446a7023d9bd40a324ac67af23deb70ac535211483b838cba8c957a81694bd97

Analysis

user interaction
yes
max time kernel
148s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
profile.html
Size 4KB
Sample260905-stnacsem3x
SHA256 446a7023d9bd40a324ac67af23deb70ac535211483b838cba8c957a81694bd97
MD5 54cc65408020aac882f117a94115de73
SHA1 0b994609e1c84b59d16781c7a051e6adb5076202
SHA512 3dc438a130a31ab1fabbc114c27d19371c952dd0e75a4c6388178122e1aca815962d8f7c8ab9ffbd565693c3bae80afa77ba9e797b157732b0d27bfe7520ac23
SSDEEP 96:/2ElBKZt4rnoGR0i4rno8IoPkE22W9yqC:/pKZt4rnog54rno8aE2jXC
TLSH
T15A91D6A66CF0665A2013C450AAD1FB4E5FB4C413F1624DC8B1ED69874FC2EEA298770E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330955327791784"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{1E565E89-930D-483D-B7BC-843A181C9F47}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3128	msedge.exe
3128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 820 wrote to memory of 4308	820	msedge.exe	85
PID 820 wrote to memory of 4576	820	msedge.exe	86
PID 820 wrote to memory of 1104	820	msedge.exe	87
PID 820 wrote to memory of 1104	820	msedge.exe	87
PID 820 wrote to memory of 1104	820	msedge.exe	87
PID 820 wrote to memory of 1100	820	msedge.exe	88
PID 820 wrote to memory of 1100	820	msedge.exe	88
PID 820 wrote to memory of 2324	820	msedge.exe	90
PID 820 wrote to memory of 3212	820	msedge.exe	91
PID 820 wrote to memory of 2324	820	msedge.exe	90
PID 820 wrote to memory of 2324	820	msedge.exe	90
PID 820 wrote to memory of 3212	820	msedge.exe	91
PID 820 wrote to memory of 3212	820	msedge.exe	91
PID 820 wrote to memory of 3584	820	msedge.exe	92
PID 820 wrote to memory of 3956	820	msedge.exe	93
PID 820 wrote to memory of 3584	820	msedge.exe	92
PID 820 wrote to memory of 3584	820	msedge.exe	92
PID 820 wrote to memory of 3956	820	msedge.exe	93
PID 820 wrote to memory of 3956	820	msedge.exe	93
PID 820 wrote to memory of 5012	820	msedge.exe	99
PID 820 wrote to memory of 2552	820	msedge.exe	100
PID 820 wrote to memory of 5012	820	msedge.exe	99
PID 820 wrote to memory of 2552	820	msedge.exe	100
PID 820 wrote to memory of 2468	820	msedge.exe	102
PID 820 wrote to memory of 2744	820	msedge.exe	108
PID 820 wrote to memory of 4592	820	msedge.exe	109
PID 820 wrote to memory of 1200	820	msedge.exe	110
PID 820 wrote to memory of 3000	820	msedge.exe	111
PID 820 wrote to memory of 3000	820	msedge.exe	111
PID 820 wrote to memory of 2064	820	msedge.exe	112
PID 820 wrote to memory of 2064	820	msedge.exe	112
PID 820 wrote to memory of 3128	820	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\profile.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc052fc188,0x7ffc052fc194,0x7ffc052fc1a0
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,14483972383251633430,12065310402389642069,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,11862694905323177759,18316003651701105839,262144 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,4078059798664911179,2823126653555631318,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,17955458261848810816,5268130451330046193,2097152 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15391129944647338634,12147438816437825877,2097152 