge.exe	92
PID 2092 wrote to memory of 4732	2092	msedge.exe	91
PID 2092 wrote to memory of 4732	2092	msedge.exe	91
PID 2092 wrote to memory of 3380	2092	msedge.exe	92
PID 2092 wrote to memory of 3380	2092	msedge.exe	92
PID 2092 wrote to memory of 3104	2092	msedge.exe	93
PID 2092 wrote to memory of 3104	2092	msedge.exe	93
PID 2092 wrote to memory of 3104	2092	msedge.exe	93
PID 2092 wrote to memory of 1080	2092	msedge.exe	94
PID 2092 wrote to memory of 1080	2092	msedge.exe	94
PID 2092 wrote to memory of 1080	2092	msedge.exe	94
PID 2092 wrote to memory of 896	2092	msedge.exe	100
PID 2092 wrote to memory of 896	2092	msedge.exe	100
PID 2092 wrote to memory of 3828	2092	msedge.exe	99
PID 2092 wrote to memory of 3828	2092	msedge.exe	99
PID 2092 wrote to memory of 1276	2092	msedge.exe	102
PID 2092 wrote to memory of 4596	2092	msedge.exe	108
PID 2092 wrote to memory of 5048	2092	msedge.exe	109
PID 2092 wrote to memory of 1500	2092	msedge.exe	110
PID 2092 wrote to memory of 1964	2092	msedge.exe	112
PID 2092 wrote to memory of 1964	2092	msedge.exe	112
PID 2092 wrote to memory of 3488	2092	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\card.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9c026c188,0x7ff9c026c194,0x7ff9c026c1a0
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,10090570503343495876,9518957916916318379,262144 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,2837107774812774824,13690619060396596957,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,1467025201767115296,16664673796360317529,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,4446206676278075265,16053832215689927458,2097152 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,2382077694070529329,10251586622946134950,2097152 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,968417461699737458,11600394335167612416,2097152 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,11381878388412495497,2009366497899943124,2097152 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18164048112274596498,10113377526851963633,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,16338316799434595931,12263794400908941672,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17364387994370780612,14866725408167185542,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17364387994370780612,14866725408167185542,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,8196911140545965071,9012002644113308201,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,6772248793418999756,2431054915203948571,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,16329633093585486444,11031991900141206181,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,7927581593058128937,14662276201773792111,524288 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,12110421106169882213,1922335386014682191,262144 --field-trial-handle=2388,i,4021696672842424413,2417917845654793186,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 77d580940eec545baec689f79e9816cbc54dcf8ecdcc98b1fcdc9639329be477
MD5 2847be0631ba9bda65d6fa25d3a45756
