50353bd76b5655ce298dde9b2ba991d3d25f3d048115ad9ae61f9ba52455866f

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130551922.html
Size 37KB
Sample260910-ahxesat1cx
SHA256 50353bd76b5655ce298dde9b2ba991d3d25f3d048115ad9ae61f9ba52455866f
MD5 3f8eca3edec83ca1e10ad727d9aa882b
SHA1 a0def13c8c456789e0beb2ac14f5b33ab57b6569
SHA512 91a524c4e201b1ce44152b78bb121656853279db911cf1b67273f33346f7adb3ddba6311ca61ea027d4b54a883bda05bb8252bbebaf2c5b3b745db13bb3bf862
SSDEEP 768:w4iko0NJhexTlzo8aalZkPGz4R4LCl0FbUoviL5XoACuwRzlAjXLakpWkiR3b3oc:xiktNJUxRzLaaYPGnClCYo6FWC9UiNCj
TLSH
T1650338D07AC0F41716CE0B33EF1E7AEAD46A9C631484B54393A8B64D34B9217C5A9EF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4204	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334728070158918"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{D14725D3-EC18-409B-9BEC-755EF7632037}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe
2296	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2500	2296	msedge.exe	87
PID 2296 wrote to memory of 4204	2296	msedge.exe	88
PID 2296 wrote to memory of 2588	2296	msedge.exe	89
PID 2296 wrote to memory of 2588	2296	msedge.exe	89
PID 2296 wrote to memory of 2588	2296	msedge.exe	89
PID 2296 wrote to memory of 2852	2296	msedge.exe	90
PID 2296 wrote to memory of 2852	2296	msedge.exe	90
PID 2296 wrote to memory of 4276	2296	msedge.exe	91
PID 2296 wrote to memory of 4664	2296	msedge.exe	92
PID 2296 wrote to memory of 4276	2296	msedge.exe	91
PID 2296 wrote to memory of 4276	2296	msedge.exe	91
PID 2296 wrote to memory of 4664	2296	msedge.exe	92
PID 2296 wrote to memory of 4664	2296	msedge.exe	92
PID 2296 wrote to memory of 2300	2296	msedge.exe	94
PID 2296 wrote to memory of 1712	2296	msedge.exe	95
PID 2296 wrote to memory of 2300	2296	msedge.exe	94
PID 2296 wrote to memory of 2300	2296	msedge.exe	94
PID 2296 wrote to memory of 1712	2296	msedge.exe	95
PID 2296 wrote to memory of 1712	2296	msedge.exe	95
PID 2296 wrote to memory of 4740	2296	msedge.exe	99
PID 2296 wrote to memory of 1192	2296	msedge.exe	100
PID 2296 wrote to memory of 4740	2296	msedge.exe	99
PID 2296 wrote to memory of 1192	2296	msedge.exe	100
PID 2296 wrote to memory of 2968	2296	msedge.exe	102
PID 2296 wrote to memory of 4464	2296	msedge.exe	114
PID 2296 wrote to memory of 4676	2296	msedge.exe	115
PID 2296 wrote to memory of 2220	2296	msedge.exe	116
PID 2296 wrote to memory of 4904	2296	msedge.exe	119
PID 2296 wrote to memory of 4904	2296	msedge.exe	119
PID 2296 wrote to memory of 5100	2296	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130551922.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1700,i,1072919870870766453,18376516563144357100,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,3280229266659241034,7790970300869753883,262144 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,14532558683217435134,8027256476081500935,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,8926790498002065741,16038835648301060574,2097152 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,155048558535322778,14476532032359094361,2097152 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,11009783311946029613,11723217687920421915,2097152 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,9223102655567266942,7948926784898423161,2097152 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1397624393826242494,10395091447699186351,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,2709925565477936792,10963545701712496905,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5026255410692947941,13640823713032884783,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5026255410692947941,13640823713032884783,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,15395065320479475678,10590740580577839917,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,11753108725272438460,11820170703853567976,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,14882204085269465228,1352573784913508518,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,5727471412492013225,10166239895407924254,524288 