712d54b4703d5ba161475dea2f6feb734c15a0b59851a507c8e05139e1dedabe

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tj-site/contact.html
Size 21KB
Sample260814-pp46jabl3t
SHA256 712d54b4703d5ba161475dea2f6feb734c15a0b59851a507c8e05139e1dedabe
MD5 88d1f5f346103e46cc8b30d0ad93c298
SHA1 f72a88661e03aec005c9550d97c66d796f14fc69
SHA512 2bcca70f73434ebc536ced20114446ea7644860a48731a030fc0a5d41deecf4c00c307584b8656a603a8c5aa63c6ddeddba37338588ae060376d0f013fa63a73
SSDEEP 192:H+GEfByRiqeUDkFIO3pPXdVZVN/3VthMIyBfJe5IIx+wz0UHuWAc+yUzn38O95pD:H+r1IIpzl3UD8O95VC01szqB
TLSH
T1CEA27022A4F01037419B88C6BBA6971F3EA1E617CA8F461472BE4BD54FC7E86DD1358C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4276	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311844255592103"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{CA67BBC4-24AD-4AF0-B06A-B120AD4D55BF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
736	msedge.exe
736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 2032	5020	msedge.exe	85
PID 5020 wrote to memory of 4276	5020	msedge.exe	86
PID 5020 wrote to memory of 1988	5020	msedge.exe	87
PID 5020 wrote to memory of 1988	5020	msedge.exe	87
PID 5020 wrote to memory of 1988	5020	msedge.exe	87
PID 5020 wrote to memory of 2800	5020	msedge.exe	88
PID 5020 wrote to memory of 2800	5020	msedge.exe	88
PID 5020 wrote to memory of 4632	5020	msedge.exe	90
PID 5020 wrote to memory of 4632	5020	msedge.exe	90
PID 5020 wrote to memory of 4632	5020	msedge.exe	90
PID 5020 wrote to memory of 2408	5020	msedge.exe	91
PID 5020 wrote to memory of 2408	5020	msedge.exe	91
PID 5020 wrote to memory of 2408	5020	msedge.exe	91
PID 5020 wrote to memory of 3608	5020	msedge.exe	92
PID 5020 wrote to memory of 3608	5020	msedge.exe	92
PID 5020 wrote to memory of 3608	5020	msedge.exe	92
PID 5020 wrote to memory of 3412	5020	msedge.exe	93
PID 5020 wrote to memory of 3412	5020	msedge.exe	93
PID 5020 wrote to memory of 3412	5020	msedge.exe	93
PID 5020 wrote to memory of 2460	5020	msedge.exe	99
PID 5020 wrote to memory of 3324	5020	msedge.exe	100
PID 5020 wrote to memory of 2460	5020	msedge.exe	99
PID 5020 wrote to memory of 3324	5020	msedge.exe	100
PID 5020 wrote to memory of 4968	5020	msedge.exe	102
PID 5020 wrote to memory of 1576	5020	msedge.exe	105
PID 5020 wrote to memory of 2932	5020	msedge.exe	106
PID 5020 wrote to memory of 3680	5020	msedge.exe	107
PID 5020 wrote to memory of 4600	5020	msedge.exe	121
PID 5020 wrote to memory of 4600	5020	msedge.exe	121
PID 5020 wrote to memory of 736	5020	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\tj-site\contact.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff8d9d7c188,0x7ff8d9d7c194,0x7ff8d9d7c1a0
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,9171740244771489236,6062661297235352708,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,18187007082602154906,6627087817756824277,262144 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,3654585150685789325,11237790232164491730,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,396088874153947553,6055224269339057811,2097152 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,2941524344601160549,3203733114868729700,2097152 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,189863802178231981,7629701199730142187,2097152 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,430110702058314762,636828863801871195,2097152 