SHA1 bc56ccbc51aa23454b9c9c89a11d3c5f2386d932
SHA512 3ece6a2da1f9e4ce1caf9c09d1eb4e7acd6c9db725cfb246b172509fca2bb234669f1a2b6ebd4bd1acbfe5a780de80b091210e0c0ec4496fa464936f7e876872
TLSH
T1D071D73C026243B7D36E01F193CD720D353282FAFBE32E8980976A7B5922761C159BC4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3dd82b46e5057978de6f01e72dfd6ce26e213c2a7f80a59c6c909a1849f49b59
MD5 cabc7451a9b4742fb0acf72494afe60a
SHA1 3b09a4c61823534a9486aeb16e1efa5ba15d043c
SHA512 07219e56ba72daea36fbc9aa0a3b81fa6de71844e7d81a2112519d6843fa6673f22cf4016e1ce74d39bb74090ebe8dd735dfb27ff2db57bd56427e844b420f92
TLSH
T18F2181F7C3E5866E891156F05A24BE1BCE1D0506422C7C2AC9E5FF5F93E2471D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7078d2d383a71a980a62e6ac53dd839f5727445e6de128da615c3085df7a884c
MD5 316eae568859e88dc072fd985c7277dc
SHA1 151e95f41d46a03268f1d043c21fa05dcc4a0ff1
SHA512 4441982e3862ec31207c9a77f6755dffd3214e8fb370c1c8b20ae9ef8a40e9d567e41a079fb55180b0979b430f5ef5bbcf839448c42035939ce0d2d28b2bdf3b
SSDEEP 192:sxZKRWki/f/s3aL/qIdpdFHW6+WNGYzQ11DIgrJ:sxZKzi/f/s3aLrvHbGj9
TLSH
T16222C6516E38A57B4CCBD219BA19BF43E6F9503291D11E58A6FC961C04E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1a344ba68d30c5edffb7007c67609c5a5c3b7dc92fee14c0d40282ffe41c060f
MD5 d21572582b11d2e59987bd377064e69d
SHA1 f2aa914dbcdf91c288fd9cd7d0a440487441567b
SHA512 f238303c21be83bb2e75c03c43eab46c73fd0d122dac39ac67284f9c23c29aa09468fcab1416c8cb55cd5051aeef7f502868a9e09f0dea94daa14fe4f2fc8d38
SSDEEP 192:sxZKRWki/f/sMaL/qIdpdFHW6+WNGYzQ11DIg5qJ:sxZKzi/f/sMaLrvHbGjw
TLSH
T1EB22D6516E38A97B8CCBD219BB19BF43E6F9503291D11E58A6FC961C04E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b7c73ce28a2f2442a43185973d2d3bea8ac332bea26a740838b350ecff5f0835
MD5 1c9f473329b76aec85c190190729e17f
SHA1 7f3abbd41a4671407c850986060d7d46a062ce2b
SHA512 1342e9b28a3db81209fd3d2e9ac02eef94f4cb2a838a6ae285811e4b666bdc55c02a59a8760baaa42c19ae15b073bc4c6ce134be5ce937fb405231198b0b78bc
SSDEEP 192:sxZKRWki/f/sMaG/qIdpdFHW6+WNGYzTn1DIg5AJ:sxZKzi/f/sMaGrvHbGqK
TLSH
T17122D6516E28A97B8CCBD219BB15BF43E6F9503291D11E58A6FCD61C04E7ACE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 570c230d87b0f45e881e2780ea6a8459a13a9f9cb38b72858b8d7c7261632ee3
MD5 b2f464f08bcd549732b6617d4dea5db1
SHA1 abd66a51a9333c15f3c5515867330bc4f3ec0eea
SHA512 941234b641fd8e76e57da7a8d462718c3b2963ae7fb7a00e82aec8ea4fd52a70a9c871fd2a3d0a2b210d1ac33c7201b46f571edd408d1ffb6ce02930d13d225c
SSDEEP 768:cik7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBvroytDYt:cik7u70WvqiEau1jai5LA3B8pt
TLSH
T17DC2E93B740CCB7E4F801E9DAC566F977E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc2726a142a1c40ea15180f224ebd07523445452059c9a7f1a80f97b4832b63b
MD5 feb8ff2f8523bb53c0274e9fa240aa55
SHA1 c552199032c19743623a825fb6d084508f2c5bbd
SHA512 8a507d289529726760a2b95bd4ffdba4ee2e45755d13d9a7dede35bc1ad372e0f7d8a918253eca574ff3f6b7b1a1d58683aea4cbed3d08d3bd092d3a2917065b
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT//I9KA8QCy9dIBKeEMisI7KNn:KIbCKc//iKA83GdaKeENsgKNn
TLSH
