2ba39a2fcaeadf97b56a481f37b7df3a69d8992d0db18e356767bbc30fbde143

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 06:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2ba39a2fcaeadf97b56a481f37b7df3a69d8992d0db18e356767bbc30fbde143.html
Size 11KB
Sample260820-g3pc8stybv
SHA256 2ba39a2fcaeadf97b56a481f37b7df3a69d8992d0db18e356767bbc30fbde143
MD5 4ea27465802e2d3d977622d2b0ed3e66
SHA1 5e3448d1ecc902e5576a260c6a8585ebaa339da7
SHA512 01cd1f893228b9d3503c82bd7743839be33391be046e62c9d9a62a8aa1a1c682edfc0829cf75595f843172ff8cba12b9a8e453e40aabd16ee011fc32b6cc13c3
SSDEEP 192:6dEBVXEl1+PPLYsdBlo6ZlV9uT9cLFLeyldZxux7PuYo6snricuKauYM:J7XEl1+nEsqgVIT9e/ZxuBuL62CM
TLSH
T13032CA2C79A6AA312563207A5B9FB309B6F290175044DC803E9DC6787FB0EB74917BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1584	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316804115939705"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{E2BC6649-E8E2-4ACB-ADA1-3CAB82394E1E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1756	msedge.exe
1756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 4052	628	msedge.exe	86
PID 628 wrote to memory of 1584	628	msedge.exe	88
PID 628 wrote to memory of 3620	628	msedge.exe	89
PID 628 wrote to memory of 4340	628	msedge.exe	90
PID 628 wrote to memory of 3620	628	msedge.exe	89
PID 628 wrote to memory of 3620	628	msedge.exe	89
PID 628 wrote to memory of 4340	628	msedge.exe	90
PID 628 wrote to memory of 2328	628	msedge.exe	91
PID 628 wrote to memory of 2328	628	msedge.exe	91
PID 628 wrote to memory of 2328	628	msedge.exe	91
PID 628 wrote to memory of 1408	628	msedge.exe	92
PID 628 wrote to memory of 1408	628	msedge.exe	92
PID 628 wrote to memory of 1408	628	msedge.exe	92
PID 628 wrote to memory of 2004	628	msedge.exe	93
PID 628 wrote to memory of 2708	628	msedge.exe	94
PID 628 wrote to memory of 2004	628	msedge.exe	93
PID 628 wrote to memory of 2004	628	msedge.exe	93
PID 628 wrote to memory of 2708	628	msedge.exe	94
PID 628 wrote to memory of 2708	628	msedge.exe	94
PID 628 wrote to memory of 1892	628	msedge.exe	97
PID 628 wrote to memory of 3104	628	msedge.exe	98
PID 628 wrote to memory of 1892	628	msedge.exe	97
PID 628 wrote to memory of 3104	628	msedge.exe	98
PID 628 wrote to memory of 1536	628	msedge.exe	100
PID 628 wrote to memory of 4944	628	msedge.exe	108
PID 628 wrote to memory of 4364	628	msedge.exe	109
PID 628 wrote to memory of 2332	628	msedge.exe	110
PID 628 wrote to memory of 2584	628	msedge.exe	118
PID 628 wrote to memory of 2584	628	msedge.exe	118
PID 628 wrote to memory of 1756	628	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2ba39a2fcaeadf97b56a481f37b7df3a69d8992d0db18e356767bbc30fbde143.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffe07abc188,0x7ffe07abc194,0x7ffe07abc1a0
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,10986673519399291151,12709935199792892582,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,3559706521535406138,15399820649772298522,262144 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:2
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,3924604046936621589,16670508509144853015,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,18387961541514143631,9788867787784588672,2097152 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,17815435728140132728,7737585447895235559,2097152 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,1132646930921381519,8262276787194272651,2097152 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4132,i,17917039903547872260,17641901116248315580,2097152 