18b8c7fa6c9cf0482b8c40301b107c6a53657e7ee600b03914eabdfe24a3b47a

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 286KB
Sample260930-pre97awtct
SHA256 18b8c7fa6c9cf0482b8c40301b107c6a53657e7ee600b03914eabdfe24a3b47a
MD5 2f71fa5624190f511e924e000a3c2eec
SHA1 8ba95849a10b7ea58217d14156553259cbef9e54
SHA512 de74c4cd6145e8fa823a99dc1d8285a0e0d717db3db8f5893710bdb9b59e79b77bf7a9f5a6bec1b4b15507c080418ba7bdbb0db135bd9316829aa5e762c3cccc
SSDEEP 3072:Sg25Y7hi25F77mpw7AJ6T8yCkX0tvdNlw:ST5whV51Kp45DnD
TLSH
T1C7541962F990A0726A33D3B92BD1631DF253B107974063C8B9DDA7031FF9A9B889351D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3976	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{E7998C23-F9A3-49B1-9180-07905F9BF9EA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3016	msedge.exe
3016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1832 wrote to memory of 960	1832	msedge.exe	85
PID 1832 wrote to memory of 3976	1832	msedge.exe	86
PID 1832 wrote to memory of 4020	1832	msedge.exe	87
PID 1832 wrote to memory of 4020	1832	msedge.exe	87
PID 1832 wrote to memory of 4020	1832	msedge.exe	87
PID 1832 wrote to memory of 4924	1832	msedge.exe	88
PID 1832 wrote to memory of 4924	1832	msedge.exe	88
PID 1832 wrote to memory of 2756	1832	msedge.exe	90
PID 1832 wrote to memory of 4236	1832	msedge.exe	91
PID 1832 wrote to memory of 2756	1832	msedge.exe	90
PID 1832 wrote to memory of 2756	1832	msedge.exe	90
PID 1832 wrote to memory of 4236	1832	msedge.exe	91
PID 1832 wrote to memory of 4236	1832	msedge.exe	91
PID 1832 wrote to memory of 1680	1832	msedge.exe	92
PID 1832 wrote to memory of 2732	1832	msedge.exe	93
PID 1832 wrote to memory of 1680	1832	msedge.exe	92
PID 1832 wrote to memory of 1680	1832	msedge.exe	92
PID 1832 wrote to memory of 2732	1832	msedge.exe	93
PID 1832 wrote to memory of 2732	1832	msedge.exe	93
PID 1832 wrote to memory of 4532	1832	msedge.exe	98
PID 1832 wrote to memory of 4532	1832	msedge.exe	98
PID 1832 wrote to memory of 312	1832	msedge.exe	97
PID 1832 wrote to memory of 312	1832	msedge.exe	97
PID 1832 wrote to memory of 4876	1832	msedge.exe	103
PID 1832 wrote to memory of 5512	1832	msedge.exe	114
PID 1832 wrote to memory of 5520	1832	msedge.exe	115
PID 1832 wrote to memory of 5528	1832	msedge.exe	116
PID 1832 wrote to memory of 6064	1832	msedge.exe	119
PID 1832 wrote to memory of 6064	1832	msedge.exe	119
PID 1832 wrote to memory of 3016	1832	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff85864c188,0x7ff85864c194,0x7ff85864c1a0
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,1407867926356817634,5436218416895727387,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,18055578005510027029,17660553647570885439,262144 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,1195381479308109580,8577102640896282093,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4125464656037505714,9953776709403849098,2097152 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9792960434378937165,16301067377454169503,2097152 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,5181802173055197194,15297600431638379022,2097152 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,10292932437497379434,13031369091669238996,2097152 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,11258392070724630625,13875649290119034244,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,5772805614952211607,7694397287558535878,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,13375139453585484707,6438285181236810370,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,13375139453585484707,6438285181236810370,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,4841210292157647093,8077228241172945137,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,11507910942390922713,5003068056804684186,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,5241981005778076480,12843080554554337304,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,9875833508490210241,8131726552505035371,524288 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6252,i,15539210302397356777,170460405324217469,262144 --field-trial-handle=2276,i,18177219758100112152,16844660745817340492,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3016

