23a9620e66853e1351d2acb0c7983658a2d6856cb41d1f1ef1336b9071bb84ec

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260910-al1llssfpf
SHA256 23a9620e66853e1351d2acb0c7983658a2d6856cb41d1f1ef1336b9071bb84ec
MD5 de67289c099aca73830e859298ba48ba
SHA1 a7321287f54add9216c561e731a251cb6d6d69e6
SHA512 0ac7fa8b392b8aa304c41ab8232b5f0c7a362ec8360036e137bdc06b20ee11df91c0614970587412d587ca29b119b3bb157bcef1ed9af97212b2ecd4cb64a649
TLSH
T12071E8677705AD2CBA63418D8AFBFA0C94C4A54781608D53BADAF4EF0AC4F916453163
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334732197776855"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B46E31BF-3569-4FA1-B64E-FC61F4E0D64A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
384	msedge.exe
384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4736 wrote to memory of 848	4736	msedge.exe	86
PID 4736 wrote to memory of 3568	4736	msedge.exe	87
PID 4736 wrote to memory of 2904	4736	msedge.exe	88
PID 4736 wrote to memory of 2904	4736	msedge.exe	88
PID 4736 wrote to memory of 2904	4736	msedge.exe	88
PID 4736 wrote to memory of 4912	4736	msedge.exe	89
PID 4736 wrote to memory of 4912	4736	msedge.exe	89
PID 4736 wrote to memory of 3676	4736	msedge.exe	91
PID 4736 wrote to memory of 3676	4736	msedge.exe	91
PID 4736 wrote to memory of 3676	4736	msedge.exe	91
PID 4736 wrote to memory of 1044	4736	msedge.exe	92
PID 4736 wrote to memory of 1044	4736	msedge.exe	92
PID 4736 wrote to memory of 1044	4736	msedge.exe	92
PID 4736 wrote to memory of 980	4736	msedge.exe	93
PID 4736 wrote to memory of 980	4736	msedge.exe	93
PID 4736 wrote to memory of 980	4736	msedge.exe	93
PID 4736 wrote to memory of 2172	4736	msedge.exe	94
PID 4736 wrote to memory of 2172	4736	msedge.exe	94
PID 4736 wrote to memory of 2172	4736	msedge.exe	94
PID 4736 wrote to memory of 4720	4736	msedge.exe	99
PID 4736 wrote to memory of 4720	4736	msedge.exe	99
PID 4736 wrote to memory of 4620	4736	msedge.exe	98
PID 4736 wrote to memory of 4620	4736	msedge.exe	98
PID 4736 wrote to memory of 1444	4736	msedge.exe	101
PID 4736 wrote to memory of 1700	4736	msedge.exe	113
PID 4736 wrote to memory of 4004	4736	msedge.exe	114
PID 4736 wrote to memory of 2224	4736	msedge.exe	115
PID 4736 wrote to memory of 2328	4736	msedge.exe	117
PID 4736 wrote to memory of 2328	4736	msedge.exe	117
PID 4736 wrote to memory of 384	4736	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ff90992c188,0x7ff90992c194,0x7ff90992c1a0
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,11687897533708382987,15992745846200282286,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,14728992638530895898,18122965418123340719,262144 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,2196413762902830452,13894388871940893176,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5303343011588462179,16076036202830265295,2097152 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,15032299390737607126,17153856852009924944,2097152 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,9718754236410779896,10603725642328003182,2097152 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,17249930080252402702,15600654977997821802,2097152 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,10801842645311684952,15952951419916702694,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11953366965250585124,12277469317080188092,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,3246840536340752709,16636556428075862155,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,3246840536340752709,16636556428075862155,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,13839682363881729647,155822175369468096,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,5805160669844844136,17693709758604813882,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,2658836098026437673,4990450802450126129,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,7420319865207087191,18317470703410968868,524288 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2096,i,5171421452768345829,11161583464352044794,262144 --field-trial-handle=2420,i,5576861833216525299,16109379908463141733,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 725f340a609ba242b41033cb621c591cfa71969639fdbb8c6cad2a0a8d347a46