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5062063870555695675,459567645359053050,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,6920062302531856402,1575740151977302925,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,9302454638629964720,4460558204492872388,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,9302454638629964720,4460558204492872388,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,15726472899532554372,6448834631650850902,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,15480886775319976494,5294375568737623886,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,2737408058396270116,15047420545664648280,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,15609967007698094984,14962917630796112744,524288 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5884,i,15402760037449363663,227569034187267219,262144 --field-trial-handle=2284,i,8433771355267601840,8846448126512845287,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0928b31724f9f5de4c59f8fe6d03d3656530a90d7d20e271cf37889126b84296
MD5 0db29888827184ea6c57e471b48c244f
SHA1 0b2088154402bfa0f10a91d010be2b36e651ea81
SHA512 af0037c9cbca3c88e5f6addfd689d91e1fca3974f859bc96ee9dd9620bc96909fa102b5a5e03612eb8d1687811983b90c69216a3c7756dab58d27accca1bc3a8
TLSH
T19D61F934022146F5D3EA123294D30E8C75B586F6F9077E0B69D4DCF7E7B5F520029946
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b011.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b011.TMP
Size 3KB
SHA256 055f652161b66b2e04028af47ffda0fab73a40fdd8dc38e94e38ddbe1a17a7d1
MD5 81462c14c0751268d4df83aaa56f60ce
SHA1 2e58153685b586c84bd3c1950dfbc6fc60e52dfc
SHA512 20e30dc2bc88371d2dffa8663f6f8eaf957344514fdf43c65ecda2d464200e279e62f357449000c308f6fc334bc38e05b9a4025be97e2c9f703ef8ad983e681e
TLSH
T1B761F934022146F5D3EA113298D30E8C75B586F6F8077E0B69D4DDF7E7B5F560029946
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c6a0603aae2c906a6a6766185aeb07281625d5168aee31233fcca4b7ecedb4e0
MD5 314cbce011505769310a0a83f5245e25
SHA1 d8ffd59e451940f2a91ac79e5ff695dfa340c278
SHA512 08ca5070232c831bfabe06f768ef27935e355a880745bba95c2194b70ca1cf6ccd5f44e328ac1d1c50cc99e082362f796bb73313a9b6c3754f0573f4996ffa9f
TLSH
T146416CF6C3D887AEC81156F05B256E2ACD1D055A42283C1ACDE4EF5FA3F24B1E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 99e65ade21fb4cf76c491ec549e26df0f52bb96a3fe6a90c0d7461efb24b46ee
MD5 3a94d7e57fa057d0cf6454ad15b3f417
SHA1 c67452e3405415ac8b0c7cda361ba3a229607cae
SHA512 a469328c1bb3f588373ee25b32fdb4a6179269c63b79bb7b394e782e9a8607df180657c5a847867ef82a9db4aad50682029de8b33f6ffd7a5373beae0b44ba35
SSDEEP 192:sxZKCRvyM/jK1Ml8UQ9k7/f0ssngM5IdpHmHW6+WNGY9IG5teIg5wJ:sxZKC5qW7/f0ssgbGHbGpS
TLSH
T17952D8156A34A977CCDBE20DF9557F53E6F5047292940E44AAFCDA1C00E6BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fa0328a10a9c83744af740a2be2bc1c6bd138466711417b0998370d88841d28c
MD5 cb770dc32c3d179f63a2564909b9cbee
SHA1 f98f312bdcdb0be468d7527d4254c2c5d15cd461
SHA512 03b64941653b3962e5eec93c3f2d035071a0b1f10474645ba92a6b93965fef8cf600e61fd18b444abb776908bf9a571168e0487de70e43525b89617a79c5504a
SSDEEP 192:sxZKCRvyM/jK1Ml8Mk7/f0sd0M5IdpdmHW6+WNGY9IKateIgrJ:sxZKC5M7/f0sd0bIHbGm9
TLSH
T16842E8156A34A977CCCBD20DFA55BF53D6F9047292940E489AFCDA1C04E6BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 15a53d97397a6827dc7072e268dd527ca4107a67647a14dcdc6fadc5e3cad513
MD5 7217a0a59085f5574c32de0d6a2f4c96
SHA1 376768388c4f6ec7cf1b06b5ee7a5cf36102d83e
SHA512 03f6e3f90574cb4fa7eab6be1231fb8d0ac6083f6f1e1cc5579fa126f61d38e9aba23fa2059720f125f292a2d3e9b436678d034b9415da03af3cc22ec9608295
