301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 06:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 138B
Sample260930-g8h4eagh55
SHA256 301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f
MD5 7389d931c86b3d7bb6b8af46d8c4172b
SHA1 8d2a4760aa0b47984d11cd1a66448719177fb791
SHA512 dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889
TLSH
T1D9C09B5D755366449913155167C33641D196837F689A84510941C593F0CF69AC4C73A9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
628	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{896BCCE8-7C60-4ED7-AEC7-37AFD38AC94A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2272	msedge.exe
2272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 2464	4664	msedge.exe	88
PID 4664 wrote to memory of 4896	4664	msedge.exe	89
PID 4664 wrote to memory of 628	4664	msedge.exe	90
PID 4664 wrote to memory of 4896	4664	msedge.exe	89
PID 4664 wrote to memory of 4896	4664	msedge.exe	89
PID 4664 wrote to memory of 3520	4664	msedge.exe	91
PID 4664 wrote to memory of 3520	4664	msedge.exe	91
PID 4664 wrote to memory of 3604	4664	msedge.exe	93
PID 4664 wrote to memory of 3920	4664	msedge.exe	94
PID 4664 wrote to memory of 3604	4664	msedge.exe	93
PID 4664 wrote to memory of 3604	4664	msedge.exe	93
PID 4664 wrote to memory of 3920	4664	msedge.exe	94
PID 4664 wrote to memory of 3920	4664	msedge.exe	94
PID 4664 wrote to memory of 3408	4664	msedge.exe	95
PID 4664 wrote to memory of 3408	4664	msedge.exe	95
PID 4664 wrote to memory of 3408	4664	msedge.exe	95
PID 4664 wrote to memory of 2108	4664	msedge.exe	96
PID 4664 wrote to memory of 2108	4664	msedge.exe	96
PID 4664 wrote to memory of 2108	4664	msedge.exe	96
PID 4664 wrote to memory of 2572	4664	msedge.exe	105
PID 4664 wrote to memory of 2572	4664	msedge.exe	105
PID 4664 wrote to memory of 4276	4664	msedge.exe	104
PID 4664 wrote to memory of 4276	4664	msedge.exe	104
PID 4664 wrote to memory of 4676	4664	msedge.exe	107
PID 4664 wrote to memory of 3164	4664	msedge.exe	114
PID 4664 wrote to memory of 2476	4664	msedge.exe	115
PID 4664 wrote to memory of 1576	4664	msedge.exe	116
PID 4664 wrote to memory of 3000	4664	msedge.exe	125
PID 4664 wrote to memory of 3000	4664	msedge.exe	125
PID 4664 wrote to memory of 4084	4664	msedge.exe	128
PID 4664 wrote to memory of 4084	4664	msedge.exe	128
PID 4664 wrote to memory of 2272	4664	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd68fcc188,0x7ffd68fcc194,0x7ffd68fcc1a0
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,12832538022810178013,5455222607244836016,262144 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:2
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,6516953278102575573,807563765601413009,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:3
  2⤵
  - System Time Discovery
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,14214202045724611889,13835356572719757600,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,16221623230791547565,4033228245781776964,2097152 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10191410945674560274,9139469824506595947,2097152 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,8950777576230145172,8988019224294335976,2097152 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,10724053347082881356,11163450427319966533,2097152 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:2