MD5 3509cd1ddf18600405e259deab0804ee
SHA1 fa8701b3f59bdea55a9f9bf027951a0d0477356e
SHA512 54346464caf29e2dc9d0edf6bc5615fc03ae1f169019d4df1fec7462aeb9fe1a45d2f2c2f8b6a8c6ad29a85d306351427be21e3be41af23be6715c406e15b9ff
TLSH
T15C714C360087DCAEE71D00706CD181F334718DEAF9471E9B91BC2EB41A17B63B22B588
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589c7a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589c7a.TMP
Size 3KB
SHA256 dfe71b9d8a7625d55d912cc97db556f064bf90eb13f694105775df81c4128fe3
MD5 5311f14b5b9625b3dc17370b4503db72
SHA1 b7a188d07c0f5e6d8946024bf87cdd6054ebb974
SHA512 bf373edcc1b9a19075f3ebea0f7826a5b1ba335bcdf86a52b01fffd41aac16dc0e22dd47f6bb74fdcc326cfb079da015a1c1dc14cdb87f70e8d9854bac5ba69f
TLSH
T1C6713B360087DCAEEB1D00706CD181F334718DEAF9475E9B91BC2EB41A16B63B22B588
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 67358234a4dce1d70f39175d473fb81c12ea03b53bf2eaa143e18c6504a09fb2
MD5 06554027258f32d56d2e3d9626c9b367
SHA1 691f7648401b732c996530395d7ae0119bf13b87
SHA512 19efb500cc0dc3b0640c1de09f3091fc949d834e71bde5aefbe4bfa16553c364e076c40c9c5877a155e3dc581754fc30ab8cdd8557b617419f33af1f89eeecaf
TLSH
T1CA117DF3C7E585AE890116F05A24AE1BCE1D0506422C7D1585D4FF2793E3475E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4888e9d8d77db59709ce8d0c8af1e60330021f1d605093f4793f678a969e4416
MD5 97c9f80edf54c2654438b512611ceb7c
SHA1 900049a091128f44aff43c8f80bec71bba633bb4
SHA512 27afb3001bf8aad62f30d241967da1418790eb37a2bab2be9653491640a6dff4349eaa7ab9dabfe90be19bd09c4bc15f7798a83d1db7b8ae772b80fc6915109c
SSDEEP 192:sxZNRDW1/fbszPcIdpdlHW6+WNGYzQhn9yIgrJ:sxZNg1/fbsztzHbGXS9
TLSH
T1EB22C6526E38A87B8CC7D21DBB15BF53E6F9103291D11E48AAFD861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 553edcbb813f6eab0e7a21b3ffa46b8314e0360d39e1f638993be3fc39787a07
MD5 d041591898923e48a21537f400d75b3a
SHA1 5512280e1ec4874103bb39c29b4554cda2f0b075
SHA512 d52a99c0f9a6f80194f29c984df47273b8363ee876218bdca5cdc8f800c5aee13fdebdde7084eaf217e3ce20ac12e7b8f30e01e00d673c843c8befcbed86ea96
SSDEEP 192:sxZNRDW1/fbsMPcIdpHlHW6+WNGYz/En9yIg5qJ:sxZNg1/fbsMtFHbGnS4
TLSH
T17222B6526E38697B8CC7E21DBB15BF53E6F9503291911E48A6FD861C05F7BCE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 301ecbec555254dfb57377ad3be88b49e9500d746231d7b93c28c68ae41ccf77
MD5 0dfcc2d0861859ee6066bee123aff697
SHA1 2e1cb61875d341d7e3fb4f0e0b406b009bff47fb
SHA512 53e8d93f481d6a3dc6ea39ff39848abe04b2975f6920a8ff59cabef363131811bdce43292bc94116ef60a3f9d4824d1b0cf54a9f39f28cf1c10700fab9015e0b
SSDEEP 192:sxZNRDW1/fbsMPcIdpdlHW6+WNGYzCbn9yIg5qJ:sxZNg1/fbsMtzHbGlS4
TLSH
T1C422B6526E28697B8CC7E21DBB15BF53E6F9503291911E48A6FD861C05F7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fba3e4ce2e7df7748dbde1ce21041a62a4136221b1a83daaeb031674cc2030de
MD5 688ab6dd6cf735e36fad28be1483c277
SHA1 651850cb6cc62a12d8064f6f0071bcdde9bf4540
SHA512 52c2cd2baa6f83c775db21300b98a63ffd1d37d4b85720fdfd144d16bc6882d08e86ca8ea2317ab1b9d2d5b4ab4eece00bca8cd60d839d4b1077471aae2c905b
SSDEEP 192:sxZNRDW1/fbsxPcIdpdlHW6+WNGYzQhn9yIg5IJ:sxZNg1/fbsxtzHbGXSq
TLSH
T1CA22B6526E38A97B8CC7D21DBB15BF53E6F9503291911E48AAFD861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 23f7eb94f32f0bc91c25e75e16af8ab4c3deda679d9e107e1b0efce926d50dd1
MD5 6919220b8af29db6fa113694e30b866d
SHA1 9ed26b8aa11381472e09a4b695ac5bc7823ed76f
SHA512 66e6875984e8649f310d60ed660ad566524e0e38e2794a4f8e974004cf3f5be179e19610b70b739dca0e4d16f42fded3bfbf0cd4d06a257e7216b152c20aa7cf
SSDEEP 768:ikk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBQroyUYr:ikk7u70WvqiEau1jai5LA3B7ar
