12dcfc9952b295815c21f06820472608bcd457f690add644760acde1d69c8ed4

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
skillstreaming-the-adolescent.html
Size 338KB
Sample260910-tzxawssdph
SHA256 12dcfc9952b295815c21f06820472608bcd457f690add644760acde1d69c8ed4
MD5 a9c9e4ba609cc812c75069d7fb3c6d42
SHA1 d49564d66d367d58c42551be464a084d4b31a17d
SHA512 42ff0079b2890a244bbb94ffe02c09d758b510221ffd9c829da714ed954ea1d34b0e95990784927c508c8b21ed46803a58095fc25a9db4ab9223d06179782897
SSDEEP 6144:4A49LO+SR64a1BcMH5GFxCNXFxCcVaQl9v:4a+SRTCis
TLSH
T13E740BE3D7B8283E236663ADF495B2C478598133E64C05E6FDFEA61C46C5F92127220D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3792	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335314298799574"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{33589272-E75D-41ED-8A92-D67DA717CD78}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 4328	4448	msedge.exe	86
PID 4448 wrote to memory of 3792	4448	msedge.exe	87
PID 4448 wrote to memory of 2320	4448	msedge.exe	88
PID 4448 wrote to memory of 2320	4448	msedge.exe	88
PID 4448 wrote to memory of 2320	4448	msedge.exe	88
PID 4448 wrote to memory of 1328	4448	msedge.exe	89
PID 4448 wrote to memory of 1328	4448	msedge.exe	89
PID 4448 wrote to memory of 3840	4448	msedge.exe	91
PID 4448 wrote to memory of 3840	4448	msedge.exe	91
PID 4448 wrote to memory of 3840	4448	msedge.exe	91
PID 4448 wrote to memory of 1472	4448	msedge.exe	92
PID 4448 wrote to memory of 1472	4448	msedge.exe	92
PID 4448 wrote to memory of 1472	4448	msedge.exe	92
PID 4448 wrote to memory of 1560	4448	msedge.exe	93
PID 4448 wrote to memory of 1888	4448	msedge.exe	94
PID 4448 wrote to memory of 1560	4448	msedge.exe	93
PID 4448 wrote to memory of 1560	4448	msedge.exe	93
PID 4448 wrote to memory of 1888	4448	msedge.exe	94
PID 4448 wrote to memory of 1888	4448	msedge.exe	94
PID 4448 wrote to memory of 4432	4448	msedge.exe	98
PID 4448 wrote to memory of 4888	4448	msedge.exe	99
PID 4448 wrote to memory of 4432	4448	msedge.exe	98
PID 4448 wrote to memory of 4888	4448	msedge.exe	99
PID 4448 wrote to memory of 4228	4448	msedge.exe	101
PID 4448 wrote to memory of 2364	4448	msedge.exe	104
PID 4448 wrote to memory of 660	4448	msedge.exe	105
PID 4448 wrote to memory of 416	4448	msedge.exe	106
PID 4448 wrote to memory of 4340	4448	msedge.exe	113
PID 4448 wrote to memory of 4340	4448	msedge.exe	113
PID 4448 wrote to memory of 4340	4448	msedge.exe	113
PID 4448 wrote to memory of 4388	4448	msedge.exe	116
PID 4448 wrote to memory of 4388	4448	msedge.exe	116
PID 4448 wrote to memory of 3480	4448	msedge.exe	118
PID 4448 wrote to memory of 3480	4448	msedge.exe	118
PID 4448 wrote to memory of 3480	4448	msedge.exe	118
PID 4448 wrote to memory of 4928	4448	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\skillstreaming-the-adolescent.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbf900c188,0x7ffbf900c194,0x7ffbf900c1a0
