427ad82c4eea317476d362396ad011f4b6faae4ba5256750e820328f9eb6c083

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/09/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 35KB
Sample260903-ppynraxarc
SHA256 427ad82c4eea317476d362396ad011f4b6faae4ba5256750e820328f9eb6c083
MD5 4395b2cd46574eaf9cb18b438343759f
SHA1 c08d5feb95571695c20a32369fb80da329fa07ef
SHA512 a3d91554e1c37f5d5a4b4ba3ba45370062b2363c81e510e2ae92d29cbd5f85ed6e6c85f84d1409f17c8e04c96a6955e93266f6b78bac75800d7c5e79e8d8f471
SSDEEP 768:VWpZdypZniSbmePjK++UohmlB4HIZo8tJnC93MOouJ+b0vLBE:VGypgSSebKvUmVHIZZtRC93MOouRE
TLSH
T1C8F2A732E0A400773B5F47AD81A5B31CAA999714CE06AB75B1FC31A89BD0EF704B761D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329122631086110"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{945F234E-13C6-4687-81AC-31A63C3C5C28}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe
2260	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2260 wrote to memory of 4616	2260	msedge.exe	85
PID 2260 wrote to memory of 4268	2260	msedge.exe	86
PID 2260 wrote to memory of 1812	2260	msedge.exe	87
PID 2260 wrote to memory of 1812	2260	msedge.exe	87
PID 2260 wrote to memory of 1812	2260	msedge.exe	87
PID 2260 wrote to memory of 428	2260	msedge.exe	88
PID 2260 wrote to memory of 428	2260	msedge.exe	88
PID 2260 wrote to memory of 2468	2260	msedge.exe	89
PID 2260 wrote to memory of 2468	2260	msedge.exe	89
PID 2260 wrote to memory of 2468	2260	msedge.exe	89
PID 2260 wrote to memory of 1756	2260	msedge.exe	90
PID 2260 wrote to memory of 1756	2260	msedge.exe	90
PID 2260 wrote to memory of 1756	2260	msedge.exe	90
PID 2260 wrote to memory of 3776	2260	msedge.exe	92
PID 2260 wrote to memory of 3776	2260	msedge.exe	92
PID 2260 wrote to memory of 3776	2260	msedge.exe	92
PID 2260 wrote to memory of 3432	2260	msedge.exe	93
PID 2260 wrote to memory of 3432	2260	msedge.exe	93
PID 2260 wrote to memory of 3432	2260	msedge.exe	93
PID 2260 wrote to memory of 2160	2260	msedge.exe	96
PID 2260 wrote to memory of 5032	2260	msedge.exe	97
PID 2260 wrote to memory of 2160	2260	msedge.exe	96
PID 2260 wrote to memory of 5032	2260	msedge.exe	97
PID 2260 wrote to memory of 3332	2260	msedge.exe	100
PID 2260 wrote to memory of 4876	2260	msedge.exe	107
PID 2260 wrote to memory of 4128	2260	msedge.exe	108
PID 2260 wrote to memory of 3600	2260	msedge.exe	109
PID 2260 wrote to memory of 3028	2260	msedge.exe	113
PID 2260 wrote to memory of 3028	2260	msedge.exe	113
PID 2260 wrote to memory of 4084	2260	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb8b18c188,0x7ffb8b18c194,0x7ffb8b18c1a0
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,11881823423498021692,1994282013795469433,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17640495416798991594,16151035164688266495,262144 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,13793728082242837617,13761822248451721870,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,15206623838627764471,4206195494373418998,2097152 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,12220146480325177333,14613288184832084774,2097152 