052324ddf4e9efffa4e8d0e8caab81718772aa5b64872d7a5791c1385cb63eb6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 148KB
Sample260910-pl98dabr5x
SHA256 052324ddf4e9efffa4e8d0e8caab81718772aa5b64872d7a5791c1385cb63eb6
MD5 2362d4fb2a3709065315cd389fff6661
SHA1 89acb4192634b8c0236bb1d64dbb7fa7ede60c39
SHA512 a4b1d7ef2dd77f9f6eef6ec94b0aabbaf223d7fb82f3af6dcb2ef199af49a4f9cd1ad19b3036af442f4f69d7e6d81bac07b55e065ae52ec8000d54b83103f68b
SSDEEP 1536:0VZA8+3o6NHmi20gsqHdZR5LAfLb2SFjOHkeG/luoeHGqdo4dXTiqh185gpbL593:NveG/luoeHGqu4dXTi01BpbNcv3Uuu
TLSH
T1B1E31826316511358973B3F9ABABC70EFA255117E600C318BEAC83415FFAD60956BFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3456	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335167818331806"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{433BA861-6EB0-4E87-A0DF-1013589153FC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
740	msedge.exe
740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 408 wrote to memory of 4880	408	msedge.exe	87
PID 408 wrote to memory of 3456	408	msedge.exe	88
PID 408 wrote to memory of 4476	408	msedge.exe	89
PID 408 wrote to memory of 4476	408	msedge.exe	89
PID 408 wrote to memory of 4476	408	msedge.exe	89
PID 408 wrote to memory of 4440	408	msedge.exe	90
PID 408 wrote to memory of 4440	408	msedge.exe	90
PID 408 wrote to memory of 740	408	msedge.exe	92
PID 408 wrote to memory of 5004	408	msedge.exe	93
PID 408 wrote to memory of 740	408	msedge.exe	92
PID 408 wrote to memory of 740	408	msedge.exe	92
PID 408 wrote to memory of 5004	408	msedge.exe	93
PID 408 wrote to memory of 5004	408	msedge.exe	93
PID 408 wrote to memory of 4052	408	msedge.exe	94
PID 408 wrote to memory of 888	408	msedge.exe	95
PID 408 wrote to memory of 4052	408	msedge.exe	94
PID 408 wrote to memory of 4052	408	msedge.exe	94
PID 408 wrote to memory of 888	408	msedge.exe	95
PID 408 wrote to memory of 888	408	msedge.exe	95
PID 408 wrote to memory of 4348	408	msedge.exe	99
PID 408 wrote to memory of 3572	408	msedge.exe	98
PID 408 wrote to memory of 4348	408	msedge.exe	99
PID 408 wrote to memory of 3572	408	msedge.exe	98
PID 408 wrote to memory of 3068	408	msedge.exe	101
PID 408 wrote to memory of 532	408	msedge.exe	106
PID 408 wrote to memory of 3100	408	msedge.exe	107
PID 408 wrote to memory of 3056	408	msedge.exe	108
PID 408 wrote to memory of 4128	408	msedge.exe	116
PID 408 wrote to memory of 4128	408	msedge.exe	116
PID 408 wrote to memory of 740	408	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff81ad6c188,0x7ff81ad6c194,0x7ff81ad6c1a0
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,2685883117498033192,2480892854923774393,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,16055659813734417982,8339557474124397596,262144 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,3380320970906633430,7244116964423162774,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10710013140394057095,13169518686260793281,2097152 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,1479252848827994754,11796668454166745028,2097152 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,2349320129583214321,424151098358175702,2097152 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,6904724826622825225,16695587838929005192,2097152 