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,5672117691520311651,5309985966710611918,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,12944128296800296569,10207297968185381888,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,5324349395937532803,3633148684172898954,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,5324349395937532803,3633148684172898954,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,6860214490521566406,15535270727387065720,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,4736027382024940718,14990412143233829943,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,12264138917382809694,18076678309403540566,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,6046113483635976513,5426364707888982503,524288 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5792,i,390578579810497008,18179670102298192484,262144 --field-trial-handle=2600,i,11462322512339028352,17602290908421888919,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3c95ebc0011f4b35e630b365d99d5231e4f736a96c106a68d92a06ed59dfbee4
MD5 f256f211e2aa4c8734b40c6e03be155c
SHA1 86b4939cdd69fe8e2187a08d000786cc4516b63a
SHA512 83c29ba2382b04a319c14ab29fc60b037508fee156aca47658945994ec9e9ad045a13519a03a164446d7364abe765d1202fd54abac7664c9675a811a201663b6
TLSH
T1986108FC136208E1E3684071B0E2064074BC3EDAF53F7E8E535088FA6616F668F4928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58def1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58def1.TMP
Size 3KB
SHA256 f701e79cb24785e9193c0f98a0c08db73a29ec2747f4f29672e3b691ca6c01e4
MD5 80e8d2d90c16619e3e3befdfad9975ee
SHA1 419d516735815196215fa255cd8ec70488db0d61
SHA512 0b5feb0bd33149dc04f10fe78912123e976926e1f56ebe664bf2b748a036fa39f8604771d6dbb481631b5adbabc85777ff0f4453085b844bd6014db7018b1d0e
TLSH
T1D96108FD176208E1E7694071B0E20640747C3EEAF53F7E8E935048FA6606F668F4928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a2cbc2c6a0093662db7fa93958b950c7314b877447b73d990a807aad4425e117
MD5 37ba26b77a6d6199e2d7b13b575ac5cf
SHA1 ab9a4f5c425d707629c051d65249e20176cdf81d
SHA512 adeda86194d3b5d64cdc361caf37616e5a35e43414b2e5fc8c260fe116947ec2dcc538e065e269f401549ea13c38ae96c1790a1e55e9cc52fc1d954362983071
TLSH
T14C516BFB82D5877E891152F09A24AE2BCD2D154B422C3C558DF5BF1B63E24B1E1026AF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a089da67c1c0ddb49dceff8c089d6b74a7a8d0f3260c060edf57bf61cacc3150
MD5 b8f95d5957ff947c36f310b6acc9cbdf
SHA1 81b8243c72870388df4ce249ad270207427edf2b
SHA512 db376f294ab900230133320a9ef0ebac53bddde42bd0aa17c833bcd507aeb6495f626fb0f0f2ec9f7096a8744d827bddbe0af9a2f38f3d2de788f0a024155e0a
SSDEEP 192:sxZFR6yM/jK1Ml8Mkt/fbs0LrbMLIdpdsHW6+WNGY9IKAssIgrJ:sxZFEMt/fbs0LX5mHbGZ9
TLSH
T15A42E9116E38697BCCDBE20DFA557F53D6F4057292900E44A9FCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5b22112835b128496755041a4818851e5e6597d9a45f4f4d52bdd2b6abad67cf
MD5 7b27e8b82a86419e93697d4758a25aaa
SHA1 33f8cb9c5b5445e5046561220664d423ce2cdaa5
SHA512 ce0af573fc0d34f543858d061866208fdd20ffd69909de5fd7efb98f23bd5d57aa67fdea2a807833c40f5a9adecb939d52bcfe7e782faba44ff1c94b26137b93
SSDEEP 192:sxZFR6yM/jK1Ml8UQhkt/fbs7LrHMLIdpHsHW6+WNGY9IJjssIg5CJ:sxZF0qyt/fbs7Lz5MHbGLg
TLSH
T1D252F916AE3859B7CCDBE20DFA517F53D6F4457292900E44A9FCCA1C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6241b30e9e2d7fa54dfce96276c3526561b2b9043ff16a4d0eea295e6b86d6b6
MD5 68a3325edd0e24803bb6519bd829159c
SHA1 8e02b2891a173580f219a6773bab04867eebf215
SHA512 483d93deb61a859ed1ef2d87bab0e44a9bd42a60670f143828462e5c3983105c175c0ca6a8e8464b470ceb44710b616e5458a173cb21eb61075992df1a449d4d
SSDEEP 192:sxZFR6yM/jK1Ml8Mkt/fbs7LrHMLIdpHsHW6+WNGY9IJjssIg5CJ:sxZF0Mt/fbs7Lz5MHbGLg
TLSH
T1C052F916AE3859B7CCDBE20DFA517F53D6F4457292900E44A9FCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0688ecf63bb597e335056a3c8f9fec9abb94cb61f3ccec18236b9fb751178bb6
MD5 7a1cea8c49993003cca45c4458b29336
SHA1 bc4b85ba5807fa80be74d7c04cf51aad91560f73