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,16039506052183492838,11691698964870449585,2097152 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,17380202250244063723,3866825134528029045,2097152 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,11918328636279657155,2511999073708815963,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1362553068086224725,600885931193243058,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11130671313300152069,11325483742719601320,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11130671313300152069,11325483742719601320,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,2452062327324213538,13772365255701605555,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,6811224083493407557,25515692690809734,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,11571689569938468925,13903374283808574047,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,6836504118007126267,8672129510790816255,524288 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2144,i,462197175626318828,6000474316125520938,262144 --field-trial-handle=2764,i,17458907643193297780,3746579905385353215,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4084

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 28a5dead6d9c1de8d50cc23e159e2bfa0278a0989d0637b3a45a5ce8e875ba58
MD5 9be4e55f38b0162a47cd97d5f377f1a8
SHA1 c0ca6bdcfb9a0bd0fb2f3dc1322dadfb5d870cc8
SHA512 cc1aac32955c0855ee63630660253ddf876331aba1541844c6dffd488ceca30ed8f152ea2af75a591c80914afc917f19d4e6add006e901eb0e5ef1a76ded9791
TLSH
T17E71533933108058E3220872DFD916EB763685E7FCAB3E8111F2BC749521F728666B4C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589352.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589352.TMP
Size 3KB
SHA256 0ea82bb5e3cb12c3dc35f60b241f4e5369222f179c92eef0b7ee75c3e260e598
MD5 9cb7554f7fc6a4cd8dfa171d4256a790
SHA1 97fbb0596c9ba199527623155afba1010dce6491
SHA512 7420bca324a0c1b56a2638a33b8cf10824570d30c88ca163a46df2b4fdafaeeca0575e63c2493c19e026907fb99c3df6eb816c2bdbfc3aa337598b84ddda63e3
TLSH
T1BA71333923518058E3220872DFD916EB763685E7FCAB3E8111F2BC74A521F728666B5C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e935e100cb76f9742e031bbf6872dd2ffa3fed483d2f036b6cf42b7c910bc4c5
MD5 2b9031341402558bb76c76f3e51a1287
SHA1 be8dcb67b38b0f35e385910e700e43347492f231
SHA512 df78f682f9f57de966a90e0535f70bf07f96ccad0553a9d760d240a907629ca342a943bea197d27107ef4d6192162103265a54cd4c2244f006826198240e876d
TLSH
T13B3168B6C2D887BE891112F09A29B926CD1D055782283C16C9F4AF5FA3E2470D101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c9698f69509c3abf26233d82d6ce3b0d24bfbd1d8562d24ac751ec31d892fe58
MD5 df5a1540e96b78dd9c3ea8b2e362df5c
SHA1 81d34249aab1b2934df04e83a5255120d7d82c99
SHA512 b421cf545a225a646f5d1109980db6ffd300d6d2ee4880004ae1400f7f1c9bc9e1a5f3683f73776df0417d82bffc22039c90e2fe52914d47c23b4b04a54ddbfb
SSDEEP 192:sxZU7lWK/fcsvouIUVgIdpd7HW6+WNGYvr0ju44zIgrJ:sxZSMK/fcsAO9HbGxH4L9
TLSH
T15F2299127E24A57B8CCBE21DFA55BF53E6F9503251951E88AAFC861C04E76DE120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3b737a7004f6c5e524fcc15658a74e085e75f6382684fe881299c9c6996029a1
