dccd8b5c8c0d99629815ead3314c0bc75f081cfaa8dbd7eb033de47ef89a4414

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
text.html
Size 116KB
Sample260810-pm286agb37
SHA256 dccd8b5c8c0d99629815ead3314c0bc75f081cfaa8dbd7eb033de47ef89a4414
MD5 b88eed9ebb653bb700c5838744f42aaa
SHA1 872037e424c0228854d4cf37a378453af363a8fc
SHA512 956ca045d076b4ae401a0587bd30ac9b961d01130db0d09c093598eb07c5b482837ee4718702302786bcc9cd6931d5f14f6bfea1ddf15846ad6476854c6a96fe
SSDEEP 1536:e95fMXM9F0Mvhk1aHZIaIV4g6W2oyqc4SQ:eDf19F0MhTT4SQ
TLSH
T1A8C323D26054952F113B6EC0A6642F0CFF73A347FA9D7EE2715D16A24FB7CA0A90B244
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4184	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308386843425102"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{698948DB-37E6-415E-B78E-3E55A131C76B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 4892	4608	msedge.exe	84
PID 4608 wrote to memory of 4184	4608	msedge.exe	86
PID 4608 wrote to memory of 780	4608	msedge.exe	87
PID 4608 wrote to memory of 780	4608	msedge.exe	87
PID 4608 wrote to memory of 780	4608	msedge.exe	87
PID 4608 wrote to memory of 3216	4608	msedge.exe	88
PID 4608 wrote to memory of 3216	4608	msedge.exe	88
PID 4608 wrote to memory of 4548	4608	msedge.exe	89
PID 4608 wrote to memory of 4136	4608	msedge.exe	90
PID 4608 wrote to memory of 4548	4608	msedge.exe	89
PID 4608 wrote to memory of 4548	4608	msedge.exe	89
PID 4608 wrote to memory of 4136	4608	msedge.exe	90
PID 4608 wrote to memory of 4136	4608	msedge.exe	90
PID 4608 wrote to memory of 4264	4608	msedge.exe	91
PID 4608 wrote to memory of 4264	4608	msedge.exe	91
PID 4608 wrote to memory of 4264	4608	msedge.exe	91
PID 4608 wrote to memory of 2876	4608	msedge.exe	92
PID 4608 wrote to memory of 2876	4608	msedge.exe	92
PID 4608 wrote to memory of 2876	4608	msedge.exe	92
PID 4608 wrote to memory of 4560	4608	msedge.exe	96
PID 4608 wrote to memory of 3952	4608	msedge.exe	97
PID 4608 wrote to memory of 4560	4608	msedge.exe	96
PID 4608 wrote to memory of 3952	4608	msedge.exe	97
PID 4608 wrote to memory of 1800	4608	msedge.exe	99
PID 4608 wrote to memory of 3380	4608	msedge.exe	103
PID 4608 wrote to memory of 4688	4608	msedge.exe	104
PID 4608 wrote to memory of 3260	4608	msedge.exe	105
PID 4608 wrote to memory of 860	4608	msedge.exe	106
PID 4608 wrote to memory of 860	4608	msedge.exe	106
PID 4608 wrote to memory of 5112	4608	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\text.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffa248bc188,0x7ffa248bc194,0x7ffa248bc1a0
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,15654476947793263122,863564163517002441,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3791986542512566175,1447814371522693528,262144 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,8400880403603719900,6347187967259892443,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,16090710246065338746,12600217300139436292,2097152 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,17675841761746295595,9951681937734235551,2097152 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,13934378588957231963,1801575655029994201,2097152 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,5050551545458709919,17902209325716865669,2097152 