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,5539692540620435045,16052202713663833247,2097152 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,4278921899164591115,2250483998229727796,2097152 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,10935167900668454631,7594927944624670997,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12212937324501592905,2440602660444670119,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,18215419104196506663,4556293474014732824,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,18215419104196506663,4556293474014732824,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,11310726888996807858,2990450973928121560,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,6912884456538863614,4676533002440865953,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,1142861583854574809,12279444295137887019,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,2472350657999402370,1547428672233681546,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,14559926705845831512,14630277480290193475,524288 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5176,i,14444164049196928102,13267899456183405386,262144 --field-trial-handle=2356,i,7754852832710521069,13290610137573010450,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 48ea200505c03e16c4066c3b32a96b2e9bc2315eaa2a81f9880a02092c45bc4d
MD5 83a5a357af7cbff76fd01fa624ab1e2c
SHA1 0283ff1f21f5140c773a9cf417819352e2508baa
SHA512 e54457106df32373d3b4790de10e9d6dc158f54346c3f5ee6b3db4eec8d2eb8698b0d5f48bc38fe647dbe62489c5828e2efcdc31e9f2b309cd05edfa3622118d
TLSH
T1F1517F3C1A110862EBC00533F0FB9A54717985DDFA13AE73C6B36D7A6B0A321C00D389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c1f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c1f3.TMP
Size 2KB
SHA256 e3a6af3d62022ab29a3f90c990f6bb47cc24b41cb69a5b0596560e712baabd02
MD5 b9c92a96964f56604d9c569cbff7f8ba
SHA1 672cb1af667a425a337e484a4ac2f20bccda36c9
SHA512 415610b0c9dc3eafe880fbe11a8e815b768181b0fa843c23078c8f35cc9a44ef3ce6c8477b67c884b49ef471d3dcd6a450eb0816d9486ca196cd7cd075d2baaa
TLSH
T183516E3C1A110862EB900433F0FB8A54B17985DDFA13AE73C5B36D7A5B1A321C40D389
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0dff164a10d41586717efe9cd72c8d0e3ea9d56e41080507a14bb9c4245d494e
MD5 84b40b23cfd6df4ebe9c77da12e94031
SHA1 edeedb48fa412019a4c54152429878f463e22cc2
SHA512 b29c7e77a3d2c9b46c0d71983ea6159a534f23c93b14e9c04c535913f532155cf9a8e72a85316d836e4a3f3495fc62d7882a26cfa9f849a305b6ff06628ed500
SSDEEP 192:sxZxlWM/f2sMxGIdpdSHW6+WNGY9IKQ16IgrJ:sxZxMM/f2sMRAHbGA9
TLSH
T1A912A7126E28A47B8CCBE219BA257F53E6F9503295D41E48EAFCC51C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ad427710c1a14edaa29ec744383def24f33390080f93c1122dddc6239afa566c
MD5 a3a732a0e1f94277e0e3f58d9730f135
SHA1 29459c6963b53f6b06adc312ae2930556c55751d
SHA512 3e1c0459636c54b1efb31b08361cdd5ac26b8a2710c37281052acc0a8eff55e84a2e38d986e43fb521952b432203ee54d3bc1a5e8632d5a484a7f622e2d885a0
SSDEEP 192:sxZxlWM/f2sIGTGIdpdtHW6+WNGY9Iu016Ig5aJ:sxZxMM/f2sIG73HbGmg
TLSH
T1AB22A7126E38A97B8CCBE219BB257F53E6F9503295D41E48AAFCC61C05E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 da9aa78afe459835dd671531f376f6e96446e6113b35a5b2b4f2ca99bf53cc4d
