4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 00:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fragment/bot/web/dashboard.html
Size 17KB
Sample260905-aq13yatbme
SHA256 4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7
MD5 e7d326d33617c75987dc542b7abcd467
SHA1 fce5b7ee55a59e1a0fabd4e1dffef907d1123bf7
SHA512 2210f9f4edb1d84e0cd88c67814115f3aec000a94c3011f543bef05916a92499a60169f9793e7b9618d76531d5e2846c0f066d98a9177c971ccc81b21dada96f
SSDEEP 384:fsc3Fx0gvECLZCLW6CLokCLXqCLX0CLXRCLq3Q:fsCECLZCLW6CLokCLaCLX0CLXRCLF
TLSH
T1BD82226120F10AAFA0D7C791F6506F16ADAE9717C45B917DB5AD82D12F83CB2CD8F208
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330416938922784"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{EF6A0E48-72BC-4858-A9AB-CB5324A0AAF8}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3320	msedge.exe
3320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3680 wrote to memory of 4960	3680	msedge.exe	85
PID 3680 wrote to memory of 1576	3680	msedge.exe	86
PID 3680 wrote to memory of 1328	3680	msedge.exe	87
PID 3680 wrote to memory of 1328	3680	msedge.exe	87
PID 3680 wrote to memory of 1328	3680	msedge.exe	87
PID 3680 wrote to memory of 2292	3680	msedge.exe	88
PID 3680 wrote to memory of 2292	3680	msedge.exe	88
PID 3680 wrote to memory of 2496	3680	msedge.exe	89
PID 3680 wrote to memory of 2496	3680	msedge.exe	89
PID 3680 wrote to memory of 2496	3680	msedge.exe	89
PID 3680 wrote to memory of 4864	3680	msedge.exe	90
PID 3680 wrote to memory of 4864	3680	msedge.exe	90
PID 3680 wrote to memory of 4864	3680	msedge.exe	90
PID 3680 wrote to memory of 1180	3680	msedge.exe	92
PID 3680 wrote to memory of 4648	3680	msedge.exe	93
PID 3680 wrote to memory of 1180	3680	msedge.exe	92
PID 3680 wrote to memory of 1180	3680	msedge.exe	92
PID 3680 wrote to memory of 4648	3680	msedge.exe	93
PID 3680 wrote to memory of 4648	3680	msedge.exe	93
PID 3680 wrote to memory of 1000	3680	msedge.exe	96
PID 3680 wrote to memory of 1000	3680	msedge.exe	96
PID 3680 wrote to memory of 1084	3680	msedge.exe	97
PID 3680 wrote to memory of 1084	3680	msedge.exe	97
PID 3680 wrote to memory of 4628	3680	msedge.exe	99
PID 3680 wrote to memory of 2132	3680	msedge.exe	108
PID 3680 wrote to memory of 4684	3680	msedge.exe	109
PID 3680 wrote to memory of 408	3680	msedge.exe	110
PID 3680 wrote to memory of 3308	3680	msedge.exe	111
PID 3680 wrote to memory of 3308	3680	msedge.exe	111
PID 3680 wrote to memory of 3320	3680	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fragment\bot\web\dashboard.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa626bc188,0x7ffa626bc194,0x7ffa626bc1a0
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,9762375287361966655,3471403925061387028,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,15352697069033081639,3022912415180690702,262144 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,3487710696126330953,8043576955282819263,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,714591542094514852,4875107999393392278,2097152 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,5097489133049735096,9519566967236773795,2097152 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,5722915261672005544,15059039488005342053,2097152 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,12925523411758019161,13724328439481423309,2097152 