TLSH
T1BBC2FA3B740CCB7E4F801E9DAD566F973E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 30bed1525d0dfdbd830a5e6745b377ace0124478de23f898dab00eeb11aa836f
MD5 d140a894255bef93141932cd35d92353
SHA1 08dcff84b17b3ca9ec72ca0f33b8b4d1a451db4d
SHA512 f805edc0472dbc4b67aa6e5adfc4afa086571929a043882b0ae2c8ecd332ab6abbab7bb7df806711677f7b4e8b5202f5128ea1ef8e8218607278c68e441c2c11
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTvNIZKWcMGvIdKc0o/yllI1KWQl:KIbCKcvNSKWcJv+Kc0K+lWKWQl
TLSH
T128918815703B1201387E285CA355D62F6E4275633498A9AF3B681562CEA7E11CDFC4FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58015910-dfc0-4d1a-bbf2-ff80e269ce1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\58015910-dfc0-4d1a-bbf2-ff80e269ce1f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 85d157262c387f150bb188012aaa99424b27c379285b75104a5b21591b2d3e36
MD5 d4b500c22ed8fac75fed3f6f074154da
SHA1 3204e55ea732bce0f61cc8ac195724368ff8f0eb
SHA512 89b6ea0ba666a951e77ff46dceab003e866900f558d7f4dce7d71ca69719c57bf58e4bb7f13f7c0a8eb5fd50d535733fa5a98e490a2be11ff78da10d1b615795
SSDEEP 192:ujm+xasuheOwQxMGsNVaJCQLNt/1BbB7QmiU1jR9B4aGBPKIOCHrWTPN8dNKbqeT:pZcIhsNVrQnb3r9u7LCuK9sa+VY9Kot
TLSH
T10D828E725CB4AD7A59B7A381F98727034FB84167E2C86E4496DCAB0D01FE798131781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 0483198f5404f454a21f11b1c7822c2913f3d1fc4b59b5d413c3bdef6636151e
MD5 1a476aeff68a7a1adb4463fa48d02e83
SHA1 3707bb37bc8fd058f00d3df6eb9086c8c28406bf
SHA512 ff5db21e9101a4f2d3f902f40250af2c2a8979a031ac8c21402cbb44716e2630e250139b57c534ebafba44d982291bee1ded781064229243e7d7afe8e00f44cb
SSDEEP 384:g+iFiZcIbsNv8TUNTUlIlCQnb3r9u7LCbK9sa+VY9Kot:MFQbGwgpnvKaQhgKKu
TLSH
T1A6A26E735CA4D97EAEB79781FA8623038FF44167D5C4AA50E7DCAB0D01AB29C1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dc68c8d8fe8706609f03c598371244cbe5d69d4e3b92ab84497ea175e7ccd5b4
MD5 8120dd93646b2c987f8573aa406f2310
SHA1 12b3ea3ff0381ff9beb8a5681278699c517b80fb
SHA512 bac7bb4f288c265c2262016c2864733aa2c59631dde1868be2814566f91bdd5ffbdcb242816bb9c2a81327c2d10555529e13b7198e55ba99b3405385af1964eb
SSDEEP 192:MONx64BAQmiUyy16W5GBPKIOCHruaDdjU6:MONx6eAVsW8LL1U6
TLSH
T123020B39AC796C7B9EA2AE45F48637175FE4112BF6945B44EAE45B1C00E764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 85522831578f5ed7951ff698afa7377bac2a7ebd5f5bf0fa8ed6ce66f17da280
MD5 9a132e4c6b5061bf8206948090468617
SHA1 5921e954c53f719fed90c271314d534f97008fe5
SHA512 e612054ab6461055db30b1b88db20de77cdbaf37dcbe467eccc690a4edb4efbc2dea245124730d9a64ffb82f524455e6d741602fde5e7131561f77a6c976bcd6
SSDEEP 192:uHjm+xasuheOwQxMGsNVBJCQLNt/1BbB7QmiU1jR9B4aGBPKIOCHrWTPN8dNKbqE:oAZcIhsNVCQnb3r9u7LCuK9sa+VY9Kot
TLSH
T19B828E725C756D7A59B7A381F98723034FB84167E2C86E4496DCAB0D05FE798130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a09a820ab87fcb777b0c8dc0dbbe200678b1ad655c81c44f015128cc19e8dc06
MD5 826381d39eabf9fd5dcd0ff520fc318f
SHA1 248a8fdf158f1f178ac2e07ce1ef1032d98a5702
SHA512 a125c6c43e5d7b1b3a9ee0537a1ed34fa68efb77ffb640323d7d3a29d17fdf5719bece2d941be97aa06cbc53471288182b469aa41fbeb186c7da0fb4b3cab6f5
SSDEEP 192:4ONw64BvQmiUy46o5GBPKIOCHrWTPNnWwKbqeU6:4ONw6exUo8LCTK9U6
TLSH
T10B120B35ACB5AC6F5E92A540F4C632035FA4422BE6846F40EAEC6A1C01FF65C6307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b250694e-a54e-4474-b7bc-b3fafcd2d88b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b250694e-a54e-4474-b7bc-b3fafcd2d88b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 94d071d3064b1878c9d94d1b68a58fd1a096b91631d6258cdf138d474d8b937b
MD5 5c4bfc7d5cbdd9d8fce4916077262d5a
SHA1 4543f215e789ff541e4a3d06eac8bab7053050f4
SHA512 e7f9e77a566333e3ed4fd1ecc5dea565f496fc1aee8323fe312a1e2ddd1280366b50bcffd0b6efee3bce20d674b889cc4bcb85caf5148dcc83b3fef0e98d9570
TLSH
T13D411C58B6EA114CB3B76E1BABF7A96D487FB9332F06D49D10110E4F0662B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download