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,7593060401044701947,12276079717323224444,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,667937436701053442,1937749120447196137,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,1465508566102508914,5342367473858322846,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,1465508566102508914,5342367473858322846,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,18091740262654513237,10431756691582586700,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,4349912843999463867,13407811736444779077,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,3991710573489021133,10033468339783923673,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,1226769228037667050,15631123969823367054,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,12134022510163942596,5304398186132771025,524288 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5140,i,17352236621403284337,1756884229297724481,262144 --field-trial-handle=3064,i,2862957042699134588,15956212992785687741,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3cd992d7f70049711ca5f72fb6f4524f5f75d3ba39d4d7892d90ee75ed1c619f
MD5 1cfb5752087f4747776b9ccf10f71f73
SHA1 1372127a83009be73eec2b442a884743cef4f6c4
SHA512 84dfbc6066538acc2ff112caec6bdebb5e9897f6a5fbd19642ff12c19d1668a9eff0701321ffe713a46195c40ff5da4b8d7d0c9ddbf5aa5aa3dbaf97ff7fe2ca
TLSH
T1FA6191C198A10095FBF744F392E5F08B33F446A38FB32DB19354D978D70E705A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fe9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fe9f.TMP
Size 3KB
SHA256 cd4b690fcf6c3d5d036da460c15a622222e9f3c0db089f86d97f3473fc8ef5d1
MD5 aa51ebf392d5cdd05c9fc980c7664356
SHA1 0432e6f93541a69690b9ab14088af384e67f55dc
SHA512 c0ecec690fb9dd5eda8c7c8599629d8baa04a4f865cafc8e8dcfd8d7a7a519af04e482cd9b645dc672e99ad4c29acdaf5530a61ddba34216a3bc8d168584c47e
TLSH
T1906170C198A14095FBF744F392E5F08B37F446A38FB32DB19758D978DB0E745A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1f7a6ebe00c9f453831b4fa0dbf37c78bb2491e9b3ae7fd84a1afc818f0ec68b
MD5 4ac97b2ceff8be3fa1f81e754c0931fc
SHA1 9696205bb6d45de9c6d5d324c5bd86c4b082ea44
SHA512 5407ea9830558537b3aefe66d68765ef63e23656df88b1f77e81a547ba71aa908570df1e36bb09f13bf6921f275e484fd26c4120f8b6c7e2879e4fcf03cc3d21
TLSH
T1C0117DF7C7D585AE891126F06A24AE2BCE1D0505421C7D19D5D4EF2BD3F3075E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fabc8aad3f56540a4bf949fb5122479f8e4b59fad118f74c93ed981a4c81f9f4
MD5 625199747de281d3bc7a18122ccc0e30
SHA1 30a9a17d40eda70ddf059a3d22edae1b19d9c717
SHA512 20ddfe02843fa8878120fa93df99a6b620c76b3cff415022bd8f13755935d9cd802b58049cef821e518013f749d3ad65a4fda0efd04c4ca9cf5466e448636141
SSDEEP 192:sxZsRvPWh/fgsD6FIdpHnHW6+WNGY36IzIg5wJ:sxZsVeh/fgse2HHbGIq
TLSH
T17E22C7566E28697B8CC7E21DBA15BF53E6F9503251901E88AAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 efeee3cafc11b0ce131f2ee3e1f168ca6b7fd7a6e9c9b5ce0bf5c1716dddc63d
MD5 c4c260d1ad8b6e5e0dc89e6e35b9115e
SHA1 f5d1ce72b7c275e6fd8f26f68d33d324090fa06b
SHA512 897493be07fbd9d9c2dfa1c28e1aaf6fab484f67436347b985a8cb8be4520428557414f83531e2ba4292d88be258a5f8b56b5accc36307e557e55836353245dc
SSDEEP 192:sxZsRvPWh/fgsD6FIdpdnHW6+WNGY3ZIzIg5wJ:sxZsVeh/fgse21HbG1q
TLSH
T1FA22C7566E28697B8CC7E20DBB25BF53E6F9503251D01E98AAFCC61C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 894ce5d7e999fedd6bd5ef4221c60d32ce4141e9bc8274a312bd6fe4d178b218
MD5 3f74a8b2704dedd41f8054a209574036
SHA1 a72b0cc7c1cbbb9cc7a9e0a2f2d8f7d4608bfa26
SHA512 b61fc601826c24c33e5d4d594091b1a7e33e00dad27870acf9958de63d25b3743dcf37166f471e55f44467accb5ce36739a7a656a04d173bcde338d03c44499a
SSDEEP 192:sxZsRvPWh/fgs/6FIdpdnHW6+WNGY3RIzIgrJ:sxZsVeh/fgsi21HbGT9
TLSH
T1A212B8126E28A57B8CC7D21DBB25BF53E6F9513261D01E98EAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5a56fda0cf6904e960964aa2c090fd3fa2f83aebb4913dc30227a4a523be3852
MD5 81c3635892509e70daf3c5794a931d94
SHA1 a856347d681c2f972ad09f09cf2544dd77e45ae1
SHA512 922e479073aa0b8604a06d0c4f295d33d39bd444e8a70bf0cbeaa7af8a6a9f7317a08f0229c9b1a387b8e79221095cd77b2fc06cbdc4f43b517659f4151ec838
SSDEEP 192:sxZsRvPWh/fgsv6FIdpdnHW6+WNGY3RIzIg5aJ:sxZsVeh/fgsS21HbGTQ
TLSH