MD5 d7bad9e26567dff0d3af7cbc83e7b23a
SHA1 aa1872201c7d99115f8f849a9571a43e14853b6f
SHA512 7ff1f717e15fd20ed279aa0ee7e3404486c4e78da3a279dc5fa703b662adb1f71362bfee96e928c7eea03f79b1f08e8775455c31fea92df64d3febd7b53e46fc
SSDEEP 192:sxZxlWM/f2sIG/GIdpHzHW6+WNGY9I1T16Ig5aJ:sxZxMM/f2sIGfTHbGag
TLSH
T19B22A7126E38A9778CC7E21DBA25BF53E6F9503295D41E48AAFCC61C05E77DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d0daa4dc1a8ace6767816234d65b5fa2e842b97b0bef2bff4e6e4148c28d4c0b
MD5 b90c89259b90a45c375a2004aa212e7c
SHA1 fc5823c52735c7655f4a6d20239de26ba84d80ba
SHA512 3772115c5fa63b7d38a383cf2457292673bc56ddd32d0dc8e2d7efa96a666823b0653a24c1f309f7069ee9fec3e04c948a8723395b354a4d9566c4e29a8f9762
SSDEEP 192:sxZxlWM/f2sIG/GIdpdzHW6+WNGY9Iu016Ig5aJ:sxZxMM/f2sIGfBHbGmg
TLSH
T13F22A7126E38A97B8CCBE219BB257F53E6F9503295D41E48AAFCC61C05E77DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d6ed63ad1424cdd65b208942c15a9caaeeda17eb6e7eab0c528a047411872b80
MD5 a267dafc84d8c96bce71b478e51355bf
SHA1 eb455b3114eb89cf143ff6dcb9d04dc1592cb066
SHA512 2b2934184963dea3da191da65c0f43f872645f06482e5c7a66511289d0c69b6e676ddb5498254cfdbb82df864ab219f2413862aed25a6fbb063c74aee71bc031
SSDEEP 192:sxZxlWM/f2sTTGIdpdgHW6+WNGY9IKQ16Ig54J:sxZxMM/f2sT7iHbGAi
TLSH
T1F822A6126E28A57B8CCBD219BA25BF53E6F9503291D41E48AAFCC61C05E76DE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 376bb2db64939881e96ac168c3989b4d08fccadf068250dbb23994ad8b71bb5f
MD5 b56753e13c80fce2ab07f0a1e37c80b1
SHA1 f02c4bf1b8fcd92846b1a25eab6968e274c02a35
SHA512 d440237eec5109c23c76f0b0b99a51bf844a68e5bc6d5647b0b91010fb54db7917ca9f8db3a3c8bc1de28037b4d92505bb8e65d288bb8a6501584a234ed97387
SSDEEP 768:RDyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW72roUbqD:RDyvIZwWvu+Q+u1jamFLeR7NU2
TLSH
T1DFC2E92B240CCB7E5FC01A9DDD5A6F9B3EA802CB67588D4047FD994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 132cdea5d846ab864b0f252321cfae66c2bbc97d908383b2e1f0a6d8f113edab
MD5 ee832a9c4f603148a048428a8f19aff9
SHA1 e989c7cef18eab90afff00c053e110226a4de49c
SHA512 71f63f852f3e47cae1964e8180d8bc977e34a05f2591685dba3b00b1a22945aafd6f01280f0295a600e7b571e416b60661c1ead4551d2b3a573c990a58671ace
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDiVDKKIQ6SIgKhOI:mTH5TL
TLSH
T1D4917C53703B0291287D284D93A58E3A0B4239677518E5BB7BA814A24F67E352CFECCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 854B
SHA256 5d86d2aecb8e176cca5cabc34104e639827635f4a6b717f8593a54c8b60c9235
MD5 bec10036441c28c87f55edf826128101
SHA1 e7c7c61d0ba35d864324dcc99a763811f102b4e4
SHA512 dae8b9e7b47fe6923b5cd7d3a1c401246fa82c9600844b3e783e95070ba038d3f338c39eeb359fa378731f79c3f9e43b49a20084eb973f8518689d4f1b0260b3
TLSH
T1E10133D0B3BE8189AE89A543C209A81351A13FA5120D9872631D48F44FC4C380E9FD58
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9ec2adaf32341397ea3b61b02432cb94e7699c22f435eb5c94a0620f34b60ef4
MD5 c77038eecdcb70abc9773c1a7afe6e04
SHA1 843759b13a6807ba644bb3d6551c6614b65c21f3
SHA512 4c3a0d3d7a5d877a6fc5aeeb84674647e54cac5a8a8f25f2027767ee170b83d0190a9a32ecf94629a2666575a79e2448c683690085b324e9c0dcaf4e5ce78e5b
SSDEEP 192:rLsNNoQPQi+YLeCnQmiU1A2T4e+CGX+FdeNNkGQN9hJilq+UI:XsNNoYJziS5ce+C9d6NXeQPUI