MD5 9ef4028140d2899090ead84c3c9db1f3
SHA1 ed358da377df98cced688179663b996a07125bf6
SHA512 1c1c3016acd7c63b6b2ff70c5317974c5f976b1238c4832ab63cef630477264c114dc98ba0bd5f2f6d08d165f2ac4ba5e1e23286059a7b3023c94de85c96ca93
SSDEEP 192:sxZU7lWK/fcsYouIUVgIdpd7HW6+WNGYvr0ju44zIg5lJ:sxZSMK/fcsBO9HbGxH4LZ
TLSH
T10222AA12BE34A57B8CCBE21DFA55BF53E6F9503251951E88AAFC861C04E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 340a72f3cb7bc4867ea888a04817210afac9902d4e91fb4b04990cad2d2f586a
MD5 a07f2969163a98852ed5be6e0d6ff11b
SHA1 6865db4c7dacfaa2bf6bec4ea252324e372f92ed
SHA512 4310547aee771a037fea32ddd74acb90ccfec11a170baabf4865c275c037605367cb3739c9997f6311e1b7983897353161932b33b2558d0e0c2b615fb29b5b29
SSDEEP 192:sxZU7lWK/fcsYouwUVgIdpH7HW6+WNGYvbIzju44zIg5PJ:sxZSMK/fcsxObHbGWKH4Lv
TLSH
T17B22CA12BD24697B8CCBE21DFA15BF53E6F5503251941E84AAFCC61C04E7ACE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7eba5050be8c3cb318f6f2ac74234d1fa3b4a9fb7b6384f2b677f1e1160b3157
MD5 6d39655ddb7261f508181456708c7041
SHA1 f4496c1cdcd68d28426ec85fff8ea3eb972328e9
SHA512 b5cbf0b8956c4bc7c64acc307a937be79c5ab370d85ebf712efc4011b3605a787631ba5d4cc1597f300db60b3a6b000a2693927c08b6d8a9116b726a4babcb19
SSDEEP 192:sxZU7lWK/fcsYouwUVgIdpd7HW6+WNGYvCI0ju44zIg5PJ:sxZSMK/fcsxO9HbGHDH4Lv
TLSH
T1E122BA12BE24657B8CCBE21DFA55BF53E6F5503251951E84AAFC871C05E7ACE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ca8a9c0f3098ba7eb05e18aeca5b6711ff4c11140f2f64c1ea34557bbee3ba2a
MD5 66634f8ccad9edb082d9aac98d93e792
SHA1 62dc859429218ccf334f5847705ae0313a56f24a
SHA512 2ba64a92d09725b23bd8d396bba3f38c6968136ec3a6b6d2f85c20725d988e7823b73da5b3911d7141fd3bd5c5f7447da335c7abfc70515eaef44fe441a339d7
SSDEEP 768:d4ee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pburou:d4ee3rxWvhffnu1jatcL88blu
TLSH
T197C2FA2B640CCB7E5F800EADDC5A6FD76FA802C7A7548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59300f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59300f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1cc45e5bf77dca6f68c14897a5d6243bf8020fa2c14bfd40ad4877b3f8dee9f0
MD5 ffa51bc132894a0dedeef4fb758dec9a
SHA1 cc71594e910fa8a13c131c9c30408a6cccb3e084
SHA512 6962f82b19bf9bc5b52a02523f404a063465262a82f7e5eb5d4ea1f9dd63d05d34e93568bf40118e15729dec7632d528fa7eae58bcd07f283025b4fee4ac231d
SSDEEP 192:uyLsNaQCQYqmpiM7botQmiU1MuZr4MTbt+FdLjv3mhQC8z1AqaUMZ:xsNa5OS78rCm0Dd/f7IUMZ
TLSH
T17A421A31BC68AC2799A7B156F04B36035FB4817BDAC42F94E6DD6F1C01DA6AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 cdea5da234e8a7effc7d730c2eb01b119e91dc8bf8c5606090428d91bee0d824
MD5 9f50e17551d9ea93a0eeb97e99038e18
SHA1 cf325ec844fab4db3a3bfd3521feafed2262e253
SHA512 6810892b81b1fcc674b06350e8c84883473053331b8a4952058ac5ae2c61509b90e0032b9d9c7520fd63de4147f41be4c84a6ac0b3e82b26ac30ff05421b5c82
SSDEEP 192:utZm+xasuheOwQxMGsNalqQYqmpiM7botQmiU1MuZr4MTbt+FdLjv3mhQC8z1Aq4:OqZcIhsNa4OS78rCm0Dd/f7ISO
TLSH
T104626D716C746C3B99B7B146F48A36035EF8C03BD6C46F80E5EDAB1C01D66A8131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 7a21273adcf757686a9bbc37264f6bf8f27f63ae1e08d4b3180c55c30c382b52