SSDEEP 768:pKcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNErofg6x:pKcv21wWvu+Z+u1jaeFLeRNPfh
TLSH
T1A8D20A2B280CCB7E4F845E9CED2A6F866ED801CB56988D5447FA884C03C77EB511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69c9e6ee-6168-4b65-b66a-aa98da0296a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\69c9e6ee-6168-4b65-b66a-aa98da0296a3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f6a12e1648d36d6339be961123ac928e89bfac0dde90095afa1f937205aefbd7
MD5 63063e5b4feae820689f4bfb496e3a40
SHA1 892bdee9109207611606e83158484c3d104e4002
SHA512 f2d98bfcbec3c5fc70c83cb21e3b9e5e3e770b83e5c126d0d161af9f6e2873eb30a23a90a5e29920a82f4d8c2e619388660a77900172a83e1e802c074e3537be
SSDEEP 384:iZcIhsN8Jezi71Ye+C6BRuxMrJrZwIOxOOPrXLpe8C/J:QhYUri4Mrh6IOOi9Pu
TLSH
T1F2928E71A8782CA76EF6F645F5872613AFF84163F2C52B4495ECAB0D02EF5981307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 a493b21bb17fec426921b8089226adecb08de3c2a00788749373adf2bc98c39f
MD5 e0f006f25606216e070f82b9b11da0f2
SHA1 87155e799ddda4ba1701455b69c8655d0799f70d
SHA512 a5f7b836ec97579967a5eb97b5b1e5f44e74bce88ef21ec8b2e16ce29f5f9df5cb4a4534f13df961fc48e54c07e98904fb6c0d57f2d7f9a3204448bd0f19d3ef
SSDEEP 384:xiFiZcIYsN08TUNTUlIlkezi71Ye+C6BRuxMrJrZwtOxOOPrXLpe8C/J:YFQY1wgPUri4Mrh6tOOi9Pu
TLSH
T180A28E7398A85C7BAEF6AF45F98632139FF841A3D5C56B50A6DC9E0D01DB19C130BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fa4512174ba16429a4f53ad5c668003ff4f038abe79ce57f1c5b1017c41eec63
MD5 fe6ec67f6a03f464dcd46347759befa7
SHA1 9f5c650ddd3aac90678b5cbee871c0355ccc8a1e
SHA512 c68165a3f33ebc303f21b6023a38e2bf038a1627072b915aacfbf559748e0cae94303b3605d0d8428aa48ab094957b82053a9e4b9ca615941cee13bacc57d360
SSDEEP 192:JONx6v+YLNQmiUy9EZh+CG66BMAuxYus8lU6:JONx6vz/XZh+C6BRuxuAU6
TLSH
T16502FA39B8682C7B9FF26E05F54737275FE91177E6962F80D9E81E1D01D764C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8cae61f801a342042cd23d3960304f632c4b9444ce001d35d05e4abcc310025d
MD5 94e8b8d6173c8f144d5e57d9fd79e97a
SHA1 a329560802b88c3de44d09e0f0cda289e726f98f
SHA512 abb1a6432ec053a83d6b10d16cf78161eb9848895b29ee4af522969a05afe51bcf3a77d864695d3a6ea34a9000a76398fed9f5f282ede4f9fa5ed84b28ea0f15
SSDEEP 192:SON96v+YLEQmiUyAEoh+CG66BMAuxMcSJrZwQCHOhq8U6:SON96vzoooh+C6BRuxMrJrZwxOxU6
TLSH
T107120B36B8645C7B5EE2A545F48735136FF94177EA8A3F80D9EC2E1C02EF65C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1084c331fc59da81d578b7bfe2773b297c990a415112d7160d0785cd7758244d
MD5 2f3b5b5fc93a08b0378b84a6d72bedb8
SHA1 14df2c1ee64887972a49247380ab9b2f89d8d755
SHA512 8f6cd8f8f2513f11325a393ea33adbf7249cef97880b418fd6a580d28deff0086495850a8e76935fda353ba797dceb747e59ee6d85c2b25187b1e19cc12143d5
SSDEEP 384:WZcIhsN8kezi71Ye+C6BRuxMrJrZwIOxOOPrXLpe8C/J:EhxUri4Mrh6IOOi9Pu
TLSH
T1C8928E71A8782C675EF6F645F5872613AFF84163F2C52F4495ECAB0D02DF5581307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b0a4b99-ddd6-4f6f-9247-41ad0037493d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6b0a4b99-ddd6-4f6f-9247-41ad0037493d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b6726cf51ccefb98132261111086d18bb0b3115554569c308ad7201a2aa28a17
MD5 1ede4a29f8a1efd9559951aec2678b57
SHA1 5e195ce82d747dee6e40df635d0aa1dacc308a74
SHA512 215ce7653fa3cf43ffb6666dd1fdc5d33ee3d449fa3d5dbe11dcfd3d332f07b06150fafadb5f0e6d846e6b309ef3d8b07082de3c309c762431d62997f4836e11
TLSH
T18E410958A6F92148B3B76E5AABF7B86E447B7D372F0AD55D10110E4E0A32B01C861B33
MD5 SHA1 SHA512 TLSH

Submit Download