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,9020242149766877820,12276637760349550364,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,9557680771635955612,6793510909447912212,262144 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,7139101216583034594,18250526159618230779,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,2961784977819920016,6485418619609857197,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,16280127240348732681,10783201096312914215,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,11004521062554253875,4534978645084277428,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,1848254066675469545,16187568400511717604,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,1000964770334419672,1807496309624899612,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,250255502416734047,3432643201466214296,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1537143949893523062,9113010726864595858,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1537143949893523062,9113010726864595858,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,6240019814258555289,10218893918984097238,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,14660541443775917008,17191236710243853996,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,898965102142205664,2921372308089411983,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6376,i,1902292840781892976,3299744411123480782,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,11769175192670043316,17635291386784370325,524288 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6108,i,3486756345964747280,3056195072744818583,2097152 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6524,i,754672160872127426,15858172848901600955,262144 --field-trial-handle=2284,i,10091764656367958986,15728777612981804591,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 bb416a701afda2fcb4ae61e45981766888e21786ffb02c354eb45aa70e89d02c
MD5 c4423960dc0dc59f78d89a5eb765fe4d
SHA1 ec5a663bad97c74a7d86f9850742c2c02711d1a4
SHA512 9d39f7e07a9ff2087b72f109e7be352a1e6c99676503049c8a68ddabf5e99ba27c364d18cc6ca4e34952a085401a66ab91ca97cf3cf8fb1321c7cd7d5c3a6fd9
TLSH
T1DD6160872E930CE5F3708FB1DFDA1A3830B4A8A60F0F2F46115294BD25397249E5E52E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 4f1a0019cc68b477cf3491196cfaf4e85fb09d1549712e91e3e54ed1bb09f7b4
MD5 e65c5542f452320c3384ef31a9a3261a
SHA1 dc5882b2246825a07a766da3eedde40991a1c921
SHA512 1873952744c539f24a8d54ba7a134da10bde79af5de8a36cc573a26b143d5a7b9c3b5169c8ac4d80891b156666b94b7a2ccb077557f4b51e1c22478c8a70756c
TLSH
T16D7160476E930CE5F3748FB1DFDA2A39307468A60F6F2F521152A4BD2136320596E53E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6382a4edb97dcda5f230f44aaa62c255f6d6cea43b9260853677e4649876a865
MD5 36a679f87e00eb41b9aa1c30cf7a23a3
SHA1 f4d778218dc7950af1266ed63041ceacca681f51
SHA512 1adfa12c6f2d1a7a575d3d163f5733060d21e7ce28df92dac29aa7348e70638fb591ffaa5f53887546004e2b2089de537c05e74b5b5ab7b7e5c6140a1b928b29
TLSH
T1F97160476E930CE1F3748FB1DFDA2A39307468A60F6F2F461052A4BD2136320996E53E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2b382078220ac90bc097ef6feb2aa258fe11903fb43541020d685d13c98f3067
MD5 375ec6c5959b969c097e74cf717d758d
SHA1 8f9b991b4a0911a38e8ad91aa3eb5df1bc58cfde