TLSH
T163321935AC386C6B5EE2A641F0473A03AFB44137DEC93F94D6EC5E0C02DB69C234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7ceba2c1caa3ebe3d8ced06c3fbd4ca180f1d15c64010ba5b8e30da6b2ca0381
MD5 6d0ea6f28b433deb5f68007abb149461
SHA1 f30e0ab0e807d6777c4a69fbde8f813c47a44843
SHA512 6f8291192177a505800bef00dc0139c173c6ee16c74c7b8fbcda3574b2ab320ad26d997d2bcb677440da80aab3ace8a66debc92b5ce0f276a77ca12a7903acd7
SSDEEP 192:4sUsNQHQPQi+YLeCnQmiU1A2T4e+CGX+FdeNNkGQNBhailq+UI:6sNQHYJziS5ce+C9d6NXe9PUI
TLSH
T13D420935AC385C6B5EE2A641F0873A03AFB44127DEC93F94D6EC5E0D06DB69C234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a1c277982fbcd45bbd71712648cc505f77065daf00cb4ca9cbaef3325d7b8c5c
MD5 500ff5eb1089e2f9c9089716f0dc5527
SHA1 1ffd6fb6e74d4c48171c829e12da112a1ff5cb81
SHA512 f0ef773b315e5b74ec59c71bb91e9312e491fa9004d0130c3d1bb9ac60255311eccdad4c6006d2bcbd5935575ea39efbd28a6a1b75601769f453c7dd50cf77a5
SSDEEP 192:4sUsNNHQPQi+YLeCnQmiU1A2T4e+CGX+FdeNNkGQNihNilq+UI:6sNNHYJziS5ce+C9d6NXeVPUI
TLSH
T1B5420935AC785C6B5EE2A641F0473A03AFB44027DEC93F94D6EC5E0D06DB69C234A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e46a059156e61b7869a64c02864b510c52af59a65ba71317e58e22abdc67b8a0
MD5 c3693e1d7cf4873d8d93cdce9406b451
SHA1 6098a46db5ea118771991ae19cc9c603a570fa0d
SHA512 cb7dfbea339736c189b218c368d38768e5229403cc089963dccae3428ed4b6f79b27c82a300a30630ec92624d54a3dbabf67531d50fe29d2ec2ec045b6183ee4
SSDEEP 192:0ONg6v+YL9QmiUyMoJGh+CGX+FdeNNkGQNOCHlq+U6:0ONg6vzfcMh+C9d6NXePPU6
TLSH
T178120C35AC785C6B5EE26941F08335135FA59177EEC93F91E5EC2E1C02EF65C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 07f5fbfd00f031eb9f2fc59051fe471677e07620ef68da48670d166069f18efc
MD5 abe0320b6015825b712e006c6b0c3891
SHA1 27b9dd582eac2048dbe0e26934a4e336d49419bb
SHA512 d763163d4c4c20001ffc82ba073570b430b3c5aba4aafe570836022046fac4fb3c874f156432cb84f7dc2cedc38392f36c6ecb9c4c3f6a00df177035129dbb39
SSDEEP 192:JONWS6v+YLNQmiUyBoZh+CGX+FdeNNmus8pU6:JONT6vz/7Zh+C9d6NIQU6
TLSH
T17502E935AD382C6B9EF2AE05F48737135FE41177E9962B94D9E82E1C01D765C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b67dbc05609d82477fe1cf59e725808c7cfe84754117d4b358068a82169101ba
MD5 b3fe38aed0610d97056249a652a4dc32
SHA1 7a60ae7d2e476954e85b4febcdcf1d55d6b552c4
SHA512 0fa7c4f27c9380805dda7883f5bfdb67971ed582e51c9be6b3c0fc5854f80918401df1684e64868306e63bb4e9b139166b40be8cd7e8ccb1871881e5e20fbba2
SSDEEP 192:WLsNNHQPQi+YLeCnQmiU1A2T4e+CGX+FdeNNkGQN9hJilq+UI:8sNNHYJziS5ce+C9d6NXeQPUI
TLSH
T123320935AC286C6B5EE2A641F0473A03AFB45137DEC93F94D6EC5E0D02DB69C234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

097d74b9-0582-4c9e-9e0b-4c39af033992.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\097d74b9-0582-4c9e-9e0b-4c39af033992.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 06066fa8e8f71d7b1589502c2acdc9f712f67ebea55dd357c6ef62dbc467fc04
MD5 1624d7a80d65104359c43e521a9521ca
SHA1 f49c003ac0e10a184a365b84b73085a64d7c1ef5
SHA512 27973af14b64ce392ae3ca1cbea48311f6e446b68bc79fb25675a2ae30a8169cbd3af3d2c038814620130a31703952e7ba233cc78f58b3f512a541604c30f883
TLSH
T11E41F859B6EE1148B3B76E565BF6A56D487FBC372E06845D00150D8E4A62A00C8B2B37
MD5 SHA1 SHA512 TLSH

Submit Download