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,6745217303833950036,14161274036908452539,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,14869501446688976031,7582328498945560317,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,11091340524673810079,13321898371704358603,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,11091340524673810079,13321898371704358603,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,17345417397304961754,11269844478381478642,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12743018227031471043,11875205078138929434,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9922017820835749950,14210862395049251791,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,4363710968912025423,3037080651730000468,524288 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5792,i,7893148690816161114,17680042240127657310,262144 --field-trial-handle=2224,i,310908328974254721,7927859269078986837,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3320

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 03ddc1fd39867cf58f461003c2100cc98502fa1db2c67f6a8294e8d4a410134a
MD5 7c862d9ba4043782ad458233a10f6d8b
SHA1 86cbba8274eb6619e0dd680d8089b631f509d51c
SHA512 b04d6aa964ee7780fa69c0e36611bbcbab9ea96a976767c80dba455eeb9a1182230a058f730f834764eb4870278428c61e41988237263f355d5bc0374d5766c5
TLSH
T1D4612A28F5320C80E3B12370DA915A1C38F0CF88DA5B9E5143D864BCC5DA37F8576C49
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1396acec12d577f11acc8a24b0f554dfbba7fce7fc58257cd6ac66eec19c7977
MD5 972e11c42f3f152b97432c0dc1ac9c94
SHA1 87a34a10f847fbb2c98bac33f31f433c6ae66389
SHA512 bf2123c744dec310bb1b48f2a635dbab3b6f4bccff6ebdfb3ddf13285967c96edda5e00a08406ec5e3e2a03b928b65774ffcdded6110b0a6930fa810617d224f
TLSH
T169317BB6C2D587AE891256F05B24AD2ADD1D051B42383C2A8DF5EF5FA3F20B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c50d97ae2ebc37a83a7a640d5f57019629aa98948e5c9e88871f9e1ff32d3acc
MD5 36f89f0269ffb966427ebc2a81c1ef1a
SHA1 138214d58553434991e945ee12febfadb661849b
SHA512 1f8efd170c454ee0a9f6fb88ba952407e77eb7ed8acc07207619106edc653c3d41853ed07e2db66cdca73d6ee9964d7886c82fdf6fdd0f90d466aaa26be2990a
SSDEEP 192:sxZYRDyM/jK1Ml8MkE/fCsdwDwBIdpdCHW6+WNGYLznNudIgrJ:sxZY5ME/fCsdwMqoHbGx9
TLSH
T10142E8116A346977CCDBD209FA51BF53D6F90472A2940E44AAFCCA1C05E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e2d2973044efb0f002f9ec9ed3e211a9f7296d52eae8007799474e305a6cbaea
MD5 b6722d85c859091620859c914b58cd03
SHA1 37ce54d03cd8bd2ca4c293507a9e0464f37e3cc8
SHA512 d41d80e01f7afa5014718dd9e82e0dff977320b58fe0213bb848f76d07d5edbf2dbbf88418d4310f283050b38014ff883b4abf03b559626dc179ced9367a9b2b
SSDEEP 192:sxZYRDyM/jK1Ml8UQAkE/fCszwDwBIdpHCHW6+WNGYLY66udIg5+J:sxZY5qTE/fCszwMqiHbGYE
TLSH
T1AA52E6116A345977CCDBD209FA41BF53E6F91472A2510E44AAFCCA1C05E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5f925e2e5711086b87b43c980d077c3bf5b445af817f45d053bbd4efa20344b2
MD5 28796f8a91c930ce8605a72a56755efd
SHA1 a61431af96f1d1280cca90881f7bc1124ad32007
SHA512 7731a1766759d86043a9050c00fcc14eec2a876fee2e126788218eb695f4ff24ffdfc3b5cb05c96ee3588edb4d9b75f2ca6015b24d8b848421d20b698b7665fd
SSDEEP 768:99s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNmrosr:99s6pD1WvxzWju1jahILIsNdsr
TLSH
T17CD2EA3B680CCB7E4F841E5CEC2AAE966DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 0bbc8896db53361c8743c931254b51fd4ccaf9a6d141ecc89a46c2b259e209e1
MD5 46a174c7f1744799631b44dd4382264c
SHA1 a0c73fc64d47179974533bab6b7aa50d28071271
SHA512 9c6502e36dcf01e4ba83defaa7cc43e4dd678621edf7a472056db11442f8ea7e757d00215a8d96a0279c871c2e71068c6df0c3e66aecb65a4936f4deb3ff0119