T167917356347B47523CBF2D589256C67A4E4235A33418E4BF7BB810660E6BE114EFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5894caa-7d8a-4dbb-b662-27f5a0cd1625.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f5894caa-7d8a-4dbb-b662-27f5a0cd1625.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ecf4fc63e225d0a1245711f56ccfb6756e12ea8cc18b5328b92f186e92cffd6e
MD5 5568f367d76d87668061a6fa6b7b0880
SHA1 8266ba36d126bcd87624451c1f266891acf0ee4f
SHA512 e41d8df707bcd48c6b10fa77a93e76bc363aa2d3917ab9f25cbf3790ea205961bf216fcbbb161c7d00a0c3b45b3ea547e37c37d3bd6065000196c06d5c3bd882
SSDEEP 384:SZcIhsNG2BHRb+0vrdPsq0H6HlytEDq1C:gh+xT6Hoy6Dqw
TLSH
T13C929E31587469376AAAB101F48636079EFC8537FAC46F94B6FDEB2C01D96A8130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 12660f867fc700fee43170c3a47c9a9664d881a5ddb131011563084fbde12adf
MD5 75a478ba6c5f920e5b4d99bd196a80e8
SHA1 818d3076cd7869791017d297b6370bbb005db9e4
SHA512 beddaabf56872bea3a647447ab003b21f0f766a6b0830b169bbd56322c4cc967bd8c097383f93a0dde72427bc2b6cf6609dcc5acee65c2071db31ce31180d47b
SSDEEP 384:SiFiZcIZzsNG8TUNTUlIlzBHRb+0vrdPsqzH6HlytEDq1C:ZFQZ/wglxTdHoy6Dqw
TLSH
T1B9A27F3248B4993BAEAE6A41F44936078EF88177D9D4AB94F7DDEF1C01DA1D81307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aebb3c12e8a082e948b5efa7c34e1356dfcec540d20e90452e0dcc66bdc9366c
MD5 ef87f7a5ae6aedd8527620984670dbb9
SHA1 d32484868715568bdeb489178641fce1e02e0a12
SHA512 e9b8e60a8b091fcff4a1d27fa3dc680352bff46dd00b1ff42c05346365fa76e40618251a2db0a71d711fd23c4f357b2ca1d3bae3d81a83412381041da7ab8c16
SSDEEP 192:MONg64BAQmiUyw1dW5GBPK1B+FdGw5caDrmCU6:MONg6eAbzWUdPTpU6
TLSH
T1CE021B346C797C6B9EB2AE45F48737175FD8113BE6842B44EAE85B0C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7362651dd7dade9183b392fa9c414e71649ec5dec306e24d59635d68d0a3a05d
MD5 687347448af6b19817bcf7253342b665
SHA1 202d7aa3edebaff5fe8f7aaef3211441a56c92b1
SHA512 20c37e13063f32ff98e8bc6cbad0eba6618017c3728dbebdb75e3f826223bfe4230807e5ed9d31cd7f3813ca83eafd83ddf3a95b0ba6dc5a577fdecda9db9034
SSDEEP 384:XZcIhsNGzBHRb+0vrdPsq0H6HlytEDq1C:fhFxT6Hoy6Dqw
TLSH
T134929E31587429376AAEB101F48636079EFC8137FBC46F94B6FDEB2C01D96A8130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 018eaa25f37659eb1824f6edcbcfefd5d70865f423a697068e7311503064f2f6
MD5 4fd32a02b98f18e10b6f1efbd38fb280
SHA1 31adf7df75e783b0fca2cea84df3167d77b6033e
SHA512 5b82c44acbd6776a2b3864a8edcea3d23c9dc7eef1e8c9a08dbe556b0597a52583a36e4faee260a8b121e9138a2cd259f4d248b50919a6cc5a46f0c18627403f
SSDEEP 192:xONX64BGQmiUyMdt5GBPK1B+FdGw5LGPNqDWwxrqqU6:xONX6eixtUdPsqPHU6
TLSH
T184120A355C757C2B5EA26551F08736079EE8423BEAC47F54E6EC6B1C01EF6AC2307416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 726b8b06a7b47c8dbab5531475cea624b54941691be2569f83d39c58c8ba6168
MD5 6c5694771eb2b5bca37622bc363a189f
SHA1 0681d1bd3b987d41c5ae4ff5a9f1e87a447d1f86
SHA512 bb3d328726278660610c375b71cf1a2548bb3c9866cafe52fdee29d2af63dde6abb52c99de6b903c85430532f6d0f64991111159f01db6fbd27d27c0512ae1ed
TLSH
T129410758A7F91144B3B36F5A9BF6B9AE487B7D732E06D59E10110D4E0A32E40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download