d56e1a9ad387d99c8f413036d371fa7102724993430c86f01755dd055ca72744

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 14:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 342KB
Sample260916-rfgd8a1fjf
SHA256 d56e1a9ad387d99c8f413036d371fa7102724993430c86f01755dd055ca72744
MD5 52ed7c131cf2cc84b27a5e67ef6a7185
SHA1 19efb3bffffbe956f8be895398d71537f9193aa9
SHA512 0fd60b34dff1c019e54670b1a52fa79cd70d866fd826e0e49fd483c3042f0e79acbeed1a350cff9179479f8fed780e755c906abcf39f9aa62f9b82bf96dbf005
SSDEEP 6144:cydNMWbVJa0/qrgOYCSeqfUZF8Xh7yVSZzOD9J6fhco5ZnB8d7UZsEkUDuAs:9jgWYUyH
TLSH
T13774DDC7BA9C1F81F57731E4C063B1CD8A4454DD1B70C9A87BA780ABC36F5E09ACA562
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340412833159849"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{34FDE8D8-C8A0-42D9-A18B-1EF29E9DFB77}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3812	msedge.exe
3812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 3668	2388	msedge.exe	85
PID 2388 wrote to memory of 4988	2388	msedge.exe	86
PID 2388 wrote to memory of 4412	2388	msedge.exe	87
PID 2388 wrote to memory of 4988	2388	msedge.exe	86
PID 2388 wrote to memory of 4988	2388	msedge.exe	86
PID 2388 wrote to memory of 4516	2388	msedge.exe	88
PID 2388 wrote to memory of 4516	2388	msedge.exe	88
PID 2388 wrote to memory of 2088	2388	msedge.exe	90
PID 2388 wrote to memory of 2088	2388	msedge.exe	90
PID 2388 wrote to memory of 2088	2388	msedge.exe	90
PID 2388 wrote to memory of 5032	2388	msedge.exe	91
PID 2388 wrote to memory of 5032	2388	msedge.exe	91
PID 2388 wrote to memory of 5032	2388	msedge.exe	91
PID 2388 wrote to memory of 3920	2388	msedge.exe	92
PID 2388 wrote to memory of 3920	2388	msedge.exe	92
PID 2388 wrote to memory of 3920	2388	msedge.exe	92
PID 2388 wrote to memory of 4140	2388	msedge.exe	93
PID 2388 wrote to memory of 4140	2388	msedge.exe	93
PID 2388 wrote to memory of 4140	2388	msedge.exe	93
PID 2388 wrote to memory of 3468	2388	msedge.exe	98
PID 2388 wrote to memory of 2872	2388	msedge.exe	99
PID 2388 wrote to memory of 3468	2388	msedge.exe	98
PID 2388 wrote to memory of 2872	2388	msedge.exe	99
PID 2388 wrote to memory of 3108	2388	msedge.exe	101
PID 2388 wrote to memory of 3644	2388	msedge.exe	107
PID 2388 wrote to memory of 2372	2388	msedge.exe	108
PID 2388 wrote to memory of 4984	2388	msedge.exe	109
PID 2388 wrote to memory of 3248	2388	msedge.exe	111
PID 2388 wrote to memory of 3248	2388	msedge.exe	111
PID 2388 wrote to memory of 3812	2388	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffa157fc188,0x7ffa157fc194,0x7ffa157fc1a0
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1800,i,835225612946692847,5773764232963944555,262144 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:2