T18822C8166E38A57B8CC7D21DBB25BF53E6F95032A1D01E98AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 987dd226da1d6f8ff66085d3bad0559732282162ac13f9ef29e9658f283ab0c8
MD5 963faf08ce1c7104304d7bf8298f86d3
SHA1 56916e17e72e39a40e58a2116bec53dfc1754b21
SHA512 33ff7ef67858a11413473c6b8e1e2c14247fff3781a6cc9d95b3bb5be61a357eecc04bf41706654b74588e3a3baa26fc120e6c43c9c02f61be9a0b5928fcfa98
SSDEEP 768:K230AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72NrolZMx:K230AbSWvS2l9u1jaLmLZ12mC
TLSH
T1D5C2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D8447FA984C02C77EA51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbbdc786-fa97-40d2-b9b8-c1ff04596b6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bbbdc786-fa97-40d2-b9b8-c1ff04596b6b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b2998ed3d08077240102888604e7f0c5d43ac0d579e44eb036def12e0e95d92
MD5 7570c6fac1c8e7c37e1e107581bcd9d7
SHA1 820b83e2639a2e606b6142c780213c97a3efde7a
SHA512 5bca83a9882cdf033882717d289f7a3578239aedff1b6bbd60c2c27e8915f62018d39e17ec27210d1c633281b1a01b0e48347c5457ac5833a25328385e1400d9
SSDEEP 384:RZcIhsNvXEpubKf9iX5FCtEwVZh6DKhHZtoO:5hl/VajwfYGHZtJ
TLSH
T1DD828E379CB86D7A4CF2E651F50A3A039EB89163D3C85F84D4ECAB2D01DA594230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 68b42a54c3bfd37e56fc37c6a44d0747283f4acd653d584faa23d4120958039e
MD5 f3e3dddf69c6bb6121c340bd07c0adf1
SHA1 7a624b79cd869fa51bc2fc94d53b217997bd3b4d
SHA512 3e94453406524e932f2718fe4894eb198ec13af80cb9847ad2a96ba4e164576892b2af176b1b99df62a61b547e47aa0a564c25b1d4accdeea8170f86d9191549
SSDEEP 384:BiFiZcISzsNR8TUNTUlIlKEpubKf9iX5FCtZwVZh6DKhHZtoO:oFQ6swgJ/VagwfYGHZtJ
TLSH
T1CDA27C339CA8997E9DF6AB45F50A36038EF441A3D694AE84E6DCAB1D01DB1D8130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 556e621146ec12d3cc54dd0c6feb96d6c7ee01806e870f17b189547ab36a3d64
MD5 1183e4544dd55e66c962e450beb957c6
SHA1 811701ba222e8e09a59cf49dbfcd353c224ee943
SHA512 7b6da277fda8797987d8c2bb1914e5f68a92b64837b58ee147c84d37a2afd379ea5baae4a0ddc860f11459544a0bc6b1287ce01b02f9f1d7b98930775ba847d5
SSDEEP 96:gqONk0QsjpfuMVwptaL5ih/cIPURHl8h4otop5driCDdBBIPuva6zx8X5FxXxPY+:LONg6AmwprQmiUyLV6siX5FCYJi67U6
TLSH
T18D020B35BD686C7B8DF3AE55B44B37139FA5116BE6902F84CAE81B2C01D768C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 676a4d60e2ec4fff6779a8be28e6b28ff036e0cfa1a84a0d29edb34feeb4eae0
MD5 b03919c5ed4d2876a2023a93f51debcb
SHA1 d2916a9ee94518f09423b6ad10aaaa4feca22c65
SHA512 804009564abe0544eb37ec3cd8592c4859e98cd476b2f0753e3caa7671a42b592667314bcdd36231ef3db7052e7ebafa5336dbcb26a02f0ddcf7c0b0b1247ca7
SSDEEP 384:kZcIhsNvKEpubKf9iX5FCtEwVZh6DKhHZtoO:ChE/VajwfYGHZtJ
TLSH
T1C7828E379CB86D7A4CF2E651F50A3A039EF89163D3C85F84D4ECAB2D01DA594230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 610179c851d0c35e82e7e310d063ac882d1c7f069a67ea24636f8498bc12b34c
MD5 879314aa0ba849e3c8fb435f204b3410
SHA1 ee9f42497cd8de41176ecace525b8bf794cdc98f
SHA512 c250e3b133dc03ebcfbde1fe18f7d7e45940633840cac94b1034e7abe50eb2c9d8a31453d77a29f79160179227dcc0643119bf6ef6a455bc04b912595f39ad2d
SSDEEP 192:LONC6AmwpKQmiUyJV9siX5FCt5eHElRrqfU6:LONC6ipG+9siX5FCt9wU6
TLSH
T1E0122C37A8B86C7B4DD3E550F04736139EA55277EB886F84D9FC2B2C02DB598530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

201c96bc-d635-4f2c-af78-6a0bc3fdf2a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\201c96bc-d635-4f2c-af78-6a0bc3fdf2a3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 30e41e24350928b807daae4711b94378a47d63082e8d63c215a47ad14f6af177
MD5 4956c28ab3b53e780a922c6b9be8832d
SHA1 d5aa8167328b1a85f75bbfc8db4cbb4b97e355e7
SHA512 31d3c6d62ad3d91a1398c2d8c18821f3c528f272fdacb960afdb81e76516fc1e641e25f959d1c984d7e0e5fd8d231a2357cad6cdb8c5f6eb223721a7c07f9d19
TLSH
T1D341275DA6F91148B3B76E1AAFF7A86D443B7D372E0AC86D10110E4E0A67B41C871737
MD5 SHA1 SHA512 TLSH

Submit Download