SSDEEP 96:KUAAKtePtYhM46SS+4iDlqY+KyLqO+2QYr+ofuVKKOAJ+IKHKS6eUKryH:iitYhM46SSPiDIYYLqOzQYr+ofdxXvY
TLSH
T186E1B25771B742023C7E2A4C9794C7268E42B6633028A42B7FAC01765E67E309EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19687093-75ac-4cda-8a40-2a4569c0fff5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\19687093-75ac-4cda-8a40-2a4569c0fff5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 edf432e7e7c9472792c5304e19ac234ee12dd4c9a799ddc2c2afc5331d3760f9
MD5 4def79c3c964ff7660c66c1da387e9f5
SHA1 81721fc17166fc74b736d8bf1f6be6612866d5e4
SHA512 8db1a1680ddd91cfd7925866efc620a6ba53bae99f054eef3e1d69eca559a1a3f94493fbe2c22ff3b4f655884ce29fee7ceab25e811aec0e59a2e473ff995710
SSDEEP 384:+ZcIhsNAdZuDka9lOaaR3l6N7O6R2Feo4dow:8hutvOaaR38N7TRzz
TLSH
T1A1828E725C789CB719F6E146F9873A038FF84067D6CA6A80D4EDAF1D05DA69C230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 43f8fa6e2eeba2cbf3eb53e9dc9a6784bc149c7f4fc5e3c8079c7809e5f484bc
MD5 3172806908d2f85a2d6942e1030cd71e
SHA1 212bcdfc3c522a9185ffd5902396963c19d6a551
SHA512 a7932a5447b5f7d8adc470517ba810237b5a5fb981906342880488786c1d0288a14cd4251645f1700d7198847afbcb48674d8c94400526d59c2d495b493f7a65
SSDEEP 384:MiFiZcIKsNA8TUNTUlIl0ZuDka9lOaaR3lFN7O6R2Feo4dow:3FQKtwg3tvOaaR3XN7TRzz
TLSH
T1D8A25D735C68DC7B6EF6D645FA8A36038FF840A7C586AA90E2DC9E1D01DB59C2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5a5d048b24433391acca02c2d61528818ed73f9afc1db0e31566f6cf99ecc7f3
MD5 3c58d2de3510ca56a9702528d48483ff
SHA1 ccef83be64a69e6421c731527aefc8dc9ebf62ab
SHA512 a0bcae827d242074de7e5d39f49741eb72468f700936fdb7fb1dfef5d27d302c7759b02d0c8e734f3c7d2b43e88f4156c2ed3bc0939d49c12cc3ac13759afb12
SSDEEP 192:qONy6O7+3hQmiUyziGttb0cO2coGgG226U6:qONy61BGt9lOa4H6U6
TLSH
T13502E8356D686CB78EF2AE46F98727179FA8103BE9962F40D6E85E0C00D765C2347C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5cfb644df48b264c87324cae1afdef338b85b675583072829c5db70daecb8c89
MD5 8ac526f1d8e5a5a2beb189c34e672612
SHA1 698514d6b4ba016e2c23b3c75ff8ce71b95a30b7
SHA512 cb42741a09b3a6f18dd29a13b827a4a8859355f4d389311deb696d9c3eeb0a4be4bb10be1f6a6befb660c92036af5bc919ab60e4b533c82dc14758fd31fafae9
SSDEEP 384:eZcIhsNA0ZuDka9lOaaR3l6N7O6R2Feo4dow:chltvOaaR38N7TRzz
TLSH
T143828E715C789CB719F6E146F98739039FF84067D6CA2A80D0ECAF1D05DAA9C2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1b766b63676e78939fbe90dcbda1b132986d92fcd65fa30e8f07f73e09f1b865
MD5 d7df39be8d9d2c4fee32a75d096e0124
SHA1 070c8361086ec00718e0b3fc06d7f37f12d20a3e
SHA512 3d8b8a7f1cfd5b5a7bb460e330dbd4291f10232a4618db09e9add724b3850bad30d4d723a5568c6480cdf2a0240bb126e835a531cb3ce7e1cb49dc61222307af
SSDEEP 192:GONp6O7+3iQmiUysikttb0cO2coaR0El4cNMqoKU6:GONp6c2kt9lOaaR3lpNU6
TLSH
T1741209317868AC771EE2A585F9C735139FA9012BDA467F80D1EC2D0C05EF6AC234BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbd155fe-9535-4005-8bf0-e8f24ceb6353.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fbd155fe-9535-4005-8bf0-e8f24ceb6353.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fb3d3d2fcbb6aecaa33ed04afefb5f0e136245a9a71720af231e3b1968aa28e7
MD5 6fdf3a974984801b7eca895318b67238
SHA1 fa5d6793ec98905b2be667a918153596752f9443
SHA512 3019461875393b57ebdc2f4d8dd82adb195087d8b8a889fe9f1a4f1c36a148578a7caa34c3a214e031717d86fa8e94053fe92512b63e633f6959e4dd91a75016
TLSH
T106417D58B6F91108B3B76F569BF6A86D847F79772E06D05E00010E4F0673A00C8B1B3B
MD5 SHA1 SHA512 TLSH

Submit Download