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,17358198161537426185,684707372723942242,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,14305730891770844900,9724748346073866232,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5352241328374036706,8488504138497277192,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5352241328374036706,8488504138497277192,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,9311481359319999594,9785657438080197730,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,10734058683179102514,12276843494741858939,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,9175142338273573593,13575783888825183819,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,16254827430403175676,6772400313927897111,524288 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,7685535240655851771,17311224132918971307,262144 --field-trial-handle=2304,i,17008968444581967422,12556360132291556329,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2bc559702bf3f6d1737e4800ae5a1ded14d1de57521c448ffe63a31655278e26
MD5 7df5470f946dfcf3eb6a970e389a478c
SHA1 5b631dadb7867c7af232824eaea926b2d20f6c8b
SHA512 f5cf6f341ced9795158cc4c9bf8c1082016f7b91e476070761b801a49eb7ca25c3356b130704f9f956e4838aea43e70f29b6de76f9015b42cdf9d7e32f69222a
TLSH
T1D161F73D32574587E75F85F1F8F95E4C327941BB9B5F9E3C0658483D7A08B6A8423418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0cc04edc0cf4b09194fc217a771aba8e26adc5d15c1dc544a897d586dd5d0063
MD5 0d32998c5869970f1736fd812cec9beb
SHA1 78ef3b88482300303ae3fef293cdc6b41463d346
SHA512 5a44e0b8082248f0cfc4cb85cb900bfa434701165fb88b5f1a0b6d6081ddfc5e2fa72a28fb65943faae4757289845005ebe6ccbc7832e23a8ef341016b39a1ac
TLSH
T1CE117DB3C3D5956E891516F05A24EE2BDE1D0506431C7C19D5D4FF6B93E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c88386807674e75a73f2ef49696e16d383823a1519725b36b72322fade8d3915
MD5 c8a85cc2190e8218b3da1ac20f18e7f4
SHA1 edd7c69f2d52ae3da628cf4be1afbe39cae3f554
SHA512 3abaf0cea1bc6e6bfe05c8b9d1f022deaf3a08c2ad7a5301640bbbba1a28b6b9f1b767422552fa8ebc10d3cb49aeac44ba98bb06b7e9c82e25d85a224ff923a2
SSDEEP 192:sxZ2R6kl/fAsmTIIdpdxHW6+WNGYLzHggYkIgrJ:sxZ2nl/fAsmT5PHbG7TI9
TLSH
T12C22C8156E38A8774CCBD20DBB19BF53E6F95432A1941E98AAFCD61C04F66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b9b63516db490b3e36365937df5d9ce4a612b08f87f92d854fd6ab083fda0961
MD5 715d1702a59323c47909286a356b2545
SHA1 5d7d2bcf3751027dea4a60f5337f428b6d1341b9
SHA512 fbb251f36c0985af0337c6fb7e80600fb69a291eb8044035a2dac778677a1cd1ba4f200144e5ba1f9e6859c789c35d30e62feed48e7c5b9546a4f05a08e4c72d
SSDEEP 192:sxZ2R6kl/fAsSTIIdpdxHW6+WNGYLzHggYkIg5TJ:sxZ2nl/fAsST5PHbG7TI7
TLSH
T16322D9156E3868774CCBD21DBB19BF53E6F95432A1901E98AAFC961C04F66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e0f752b2921862f77d323a9ac86ab6a1b2a2ebf2f37756b123578e1aabd389a2
MD5 f7506fe17706789fd95ecbf5ebe332fc
SHA1 ca9df3c9f40ccb4042bfa9fd0517ef756ab1b560
SHA512 51bd81333216951ff5f56ea7fab7811fbb50851a5a1ce0c1047377cd4d1e2ad8afdf7079ca2bbe9a7a70ce7f2f40779be83f4876593ae37bc8359f2eb446a5b7
SSDEEP 192:sxZ2R6kl/fAsSCGIIdpdxHW6+WNGYLm5ggYkIg5hJ:sxZ2nl/fAsSCG5PHbGoTI9
TLSH
T15D22C7156E3869778CCBD209BA19BF53E6F95432A1911E98AAFCD61C04F76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e6d49bba8bcc50b3c5b2d29d8d2de91802b4ec833e4eca4ccffd0702d803989f
MD5 4356100e30c73c43b190aace2532af8d
SHA1 a7d75267fe74b077cd485187b852d3e7a477180d
SHA512 c32327ed86143a4c06130beb1612604e48341861aff0dd9b1f8f37b04caac643b98118c5075113ac25c1254c06f20791686f698a04891b2db625209793d86309
SSDEEP 768:6RO6fP1Wvxz3j8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkILlWwJvhrowz:6RO6fP1Wvxz3ju1jaZILIsvawz
TLSH