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,6315820714184454178,1086319671266284167,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,2333150618361968617,5420636447491175416,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4771648190775753768,17728626639204242965,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4771648190775753768,17728626639204242965,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,8514872980721303276,2919365275399463181,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,9848718938289165604,14952893847398431649,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,13451046654468406901,5978763296592508383,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,9642077964841050603,16941280645083774073,524288 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=752,i,6582384034909294588,11670883891536490460,262144 --field-trial-handle=2272,i,6680000510190152106,17575041832789653959,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 affce5f2b422baad036bac8771780390925d0a6be8efcf72b8f81b8a25d13394
MD5 c42f4d40af7cd595e71b04fe58c1c96c
SHA1 d227cd445d19c27fee469f4daf09a5cffdcd6ba7
SHA512 9d4507f32c9a555ae88e0d5e82f9e2c32156fc3e3cea7a45adda6d71bc6c3da08398d0dc54da878d5e1f21d8c41e06048e9f935d90a40055a15985ae1f226dca
TLSH
T1DD712AB4012E26ACE7965F31C0DE42913771AAFAFD3B5F97EC9260FED9017604829038
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f6d89df11f5a36ef5a4a6a59172f15a90f4304dcf9ff9bc6dc7ae78fc47ee8e2
MD5 2f09d520d7dc45e53cfdcc5b5b6f7708
SHA1 6f3a857fa3102764ab02c01474ea6bc460650b38
SHA512 b832fa4d212f38fde8adbfbc9d23152e8fb81a0c3bcf71f972b4503db961e8408874d3079e11359e8eff44605f07e7d11f2aebfc4e496f642a551cbc14980994
TLSH
T196117DF3C7D5956E891116F05A24AE1BCE2D0A05421C7C1A85D4EF2B93E3475D10259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 668476bf65679841d2f36d8f6185936cc5b2e01d4e9d807bb2ee782a37cf86eb
MD5 6b1e721d30e395048564d3bd1b9c168e
SHA1 7ef6a1422450ab358f6fc27d0a5ad28ccebfffa2
SHA512 ef62c39d7f5498a7da1934e8cb00eeb566c2804aa6ec9a4bef81122c06d241d4bb6ef6105db4be033e9258a80a2c1efcbb26e7ecbe6fac72dbf73abda39ab198
SSDEEP 192:sxZjRByM/jK1Ml8MW3/fhsobVRIdpdVHW6+WNGYvreWg+IgrJ:sxZjfu3/fhso0DHbGOX9
TLSH
T19A42D612AA34697BCCDBD20DFA45BF53D6F9547296900E44A9FCCA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 839361e005a0b80adedfd8cc718c5eb6bd6e51456b873fff393ff33305df90b5
MD5 ee2a74d3351b1ba5dd8eed0ec06bd814
SHA1 f19426a4accf6fa0f687835336d7f4ca016c0d99
SHA512 5e7cc7aeb6fbdc4fdeb24b45a5cd4ab86205742c374bf26e4c63fd49eee40e24c49bf693172e8b9ac2f2d3798489071d48200f60c4bc12303892704354701481
SSDEEP 192:sxZjRByM/jK1Ml8UQMW3/fhsvbVRIdpHVHW6+WNGYvzB+g+Ig5rJ:sxZjfq33/fhsv01HbG/Xv
TLSH
T17652F712AA34A977CCDBD20DFA45BF53D6F9447296900E44A9FCCA1C00E6BED621781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bbe9672d9c19ab158e30ccaf1ede01609b7f35f356fcb1cfca227e1446f06aef
MD5 bafc400d47c5ddf7ec6277817afa0e72
SHA1 5d38501be444efaba0c7fae5e68c4090811c7caa
SHA512 fb4b7525c2b8091d5cd0a62af2834814a2a428bbe08f47d0a15b5d01e0c0cb3a366ab11a8c5eb63f96c9de036561b81e35d6c66f7c0db25aecfe97dc9a5167b3
SSDEEP 768:+EseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppxroac:+EseJ3xWvhfynu1jaVcL88pK1
TLSH
T15AD20B2B280CCB7E4F844E6DEC266F966EE801CB5B984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 45f8d2160f0ecb02c8d74c9c744cbc60d1141c74b3a4cbd4eb706a6dd755647b
MD5 ed00e099d9afbcac64a1a7091e4d3286
SHA1 5d7090176f3ded44cdb27cf88814010bbc0eed3a
SHA512 f83ae9b94934906c3995ff81e86656f943670263505399dd19e4f3a80c14d6d50dc2e6dbcf706f948f06e681368d76f6edbd00913c2add658f55196ebc8361cf