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2132,i,13124330646999278405,5169734275990836848,262144 --field-trial-handle=2344,i,1550290530992426650,12088427692660222729,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ddb06a80b2e8858da60fa0f5fc5809fbf19a98f30cd654c15984b5bf5c45b796
MD5 c6f522147f5d745a902273ef6538d739
SHA1 f8ecc157875aa316205a3b9f670ae7c8261697a9
SHA512 5db7f285ef71cd08b163d13fa89f8a9ff9c7b334712e9bd7d80a1b8f67b9d7f3aa9b7a1f8d4a8d85b1c535df4aad3c567dfbd490f7ebe2e3cd728d8b26253eea
TLSH
T13461C6750B10C4ECE79031B098D932927872DDEAF4834E4670B35EB1FA04F4149EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a9aadc2409b1c46e19e57871ef99a57e86048fa5e7ee0b549bdde58cb6395bbf
MD5 afc1dd109b0f80dd68df22dfbc5da9a4
SHA1 468f7c92873a5dcb274cb4a31d165e32cf0ddf50
SHA512 28cb01d8025e70d8845fb786f046117bfe12159efa8c06179e4b2693e73f9c1485c416e6efb146c719d002307179827519ea212498b45f88149ae837661fccc1
TLSH
T140117DB3C3D585AEC90156F05A24AE2BDE1D0916821C7C1995D4FF6BD3F3075E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8920d57c10118c56f111136bc77889f2706c761b315338dcfe6b37741636fe1b
MD5 6f8288054609303e8c39bf65e5655a4c
SHA1 6489c93a156d11f1c11e6b81ec39d3d0992fdd46
SHA512 21b13bfeaf74123cab83cca4d54bffe96605ead78358328d2a8e13a85a18fb7b46cf1a5798e64b2658768544337c0d1f4c4530b1a821fb84c217ab6382e2ea8d
SSDEEP 192:sxZSRWW1/ftsL3VXIdpdkHW6+WNGYvr61zDIgrJ:sxZS/1/ftsL+SHbGBP9
TLSH
T1BD22B7156E28A97B8CCBD30DBB25BF53D6F9503261941E98EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fec19ffba1a30134b074f7a85afa1613a07a92f14738180e2cc34518c2a98c6d
MD5 eec1384660a94aa7cce2f696fae1f370
SHA1 920156040518e54862a84c07e368d50848d12d75
SHA512 f1c0269b82daf8ea5e49a93391b7f86f9939b50485056fabeaac0bea695142273cf0723f97a15797ddf94d5836230aedef96f09bffb2a61cedd9950624fe1926
SSDEEP 192:sxZSRWW1/ftsS3VXIdpHkHW6+WNGYvMFWzDIg5IJ:sxZS/1/ftsS+EHbGaP2
TLSH
T14022B7166E38697B8CC7E31DBA15BF53E2F9503261901E98AAFC961C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e2f1963f129b7193c9090af6004f795357afb56a3fd2e253b5209707f45553f8
MD5 6386bf9a949b7779b59d18860c3668a5
SHA1 7f00fd5607d24b42458f3fadaa4aa2638d177ddc
SHA512 4865ab0704d866fa4064af9120a0cee4f798660e60220c4002444f6f822e5294a70313442f4a9910727bb2fc6071a270c3ef6bc9437744ffec799e18a406b558
SSDEEP 192:sxZSRWW1/ftsS3VXIdpdkHW6+WNGYvte1zDIg5IJ:sxZS/1/ftsS+SHbGZP2
TLSH
T11322B6156E28697B8CCBE30DBB15BF53E6F9503261941E98AAFC861C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cfb7f985fdcaa8d68506f3667f134a8d537da2599c792f29a67c0b213beb14a9
MD5 4b52fe17883e16fe24df09d4b119e7d8
SHA1 a1bfe34686dec31c183c20fce121e8c741753a14
SHA512 d9628df108ca76d497e925ea77e45e937def8ee40dd1c66d6f47ab5c258f12b27fd33fea1ebe4078d05a2bdfbad684cda1ee8e2fbf0eb6f4ee965b77e6a07be8
SSDEEP 192:sxZSRWW1/ftse3VXIdpdkHW6+WNGYvr61zDIg5iJ:sxZS/1/ftse+SHbGBP8
TLSH
T17B22B6156E28697B8CCBD30DBB15BF53D6F9503261941E98EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 aa78e3756dfa8a6d92765d05781be3e7d8556ae9ff016df77a40483ad6d21872
MD5 b10423eb172df79a293b04da357b2b98
SHA1 c623b15f061eae9c347db48f885c1c1ce7213952
SHA512 ad409e624cd6a878a3fae96e5812ded12180a24195db01fd915bd8627593130e180c5b56ec83ca179a8f60f0993267285a1dfb23a27147cbda82968a26d57cc9
SSDEEP 768:NYee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pbOrof:NYee3rxWvhffnu1jatcL88bFf