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,7466999735233015481,5320915259179778310,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,3417108304775184791,8916816092240712013,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,4017993265823795091,6878352970208915570,2097152 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,15692214799097228844,1897807719879705769,2097152 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,9535891100815034122,3364226885869149175,2097152 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,10862841831070911336,12517924396743748736,2097152 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,18161468660462831318,10929704020270423535,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16012979785356531485,11722163711564812149,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,9450394193541322426,10677158776845452219,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,9450394193541322426,10677158776845452219,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,2840209386089826168,17529049897719852847,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,13688430379924621811,10400641021535715834,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,2339495349188816045,2397773738415501127,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,2384876963647388544,3580054350934367001,524288 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,6163267674007840568,8429587172025551389,262144 --field-trial-handle=2876,i,18240818849756554932,16855343075950145353,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f986221697411c43fad9acfc16bc7eecd0be378df1b44b9f55627187f902dce
MD5 537268fde074a4fbeda00dd6b68ed73a
SHA1 8e48f37b278b96207ebdb4ec8012fa833351a1d2
SHA512 6f7ccbc3006b9df1be704698afeea3149f697cc5503b2c9408102efd57afb142d9cf1a8284c6a3624362894c2140114f9e63a7db267469ce3cb1fa9ba28aafec
TLSH
T1C46183A959E45A51FBA04C70AAFD32433B3B97F147C38F821954D978D619F3130D6E82
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ba161be0db756e6a9c35cf712a9612fb8e0dcbaa096944842212d0c10d88bd12
MD5 09ea6845fd3cd2ee44fd57e42a6a044d
SHA1 d99d7474107f04749917a9520b90b0fa78b5bec7
SHA512 9a21c151f5345cf62eb88662730f60b0759cec9eb7d6c21639aaf2e4755eae98b3429aa92aeb3157dfff72eeeef74080d54d2afcefee10a76b22e9c5a7159e48
TLSH
T12A119CF3C3D5856E8D0116F06A28AE2BCE2D0A06421C7C29C9D4EF2BD7E3479E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 cb34215a03091b5e8b689616755f982d92a92aa99cf96b4e26f559bea8154ba6
MD5 30c98d78559241cf88307fad59248708
SHA1 8eee0aee9c8739dbc43f06af702a9bb8f63794be
SHA512 6ef42b7e84611b44f770f75db729f1231d9ffd510e2003f37abd6440ae06439b027fa9ef365242a9609cb617117b2d521e0ed5930c86010941f725575ba2b5d8
SSDEEP 192:sxZH1RgWo/fPsrAIdpdNHW6+WNGY3RbHIgrJ:sxZH1Bo/fPsrBnHbG69
TLSH
T10F22C8166E38A57B8CC7E20DBB15BF13E6F9503291951E54AAFC8A1C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 24474d0c02347eede53be65bdc0ad966126e028079ad9b4a4986684f0a166f50
MD5 bd3fb61e03df78d27452ac1b06836ce3
SHA1 d2ab0bcced5e1fd8addc4e5eccab850481ed7be3
SHA512 646fc97c9ef1db0c9863a5c8f7bd9a0e922849ce1276f9965fe293926dced3eaa2364b3b3152fccc7068e9858fbd91817a293a7d2a4de95a4cfaf3169fc20110