SHA512 16d901867cf7081b6026e06df5fe474703ad0beff2e3e2aadb255432d21e69533bbe7cc4eb89dff27f67ec4048acbb5da23a155ebb0b51253ff397174ed0dacb
TLSH
T1836160472E930CE5F3748FB1DFDA1A3830B4A8A60F1F2F46105294BD25397245E5E52E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fe2917754e2e8d6a2f2a3a9d833a86f0a03642c9dce72a796f117e25ed9f2378
MD5 712b0296f69d5bb67cfdec785607a20b
SHA1 33d4e5035139bdc92c9284d920b30f7ce266e8db
SHA512 592c99e6e2bdcec3e471de9d1a28e65510f7cbad93d674c05bf59f32ef835e0bd4114d93a424bfba2886bd36a87e2df6b495d4ba271e3ca8021466ce4befece0
TLSH
T1FD415DF783E447BE891156F09A256E1BCD5D0517436C3C928AF4AE2B63F28B1E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dcd6577ded9c1db33916b3ae3603b38afa1ac04c2e37076d49f61e74fec8cee2
MD5 5b489a4f74e7779b2991180f0c9783e6
SHA1 502f5afd59910419073efe31425ad08da1b6e388
SHA512 3661a12dbd4c448d4d73786c059ff2922bd561cbc68ff3d2e923f5032479b819663de2183461e1a0c95647c3318e52ce78db8937dc66d5d805afbcdef4e673b3
SSDEEP 192:sxZIR6yM/jK1Ml8MWZ/f9spOIdpdmHW6+WNGYHj/sVcIgrJ:sxZIQuZ/f9spf8HbG49
TLSH
T1E242F8116A346977CCCBD20DFA457F53D6F55472A2940E44A9FCCA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 04ce7af081ded6eed36528931d14cc9bf8266d6ee6e1bb702ef034e6f8064add
MD5 afb86aa386eccb0edc9f7ed34daa83a6
SHA1 5bdbe7a94dfbe17b4d35fd8f516eb711a3eed5f8
SHA512 d50e7f0f329317d1ee898e61fb08e159ed5080d38248768bce745644d86eb2d829c97a8fdc318ea8e0c59c303a106116e4b9f946c49a073bec34824c9d50add8
SSDEEP 192:sxZIR6yM/jK1Ml8UQ+WZ/f9sueIdpHmHW6+WNGYHW/vrcIg5bJ:sxZIgqJZ/f9suPGHbGSr
TLSH
T1D652D615AA349977CCDBD21DF9417F93D6F55472A2940E44A9FCCA1C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 fc3a71887f35c44747b370250e3b1ef42ba74dade068717c6002732515692197
MD5 f8110cf66fa8915f0994fc6feb7f9299
SHA1 ed2bdcaa258d1e3c7f793cf11c0cc2a12cfc9abd
SHA512 202c27990d4792739f34d8042de3e38efebdcc05217f87843642dfb8ee33e77d3ea60dddf7e9bc4e1f09cc3fa49ac4a7c6a444a5c803afb36592befb76708781
SSDEEP 768:CNUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RtroVF00:CNUZYTMWvg0Pou1ja7eLZmRGQ0
TLSH
T166D20B2B680CCB7E4F844E9DEC2A6F867ED801CB5A984D5447EA884C03C76EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 9097d27cd9ada09d8132120eaf44c05bd2f8cedb27f4b58ae097958a4cb84d44
MD5 c730023ee8ed797e7dd8b97d7210c18a
SHA1 56baf269793e91f64b6b4662969b667e455c10fb
SHA512 6747e83eac5806140bb51fbe16c79f0b72682ffdaa5fd4bb53de7d7328fff2b71b872ca0196929b0576cf7717a4bc135c5d9fd2e1164aec9ac99158421d2113e
SSDEEP 96:KA1eK2A4hqKao060gKdSmnOKAwGyGPKMofz:EMXPoNDy
TLSH
T103E1340271BB16023DFD3A19A2648B2B4782B5633118F52B7BE800B54D6AE345DFF9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4a76a7cd91600d3f951b11324b3c650eb291592114bb1fade4ba17bb82bcbca4
MD5 ff5bd34962336da2e608c086a20c1ac1
SHA1 fca637049aa5d7a5011c4259315fc39924b190f4
SHA512 e83753d30cdb1b792bf2ea2f7d0addb06b77b1f53dcf07a0c03263fd4a73ba5de1b7dee016891f8622265e76fee50d8eb3182be0c8e7c18c1b5741b7a2c3565e
SSDEEP 192:u6LsN2YOQmBtV47QmiU18mqB4zX5Obd+j6OuL+usySJrc4QNq7U8:RsN2RffA1quzX5od+2OO+ustJrAaU8
TLSH