TLSH
T16FC2FA3B640CCB7E4F800AADDC5A6F977FA802C7A7549D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 edd1fa4bf37818485dd049cc849fb6a1c4ab98668fcf16a22add1363ecff3a8e
MD5 0aed2587f587b42327ad7e82cd45e718
SHA1 6e4bb37ce002f46d2abbac625e6325fc6ea723cb
SHA512 afc13c1bf82e44331f97e856eaf3f626d97ec206be1eb32899c878d157d94a7be75bc0047da43b3db8db2d71873baeacafcc97661d4c044a3f334e3775e4910d
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09XO:KYH+Kggm+ruKAUyyQgKJumO
TLSH
T18D910F16743A02023C7D3C8CB2A596360F4631A37568A9AF7FB804A25E67E114EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03cb4b14-d8c0-4461-8d1c-e136726d350d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\03cb4b14-d8c0-4461-8d1c-e136726d350d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 0d5eaba3040235d3052184d983e9e0f30c5ede04e216f4217563a8e97cb3f19e
MD5 8bc2600faeeacd2d9b01b190b684f55f
SHA1 3ae0a492399c3bf2a2caaf9b6ff0ab51ef2447c0
SHA512 c201f545874182ec5e1eeb36844a81e3abf84aa5eb367cdb9bdce92f010407ff9e8b48a02a6ae4441c1638e1719772bf8627c36fbde963190dc5e52ebf7d436f
SSDEEP 192:uUFm+xasuheOwQxMGsNzda0QN/K8M7H67QmiU19gM4MTAn+FdLQx6ptFd3EY8z13:AZcIhsNz1s/Y7atwDkdcxMdUR2/C
TLSH
T1D2627D716C786C77A9F3B686F44A36035FF4912796C46A90F5EE6B1D00DA6BC030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a491fb6935012ee3aa74f4ca3f3725c43b102290927c45e459690df00ae908f1
MD5 a6ea3ba2b3ee4d18cc2eca4f9bdb6091
SHA1 bdb9ecc71bcc6dec9f227618694233b92117dd06
SHA512 7c6fcbf646d756cbd67acb1d9cb5bc9c27dfadfdef6f06c8c5ae4fcee5a7c31a4b59ef668c325fe3e68f3758e75942ef818ad5647e159ad4ff9c31c2aab819c0
SSDEEP 384:viFiZcIKsNN8TUNTUlIl4s/Y7atwDkdcxMdUb2/C:6FQKswg5/Y/InUb2/C
TLSH
T17A825C735C64997BAEB7AB85F54A32038EF45167D6C4AAA0F3DD5B1D009B1AC030BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 c963058b5afd5e5f8f66c05cc739e103128073fe8aa5ed1b170c68017cd717e8
MD5 1e1434d9851497f52a7f3ac5decdf7b1
SHA1 9aa2cf47acdba23c07a0d42923a41450068b4f0c
SHA512 92d19d4f2d83d13add218f4102efc8b0098d7386d6fd5f879fc5dd30182b0b029db623d71a600089a4c62ce82b5f27e88895dc13821a22b2a5c76fb40bb91a02
SSDEEP 192:uRFm+xasuheOwQxMGsNzma0QN/K8M7H67QmiU19gM4MTAn+FdLQx6ptFd3EY8z13:pZcIhsNz4s/Y7atwDkdcxMdUR2/C
TLSH
T164626D715C746C7799F3B686F44A36035EF4912796C46A90B6EE6B1D00DA6BC030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 aca144924827a14d8e94cd0c05b101c5ae21afcc7f52e53b8f4599940ae937f7
MD5 47bfa7c6df4e4b73cfb82f4f8577f668
SHA1 7d78601b1d534485b2db440ecd387b2833e75a0f
SHA512 acc7417fbed2739a1458af87c396772e45ee8fcd6e08861dbc3704d4b30c611ecf2588527708fbae0c1a131171dafc421a2bcd7064e601996f046e19a241872b
SSDEEP 192:tON+6vMcPQmiUyatRhTAn+FdLQx6ptFd3EY80I6qOU/u:tON+6UcRxR7dcxMdU92U/u
TLSH
T1F0121C72AC645C279EA3B586F08B36175EF0926BDAC46B90F6DD2F1C01DB66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83888e7b64e1d1d5ac5e3fe976854c88c413aaa5327ddc57b861280a06f6e4b3
MD5 fe322516d27a7c5dfeba39038b4f91a2
SHA1 87f01a477c2e4fdd119764f19bf4a3c0600dbef1
SHA512 0c53d4c26765093c5fe938f3aa9ab174789803163fbf8591023847d1d42fa0a0cf586f6f60b3ee2d8337636bbbd1e60f3a99377842fe748ea274468f3ef84553
SSDEEP 192:lONb6vMtPQmiUydtThTAn+FdLQx6/847yMU/u:lONb6UtRcT7dcxEfU/u
TLSH
T1F9021835AC786C7BEAB3AE46F08A37171FE4116FA9D01B54EAE82F1C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d9f84fad33bfb55d1321a6883f618d1f3ba3adef8fdeadef868921e361d352ea
MD5 8d690349053531973e9cc1e6a0f954b0
SHA1 db3b96890e06dbfa700b31cee44614dcce413e99
SHA512 fb53f0d7cb7e1c49dfbe53447d2dfaf6bb3a7d90559a7807acf85d66356b39791ee369bd8a5249de01d61a3a6064ad0ef2f9ab28f8ee82da280bca45cd447565
TLSH
T106411858B6ED1108B3B77E5AAFF6A46D847F7C672E47945D10010D4E0A23E40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download