T11DC2E83B640DCB7E4F801A9DAC5A6F973E9802C7AB588D8447FE854C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3827d98d73755937af7e41ff24b8d2ee17daa1a0788a2dbbc8acde80ddde587c
MD5 9c9b01f71b187599fa7de9ffa75a2f65
SHA1 581766357fee001524d888060387c53f820f3e62
SHA512 fa6cce5ea0bd49dd261656554f5776d06a14c3d559a434fe3efd844a96ff49f72110b0a186123ca0e663eee0ec87b463c4e50bc5032715d76f73d45449cd9882
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFOuI3KvasrylxIhKq00F:KUAAKteP2OuwKvaCOxuKq02
TLSH
T1FAA1221372BB03437C3E285C97958F664B4672A33018B42B37A914B61EAAE344DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d4f06794c3daa6fdc9d8d2a8e4e7e25cfa37b476e20d4e0a442cd9405a289fe3
MD5 835a008cff238d29a18ac42523ca68fc
SHA1 98e47a1c95adc5d501a433f31fbe527da8984594
SHA512 1e30d074a0c066518ec6a10273988a1461fbd19829dc26f115a19abb4e92c40ead4a7fbac09e2fa128026786d0d5eba7ab916f972f1f96bdac15d427e23a9006
SSDEEP 384:xRZcIZzsNYfFwqYG1a9DOMMe/7zJr066HlytEDq1XY:x5ZNwgYJO+/fh06oy6Dqm
TLSH
T154927D3458745D7359F7B141F98B3A138EF84027AAD86FD491EDEF1C00EB6A8234B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 77c6c22b0f6ba89548dfbb63258ae3418a4af21a07cb614a44ecdffb32a4eee7
MD5 dae38ff741e7d9ca2594054cd41cc288
SHA1 558569c92c04fc355fcb5b853aa1b93fa7341cb6
SHA512 b11639f8336946867de4874c0f081ba077651907e505c336a8020a61268a4d61a72875c7f96b12669b1d4cf56c76a1cd465dcc41447b8552c62382eff1b3c91b
SSDEEP 192:qON8S6O7+3hQmiUyV8zGttb02O2bbh2eQgG7oiU6:qON161dGt9DOMMe2zU6
TLSH
T1BD02F9346D686CB74EF2AE05FA8737175FA5112BE9912F84DAE81F0C00DB65C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f78dd9ae96a8d891141dda574a1ad02e0f867d32bef5acb7e2ae36dd823543ad
MD5 e23fb5aeade3eb16913ec2f32005ae13
SHA1 58deac1fc9df5dc254d8c8b5152fe2856f7e8fef
SHA512 444d926a4ecbd50fd311504c09bfed4f3e9a97aca3fd1677a1989fc2030c7f6c73adf2ada895995a589d12a3ebd72c8942f73f425a38d6cfb936f696528be692
SSDEEP 384:pMZcIhsNYfFwqYG1a9DOMMe/7zJrd66HlytEDq1XY:pahNwgYJO+/fhd6oy6Dqm
TLSH
T117927D3458745D7359F7B141F98B3A138EF88027AAD86FD491EDEF1C01EB6A8134B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6815a91ca6c3e1f484a9f0c7751830ed0f894e87d41e1593798a7a5d8d5da504
MD5 36877caa7baae8a76272241f4030ea97
SHA1 769f0b6f14f49280fb0b5c2da9601bb821af3a1c
SHA512 458f8d1ba530187560cb6576bdcc0b2c6c988dafc20b6a586a3a01d35eb6e7df90f504485a938c01da05ff47a8e1b42340ef73bde4817b7aa33d86ea4bb48789
SSDEEP 384:7ZcIhsNYJFwqYG1a9DOMMe/7zJrd66HlytEDq1XY:jhzwgYJO+/fhd6oy6Dqm
TLSH
T1D7928D3458785D7359F7B140F98B3A138EF88027EAD46FD4D1EDEF1C01EA6A8134A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 44c3d7061e3857cbfecf399a22500673b7e9742eb69fddb1f81dc0b8a7e5f749
MD5 014702df7c2729693203eebdd66fc7d6
SHA1 91a6c4fd801549f8feb8420ec6bd52ce0bbdaab1
SHA512 2768f4be28074ef504d2f40044a50ee13cd7e3ab31d677435b0d91f2fd66ddb46931e083cf87bd82eb87d6d72a30bd3d2bb87c87325b989f9ff959a57041f06e
SSDEEP 192:oONJ6O7+3EQmiUyT8zHttb02O2bbh2e/FF0SJrBcNNq68U6:oONJ6SvHt9DOMMe/7zJrG6U6
TLSH
T150121A3568289CB75DE3A541F98736139FB5412BEE8A6F80D5DC2E0C01FF66C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dbf0a6214cebf56f525b511a96f2c10949aa9564d3ea224ffb17bebb23ff43c2
MD5 12d4074063fc974ad19d8fb2d56f36be
SHA1 51d511e4f362f2ac901fbed2ba11b2723fcfef43
SHA512 820f336f8977dfdc2f558cc11d311f00d10a6e634b94dc8c63e7d347dc74a18fa7327db6bf134221717ddb00ab21789ef03dc0ed8dc8c5fe48e537106a5c0bbe
TLSH
T1CE411858A6F91148B3B76F56ABF6A8AD447BBC772F07D4AE10110D4F0662A00C872737
MD5 SHA1 SHA512 TLSH

Submit Download