SHA512 aa9530ba68e9834a2e486e8aa27852e709cb8c1afb54f380eaabafd1cef99d20c124237f31da52731b6f1fbe00c8c945f808002588a8133524ed7573b6ecd7a1
SSDEEP 768:DMcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNTro5g63:DMcv21wWvu+Z+u1jaeFLeRNg5H
TLSH
T10CD20B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c940a109815f67a8d8234b3fee45e035bf60313fb7740214662cdd49334f4c2a
MD5 b207c86fbc05c4042d9b2ad080155b6d
SHA1 a58039be5633d491426f90c4520e18d055ebea8b
SHA512 2cff187c97132a46c33ac24f7c8d6a2b5dab0405c87c7de9fbc9288e6508614ca4e916d146082c7c174c5340ae3e6f11f006875ac2f2d125be40b279c8608f99
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+NxGKiM6+jaKUko:mTv9JL
TLSH
T16391A41171BB33422DBF390CA25885B61A6170623614E97F7BA900A24EA7E05DCFD5EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 08f50c99c227ef7a3b5ca3c81f03561a70b903d04dadb0fe445dbc77c54e65e8
MD5 e7c7f363f68100d29cb429774175ac14
SHA1 c14fa84b58d902a9b2c8a70a647334a6081fb445
SHA512 18785ba232648356bcdc87c4b87baa0ee12f9ac1ee2f756af9b2dc14613911711b6daae3241c14fa43d95eca6995820e50df2284fa29af5c244f35467c6d23bf
SSDEEP 384:FZcIhsNwZDnzil1pe+CMdceCBS+2DTbrsoZ:9hRiwklCclDTbQe
TLSH
T193826C719C745CB759F2E145F44736138FB89163E6C92B90D9ECBF1D01DB6E8130681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1bdc6e471d97a5ede1bbd0a8c2576cad7679ceb09716da94a361620e3bccc4b1
MD5 c2de28b907f6dd35f6003bf66de11585
SHA1 1926f046a6f90d9a00563d8ce5958833591ab8d9
SHA512 492fefcea2f21034be2fc1dbd9de2798fad6e37d73b8fa9f076bf1e8d5e0724753d69a9c3ef1de14f7a59e8837507d17f06236fc0408a67870758a0dde9e2534
SSDEEP 384:uZcIhsNwADnzil1pe+CMdceCBS+2DTbrsoZ:MhSiwklCclDTbQe
TLSH
T174826C719C785CB759F2E189F44736138FB89163E6C92B90D9ECBF1D01DB6E8230681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8153662ac6033bb398cf232c5ce9f279017225f2b023fd956375d508cc99a5e7
MD5 87f943e5cbf330149eb5ce6e3eba6025
SHA1 2a179185f06718f71c7081a7ab1d28d2a4f3917c
SHA512 1058fc2f7d32415faaaca670523d81da3ba53d883276ecdf39e9bebb1fd236caf1c9bdac3e5ced8ade194c60d3e6c560ae88d6ffe25791fba432209ca6409d77
SSDEEP 384:XZcIJsNwADnzil1pe+CMdceCBS+2qTbrsoZ:fJSiwklCclqTbQe
TLSH
T12C925C719C785CB759F2E189F44636138FB85163E6C92F90D9ECBF1D01DB6E8230681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 660004001edd39ec63fe886fde33d509f76f03a5ff524292b7b8fc7c27c098b2
MD5 ad063224d92c330d732e200042104634
SHA1 d148916f9f200dcd372206b46535c90c778d4a2f
SHA512 29a20ed135a5d5b41ac10e50bcd755879072159b29ca1a520a30eb831c5d78f884c48c881dadff4a95b936fc0eacb3a9d212571d33b823625d8ddd9c5aed44de
SSDEEP 192:JONU6v+YLNQmiUymFZh+CGy+FdeL9oCXusUfU6:JONU6vz/tZh+CMdceCDaU6
TLSH
T19C02EA357D382C6B9FF2AE45F4873A235FA81177E9912F84D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a914de6b581d572fe912da4fe7f308ed0a45a00f72e2638fbefcd7c140541038
MD5 99f25f48f1b1d465312e5799380d580c
SHA1 2127f63665ac4d45a261f2a9e2d71c7b56fbdb87
SHA512 fc3a8426b9baac8f3c8c593989caa2cc727de992afd2a7501e7988f8a9b2778977aa3c2072542b5b99dab563ebeaed87db430001d23960aabc25de653fa944f8
SSDEEP 192:CON56v+YLIQmiUyyFLh+CGy+FdeL9oCd1FS+2QCHPqgU6:CON56vzsfLh+CMdceCBS+2xTU6
TLSH
T1E5121B356C782C6B5EE2A945F48335135FA45177EA8A3F80E5EC2F1C02EF6AC2346816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df048c04-4699-4e0e-9a4d-ea947674ca47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df048c04-4699-4e0e-9a4d-ea947674ca47.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b64b259d24e99e4339056da68aab11a9dace3d4df50b20f545e1767bf0721ce8
MD5 ca3ebcf056a480dfe44a923dab8fd1d4
SHA1 4832c77203360756a73f24ea006ea57afad73570
SHA512 7b2d96c79de4e51db469fa0d87d5e1915284ffcfbd071d38f282876ee22c41b62249aef2b8529c74c57ace2453bcfbd11ea26a87ff1987f5c48cc61e70758088
TLSH
T1D6413B58A6FD1108B3B37F1A5BF7A96D48BB7D372E0A955D00020E4E4A36B40CD61737
MD5 SHA1 SHA512 TLSH

Submit Download