T108321A326868AC378DE3B554F44B36539FA85067DA892FC4C2EC5F1C05EB6AC231BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4528feb1051499e5791040316eb7c5fb7b9a3b48b240e6743672a2d051d7f28f
MD5 52928e08b2b38f87df6d5cfa5d3e654b
SHA1 24b89571b170f0897f0423dd9197a5c9378c610e
SHA512 c209f01eaed4e03e5ffa4f9b85682cde560974728f7379bda5b17ae43042de611331fa3f2f48d58adf35e0a6176c50b847f605598542e95f162000356bd6d28e
SSDEEP 384:3ZcI3sN2Lff11quzX5od+2OO+ustJrOaxuvzxV+MhdpQB/oH:/39zOTOOnWhOa4184pQZY
TLSH
T16C925D716868AC779CE7B155F84B36138FB89067AACC6EC0C1DC6F1D019B699131FC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 14db3b195697468a31f106af2df96a61472dd4673f6512bb5c48fe02ac582912
MD5 73ce82de65fd19f353dbb0b6da9c8050
SHA1 f5b883dc2160ab6299a41bb51437318debb68bf7
SHA512 532a97114c15620bacd93bb25010888e020516ca3579502a6a20fd7799aebb4b73363a6bfddfa4bfeee4e47b69b6f636f6fd2887bbebd06c8aa19130774e1800
SSDEEP 384:HZcIhsN2nffA1quzX5od+2OO+ustJrAaxuvzxV+MhdpQB/oH:vhGzOTOOnWhAa4184pQZY
TLSH
T1CE826E716868AC779CE7F155F84B36138FB8906796CC6EC0C1EC6F1D019B699131EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5c5e1ef81b3446144852e17b75388178ef2edf8cd5afe2c7324ef25aef7c6d20
MD5 50fcf9370a98d03e44098c52e7bc8771
SHA1 f7d0f28481d2d9051c21f235e8456bf9d63546e7
SHA512 40fef6562327a6803d693c3c810ff2d2ba3b9a464dc64674fe85da222538cf671c09b27674ef8b80364a458b9d7bc74e0fcacd94f646d353f9860fded199272f
SSDEEP 384:2ZcInsN2Lff11quzX5od+2OO+ustJr6axuvzxV+MhdpQB/oH:kn9zOTOOnWh6a4184pQZY
TLSH
T175826E716868AC769CE7F155F88B36138FB89067A6CC6FC0C1EC6F1D019B699131EC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 598c1edfcb06db9f6196cac387e03f2de07b47b3caa8c7ff64a8b9c38ac92031
MD5 c3abb4b2b4b6b34303463eb1e29ab10b
SHA1 951180e9ea40fdbc07d02ab5463dd51edf196cd2
SHA512 2da4f82c012064cc38a7dc43c80eecca97f1f4eb79dff9f1bd49503a7abdf2e675adedd6a92bc7d6495b63044871905c85634212f8dc412528453bb91e5d6d0f
SSDEEP 192:yONC61VWQmiUyrugGX5Obd+j6OuL+7/ay3BcU6:yONC6WLgGX5od+2OO+eAcU6
TLSH
T17302D835A9286C778EE2BE49B48B37235F95206BEA946F84D6E81F1C00D765C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f328127c843c62a9f4e5fa4a022cb4209423d716af065f8eb9168f2db5af634d
MD5 d24e4816e581fa138e7d57942be688af
SHA1 2777ca4abf9a8dd855d47fb72ad743f5e12946d6
SHA512 cd2c42372f6f3952990bc8ce05d629ff9ac113566e090acf9c4ec2285c71356ea9145088156885af210114bee5b9bfb8ba5a616dc7c6d72b00a0ae635daca661
SSDEEP 192:mONv61sWQmiUy4u9GX5Obd+j6OuL+usySJrhjJNq7U6:mONv6lY9GX5od+2OO+ustJrjaU6
TLSH
T1C4120A326828AC374DE3B555F48736539FA95067EA897FC4C1DC2F1C01EB69C231AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dde3711-3bf1-443e-9e3e-32fe8af9fc16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9dde3711-3bf1-443e-9e3e-32fe8af9fc16.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0af0cc2a746f8523bc501e48dc1c3fa6151f4da32f7f1323e2ee854673f41d78
MD5 927d914bb39ce145aed4743af7ca7fce
SHA1 ebd512684f7795ff68f69bc65f19c773facc2f27
SHA512 a003a32d5e06917a8d77625a11613d60373bec007980cdf8f8140838984488d2828e994d566712f7a46b3fd3f8c9901e6b0404935ca037c8dc87cfe0ebdfb1e9
TLSH
T15341D348B7E91108B3B36F5AABF6A86E887B78772E46D55D00110E4F0A76A40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download