SSDEEP 96:KYH+KggmC8gKZWiKK0KrCq2JyKSclh2Kisyg:49TT33pfVg
TLSH
T1A5D12746703F420638BD2858A2A3DA3A8E4271A33418E5FF7B7900A15E67E155EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac07eadb-6ebb-481f-ad44-24d7031d921f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ac07eadb-6ebb-481f-ad44-24d7031d921f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 29f39c0012a0bc3eb5ab68b4e6a8e64c9d7ac36641fb4643ee4e159483b88888
MD5 7cb7907fbe86eaea207e7198321829f7
SHA1 32507241dc4e07dca010130ab9b1a031e92b51f9
SHA512 18fadac9280753208af5489d258072ff291a1635ef40e5bd7585996c5b216aa7b2e7febde144e028f1f7f2525eb39323516e27176d0db385d10ee2db9df3c46e
SSDEEP 192:uCm+xasuheOwQxMGsNodQi/pM7UyZQmiU1zUU6B4MTZS+FdLK7Fd3Er8z17qjRRs:+ZcIhsNodV/C7D3iU6uGdwdUIORRs
TLSH
T1B5625C725CB86C7BADE3B145F54A36038FF8C027EAC45B54E6EDAF1D01DA6A81307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ed063b78550bd5b5b044643695926f33a8aaee501b31f4d32bb291352813f272
MD5 4423a1d69558ec0c2c136a13ee9d7ebd
SHA1 05573d17e3686e6e75d9c6ca4987b1c7f487f820
SHA512 becfc72e821012dde3a94f57371ab8978a62998ccbda28d72af543cf01e6e4cfc6ac7242cf52f9fd66e03472ce17db72f0170f3e02d86cb86c05c63420c2fd35
SSDEEP 384:niFiZcIRsNY8TUNTUlIloV/C7D3iU6uGdwdUwORRs:iFQR1wg6/CSU+UUwKRs
TLSH
T11D823B735CA8997BADF7BA85F54A32038FF48067DAC4AA50F7DD9E1D009A1AC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af84bfab99be460c2620744defc6755b111852954ab06ff616920dfbc21f6d24
MD5 c8f03be6dea4cc4569546c36c56c4aa4
SHA1 eed1622d06cf5676e5998ec1aa3e2832796fed7f
SHA512 46616f552d4bf0c4b6fbb49d939b197fc0ba5901d32c1148de5e7b662a3c8026b4f471f3fe3d179f155361c58073373675e82062d7b4333ae4f32921a8cded0d
SSDEEP 192:lONnZ6vMtPQmiUy+UTThTZS+FdLF847vSU/u:lONnZ6UtRCTTFdJ6U/u
TLSH
T122020735AC786C6BEAB3AD46F48A37175FA4507BEAD01B50EAE86F1C00D765C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ea9c3074a6c069f7c19ddb7403639a9836babe03c1b7a16c1461df41ad5dbcfc
MD5 4feff8c18c0c13d7f298fa202747dfd2
SHA1 ab9bc51d2de3647ba619a39944c36a5c6c64dad4
SHA512 56dba07d1adcca19a9d63a3acb84a9590c0a82e5f4de3f2714c87d814fd34bff93b27086178c49e96775c36338128e43e9f880a144bba5d78a6484acc3f422ad
SSDEEP 192:uKm+xasuheOwQxMGsNooQi/pM7UyZQmiU1zUU6B4MTZS+FdLK7Fd3Er8z17qjRRs:iZcIhsNooV/C7D3iU6uGdwdUIORRs
TLSH
T1F7625C725C786C7BADE3B145F54A36039FF8C027EAC45B50E6EDAF1E01DA6A81307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 201171378e78c50ab8588d4b994849de0d077df6869f5c35776f80c9d725e87d
MD5 6761086524a46270dfbc85e2a893d042
SHA1 e81e2929ecb088745839ffab8008c2bdc7e20c62
SHA512 9859bcddbd878ddcca753a5e313dfc7f7612ee8885b6dfb872e2da401ee563546ce11bcb967ee0b4db8f58811412558e405d700332979115bcb1d7390430108d
SSDEEP 192:aONp6vMcPQmiUySUTthTZS+FdLK7Fd3Et80I7qjRU/u:aONp6UcR0TtFdwdUSORU/u
TLSH
T1E5122B72AC746C2BAE93B585F48A36075FB0816BEEC46B50E6DD6F1C01DA66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

889a3357-477e-43fc-a5d7-ca904b56422a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\889a3357-477e-43fc-a5d7-ca904b56422a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 da4ce965dc5a794dd568e340002bd7e86a714b9bedfaaf974f24f95af39fc1cc
MD5 9d76412f22edb795762e384d8d25a393
SHA1 6e12160cc91ce63609664470e9b2143169114856
SHA512 92f2e91ce52abf01301799a5e3da9c43941ba1b16fd305deb103aaae7c97a8d31fd7d2c43aa574326a90cab991d76bb481bd296e7c4d1d725f7e465338232465
TLSH
T121411858BAE91148B3B73E1AAFF6A86E487AB9771F46D55D00010E4E0623E41CDB1733
MD5 SHA1 SHA512 TLSH

Submit Download