SSDEEP 192:sxZH1RgWo/fPsTAIdpHNHW6+WNGY3hbHIg52J:sxZH1Bo/fPsTBtHbGMU
TLSH
T19D22B7666E28697B8CC7E20DBB15BF13E6F9503251911E58A6FCCA1C05E7ACD130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4d33ab1805660b15107e669d5ab963cbeefaa94c583e873fc2800ed9c866bff0
MD5 640b1101c784d64fc71781a4999decfd
SHA1 9e62f704a5b96938fd1d50e8fb746fc402807484
SHA512 8397a3f3b6d3a5b55e0c7365161a5e724956110e909e812fa5363e1e002aaae0f055ba503aed8839223be61eb74196d57f280ca5448380ec4a5dd80f3aa1c1e0
SSDEEP 192:sxZH1RgWo/fPsTAIdpdNHW6+WNGY36bHIg52J:sxZH1Bo/fPsTBnHbGNU
TLSH
T1E322B7267E28697B8CC7E20DBB157F13E6F9503251951E58A6FCCA1C05E7ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3e193139ac4db2f1962c9fab72c108cd620ad8e025197e3b6a71c65822cc69c4
MD5 f32c61ba4fe2d04a05b54e67df33b616
SHA1 afb79cf0f8983df42987b67772cc037d85766419
SHA512 6b43c322176fbbd5da38d029de33238403f44ab3b27ceaa3e0635cec7fa50719c424de7b284f99a7b7d74335f7f97fc7e2bd6949dd90a8bdd636070f8bd5cb03
SSDEEP 192:sxZH1RgWo/fPs2AIdpdNHW6+WNGY3RbHIg5UJ:sxZH1Bo/fPs2BnHbG6W
TLSH
T1CB22C7167E38A57B8CC7E20DBB15BF13E6F9503191951E58AAFC8A1C05E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6e068f9cc1789d5271b8f0aad65ec025513b5228d9ec3b2f0bf8831080460541
MD5 5eda287810c013a90ef17402c7de300a
SHA1 7b07f06f3ab851ac7a37c300b263ed1da8f9a97b
SHA512 bf42493c4685cb6a09fa39f9136d30ddf21540d04843be4b669951c3fc8364013863db174ae86190176012594b44b6364afffb3424dfbdad547b6ad48e7a4d2c
SSDEEP 768:SC30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72xrolZMQ:SC30AbSWvS2l9u1jaLmLZ12Kv
TLSH
T1D2C2DA3B640CCB7E4FC05A9DDC6AAF9B6F9802C796648D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 91dff6bf72e569f3e78d00a469481c9352ff8381f38d5628a8778954ffe35845
MD5 dc960a3dae3ab05f82ef6cc4ba7f8a22
SHA1 74d7b8fc19122d1c29d8b60883d9188fbb1842e8
SHA512 dc5d21a1c3a98ff8a3d9f4c91cd9eb22d5615da084b3754134b9ff95a0e397ea1fc1eb1dae2f069ce3623b68819c3221c7182d7bee17551e82fff593fd85a3a2
SSDEEP 48:KA5ItKSgIPylrIVKMU4EBG9h3vv+hfMlIiB+KPLHT+7ZukUjxfyg:KA56KSgqurqKMUDqcKDqCr
TLSH
T1EF91080172BB028138BE695C80A79B5E028275737058EB2F7BFD4165AD27F484DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a21e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a21e1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 90317946a8264777866d250616b1eda63b0572577c8594c08fa581e911c5d47d
MD5 9d0dceca67b577a518851164e36e3f2c
SHA1 59bc16d606acc81910ac4917cb3be4d6f9d72289
SHA512 bf85a7608a51beae8f8e5b258a3e54a295d8c2a3924b94eb404f9d31134d1d1e76c6e2e2604dcc0fc79c74a384640bf67aa1fa7ab95de26676f08ed30cfabb35
SSDEEP 384:CZcItsNYnppukAGDK9iX5FF+UcPnzf7O6R2Feoyh7UAod:wt1liaZBCnzf7TRlhO
TLSH
T105827C726C786C3B4DF3A156F44B3A139EF840679BC95E94D9EC6F2D06DAA940307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b98d04c6fd8ec395d4f5dfa1c0d8b3616a19cbbf8459b5bcd6e70726aaf7ec00
MD5 bab5e948c0f2181fc45eafc9ea14224e