MD5 2043df1e832f290966673a310b6730ba
SHA1 073bc5b1f2a58bc496b7390ea31ef34208d2a01e
SHA512 d37fe30927c568a846fd4b45af1ee70155a1898145c908c486ca8cd97e4cb1f63c54decb6e5e31e9e5db80c9b4dedb3bb43641eb463e701f7d83d9911abeb3ec
SSDEEP 192:utZLsNaPCQYqmpiM7botQmiU1MuZr4MTbt+FdLjv3mhQC8z1AqaUMZ:OFsNaKOS78rCm0Dd/f7IUMZ
TLSH
T104421A31BC68AC2B99A7B156F04B36035FB4817BDAC42F94E6DD6F1C01DA6AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 97f66aeb8501145ac0fe45cc0fbfef09ae8ad35e368e001a3aeb1d243213cdd9
MD5 8f3008d2a3294a2ca8368a3bb764c872
SHA1 83e93addf25ac097c4cee7340fafa089089a351e
SHA512 307218d22de2050ae3d98a0a703d14fba801b4787a860eebb29e4d377cd12195137d3a5039915488173c543685a9d6cd430a312149f705774d72d979f58e20de
SSDEEP 384:GJiFiZcIBsNi8TUNTUlIl4OS78rCm0Dd/fhISO:hFQBHwgmdmAlfhISO
TLSH
T136825C725C54993BADBBBA46F54A36038EF48077D5C4AA90F6DDAF1C00D71AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d0fdc5265c7a1f9aabb74a8350bc83abab6fd3d03d60fd8192466f318b48e268
MD5 5bca15a21d5f79e02ea7d2dcf44e5235
SHA1 5ed5b6dbe5ac91db51d6dfd6cafa6dc93d196bba
SHA512 305f46eac6043f79cc6c16f5b08c27455ddbb33d49a63a28d9194bffb3f01dd4d934c8b97630bddbc2179052c4fcbe640b7d608766199a19016a47e02bc1968a
SSDEEP 192:lONe6vMtPQmiUy1fThTbt+FdLjv3mR847yajU/u:lONe6UtReTMd/+9U/u
TLSH
T10002F935BC786C67AAB3BD46F48A27171FA4517FA9901B54EAE82F1C00D764C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 7dd630226a5d9d4f076f98bf27a054c9e497e58239d90654a25bb3e7389f1721
MD5 35b1d139dd1d78f6141f590321b007f9
SHA1 bea5f381213c0d2ec9d6a653df570a4eb81fe961
SHA512 1ae3fe1740480afc9d7342c3c102a6651ba9058150c1e65d31b97c01e16b013d007c579e3667abb02f5392c0d87ac2982f4150803ccab3edc6d27870eb2a2cfc
SSDEEP 192:QONL6vMGPQmiUyIVfUhTbt+FdLjv3mhQO80IAqaU/u:QONL6UGR7hUMd/fHIU/u
TLSH
T1CC121B31BC64AC676EA3B446F08B36175EB4816BDAC46F90EADD6F1C01DB66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 522B
SHA256 532e27b1c35cecf3833a063deb0a05850d18f45002890d4dd9c69509841b7738
MD5 b809bb2b4dca57c6dcf6e141ab343c71
SHA1 3d858fed3e81f1ca3d3c105aaa579c0359654edf
SHA512 089d37cbd8d0d641052a8ffbbf4ee41489551f876cafb2dec05897f131d309580b9872e3493f6cec359efde76d766ef4a7f8ee86fa084740fbcbd049e7f749e6
TLSH
T177F0051380DA34D2EA6B00A0F1446DD4120FA1FA2919B7746975855681986716144736
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 1KB
SHA256 20a2037d71c5e1cfda0a45ecdb43f678cf1cc2025478f1d7286b969125d2bd1d
MD5 6478ae9f28e8b1af1ce1098973e14f01
SHA1 7ece19888fbf00bcfb6a971dcd80525f63075f5a
SHA512 ec0250fc75d687327ed3a2051d9c6e612c360ca976f50d79903b41a846835a869d408c3d2ea3ceaea6942ca96853cd171ec407240fa5e1b9e8e1f5114a570455
TLSH
T1FB311967A490238D67CF2179F9B497413CC65DE3FAD6B8B6C4C0C3812E54529D004A50
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 87f00bd17ca2cc20d2bc067cfd15932d10304fc7d9f4836ae06d855dc72d1286
MD5 2c82d9a0d1bb4a56d76184d20fb06af7
SHA1 2b24f64a0b5498a2c2f868dde21f925747858441
SHA512 e20b0b7d84bd2a944b65a0656662e2bd4792032a821213136e52cbdff66c872f73f256b9d270e83e8b13cc28886eebe777ee27596ccdf8d8503dc07c98d949fd
TLSH
T1A4412B68AAEA1148B3B37E569BF7A46E447ABC373E07845D00410E4F0A22B40C461B37
MD5 SHA1 SHA512 TLSH

Submit Download