SHA1 182982d57a70c436de45d5dd89232e0705cea9ff
SHA512 2798c97e08f1ccb7b052eea0c8110c9fcaf0a52cab4b27a57b0521b7f6bb18b1f6590776e2bdc376634f21627c44550bda196807e7fafad753ed192f1f8b62bf
SSDEEP 384:NiFiZcIXHsNI8TUNTUlIlSppukAGDK9iX5FF+Uc1nzf7O6R2Feoyh7UAod:EFQ3Vwg0liaZBwnzf7TRlhO
TLSH
T1C7A27C735CA89C3B9DF69A56F54A3A139FF400A7CAC5AE90E6DC5F2D01DA5D80307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f263a16103dcbc621eaad3489c859d7aec21802d897cd70a115e8d81ec00062f
MD5 102ba6985b3c1731007a81e033fdd8aa
SHA1 ac1c67ca6324c35cc6fb61d33adda8cd274cd1ce
SHA512 2262fec73100e46a1710e0bbfd500a700d334ea1ac1e1ed62fa1eba9a40121ab188753d1605e7e64ea886eed54ffee1fd2865b4eaa84a1154634a86208fc193d
SSDEEP 384:CZcItsNYSppukAGDK9iX5FF+UcPnzf7O6R2Feoyh7UAod:wt+liaZBCnzf7TRlhO
TLSH
T1C0828C726C786C3B4CF2E156F44B3A239EF840679BC95E90D5EC6F2D06DAA940307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c3f14c68070c40db66af7c6b5a5eafa375159743dabd4510233662e675ab567
MD5 db9f9da37d225f7896386de16e75f2d1
SHA1 96f42fa638cc86d90ff4f4d5d7e9aee001044aee
SHA512 48a56194eb91794e9d7cc913cbf417e4903991db0dd9298c7547d7ca4575a6845ddcb7c383c2b0b477fe5e4b82ad73e104f886547c72b6828ae37c8fa971a0c3
SSDEEP 192:LONx6Amwpk+QmiUyuBDWsiX5FSY+UcXe7lRny/OfU6:LONx6ipk6vDWsiX5FF+Uc+nzfU6
TLSH
T100122B35A8786C3F4DE3A551F04739135FA51227EF896F94D9EC2B2C06DF598530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 130fb9589983eabc660adf3e04210c2c383b15688125dfcfdbc7433735aa183a
MD5 6c1186569dc42d99e1b45ee11e92cb03
SHA1 65608de72993564ba450c995e385e8a91074a0f9
SHA512 1b5f88c3db87cbf060e8fbb86333358b93d90891f52bf507fc264eb13d58ab79f766a133dce8a39e79ebfd3627fa8b977b638b2991cf5d342e34342eaba7b37a
SSDEEP 384:JsNYQppukSGDK9iX5FF+UcPnzf7O6R2Feoyh7U4:JQLiaZBCnzf7TRlB
TLSH
T1D6624C36B8786C3B8DE3A555F10B3A239FF451A78B851F94E5EC1F2D06CE6985307812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c8960bccb35e0285e9f35360167f73b9e1fce42310abd03cfbe12f0d1bc30bea
MD5 f0fbf706869c0a7f86a85aed2cd5e001
SHA1 d48385ab492c9309a9e9f97f9e272217a95176e0
SHA512 65f87a0a0dc80320e04349799d5b62a889104730465bcf1314007ab0083dc64d03de5c373f9825ee7b2d9e51db56a702a5070a0d2fcfd0ced06edcb3a73fc088
SSDEEP 192:LONm6AmwprQmiUy/B6siX5FSY+U9JinxaU6:LONm6ipdy6siX5FF+UqngU6
TLSH
T102020B35BC686C7F8EF2AE15B54B3B235FA9116BEA941F84C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23020ad0-66b8-4bb5-8f08-ae6b917bf909.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\23020ad0-66b8-4bb5-8f08-ae6b917bf909.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88f3f9512a1d77e4c89fb42f088abc4b76163ffc5441d9281901cfccba720901
MD5 7b556dddd4be21d7f4e795078f7ce4cc
SHA1 8be7468ba14d579960f2c989a0d24636b0aa79b8
SHA512 3cd88e185be91c88136692ddcd42c5ac2c24f9f67d416c9ca96823371b690f96aa268455077e78e0beb7472fc7476fbab8cdf4ac741cc7c087c50c37bae8624b
TLSH
T138413658BAEA1118B3B76F5A9BF7A87E483B79372A06C46D10110E4F0623A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download