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 49ac4185640e02c1daa27f77966a5dfcd587e9693275a27d91aa543db3958c2c
MD5 d66c8e9a42db518c3b585b27a1dda030
SHA1 d50c0f35e9b6c8d325dd2b16b19c71c2127cc262
SHA512 8d553913a7dae6486688be80243627beadb215b01f65c09f6634f6d57fe1d1969ea19fbb2fa46ba2c9b5e21d50e2365cc05b6eb41a7d4d3919227ae6cee29ac3
TLSH
T19461FD806C404E64FF965F78A3F622FF35B5F0815AF3AD9D31B8C4799466758920434C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591ed9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591ed9.TMP
Size 3KB
SHA256 80347c9143b8b36c1950283e74521a1c926c0e226b3eb7321d2352d8ae773406
MD5 446ba3bcaf5b43cb5135ee25bc885971
SHA1 0f8fa971326fe43ce51580142858035ab50634f0
SHA512 938c417edb56dd8b3f95803698da7ae5e93c51a89246a64689e6c8aa7697d281afcfd129d2a33ad7e51104ebe49639652367d9cfbaf7ef6e8977493b9b280de6
TLSH
T19A61DA806C408E64FF965F78A3F622FF35B5F0815AF3AD9E31B8C879A466759920434C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f4f775be672b055fa7e6a6f7a1e754ff6f505c8368b42431be1c5364334fadf0
MD5 66f9c836c3c28fe85d05b8664f81cd18
SHA1 298418723052810e57827ddedc4d2a81dd98c181
SHA512 5b4b11039859eb3d8b665f9b5f429c61568ce713b44ee7da538d90b1d3633a3546953ab8f80363164ebdff69dfcef4cbcddccd85c7fdb6db07436044e4c92feb
TLSH
T193418CB6C3D5876E891156F09B25AD2ADE1D151A822C3C1BC8F8EF1B63E3470E10279F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 878b796863d041e418f45aa2edbc315d3d536d3351982a3c5617ca75c1c1652d
MD5 49a5d5e0be391dd86cfccc24d769a6bb
SHA1 696aeff9ff67c1b3c223aaee5c3b7dc3c6b0dedb
SHA512 90d17205a0c76a827487d0affcb5960d64609577a2288804906a1c3a1ac0915edc6590215f264e8e084faacfbb724dc889e59d8f58b550da1bf7f360b715e8d8
SSDEEP 192:sxZmRbWX/fksjIIdpH7HW6+WNGY36ZLrIg5TJ:sxZmsX/fksj5bHbGXBb
TLSH
T1F422D8526E68A97B8CC7D20DFA55BF53E6F95032A1D11E48BAFC861C05EA6CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1be60eafcf8988e9baa101d321a8fc7ac6157e320090e5eb706103659c051da7
MD5 329df6a4b1c98bec9f363f22665e579d
SHA1 89ee6910c52f3fcbdad7e306b231c559390e4952
SHA512 b727fe2a00226747bbd1bac058592121ccb1794cc924c604b570787683c739f3202d51dcd41f029642465cac99ff4bb95a29d35e8cd037e4b5247bee21b292c7
SSDEEP 192:sxZmRbWX/fksBIIdpd7HW6+WNGY36aLrIgrJ:sxZmsX/fksB5RHbGX89
TLSH
T18822C7516E68A97B8CC7D219FA65BF13D6F91032A1D11E48FAFC861C04EA6DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ebcdb163aa3cfa653b8766e44e23c4a518aa4ba83e2c051d4bcde5f481b26027
MD5 1406f01a30aadfb75aef94b30a4271e3
SHA1 acc278243d472eb3039c3344093b83d5e19798dd
SHA512 b6463060eb66852bd1d9e02b7bd5e5729d0337ca227e79bb867eb90a865801a3af1b0b856418692f658b03321737dd55975cc434a31d573dd7b75eba5caaa215
SSDEEP 192:sxZmRbWX/fksjIIdpd7HW6+WNGY36jLrIg5TJ:sxZmsX/fksj5RHbGXzb
TLSH
T12F22C7516E68A97B8CC7D209FA55BF53E6F95032A1D11E48FAFCC61C05EA6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 159b0440a466f267b150db31c222534feb7a1f8b03070fcec88f36d9abe200b9
MD5 63fb5f19cc49262539fb24ea29dcb2dc
SHA1 62095e9d89f203efa3e010c2cae88369fd95f806
SHA512 4dc74c21bef9169b8d8a60763cd06da1f3a5bfe0adf16549f507fe93f0f5069f9f026e043f41246f981c71618eda43b006be2fc8899b0e3885c3d78890f5cbff
SSDEEP 192:sxZmRbWX/fksNIIdpd7HW6+WNGY36aLrIg5pJ:sxZmsX/fksN5RHbGX81
TLSH
T15622C7516E68A97B8CC7D219FA55BF53D6F91032A1D11E48FAFC861C05EA6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7dcfb395c69cf8205f0cf78607d4b660269e2ac8fff8ac11ac03abbfa7f3b62e
MD5 5f89a650428ce91fd8efe493ecd8d545
SHA1 76f253b79068d15e4f3a0c9c49ac7427d527ea32
SHA512 a388fe5844d35d799bdf1c323797539a89312c5caf4b3da0d937cd2ec3d7e740483e1ff5e32f22a6b2670dbcc620436ed85949a23db9899ca1ca0588c30bd494
SSDEEP 768:H3Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/8roKE:H3Klm7QWvUYe0u1ja8/L/E/nKE
TLSH
T13FC2FB3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 aa7954a15c3581f523e9ba1b35359bae7574e9a52dd0fc2412bd519a0983c219
MD5 6f0ed8e18780c235a592a5ef0ebc1144
SHA1 b5459c6351b46f4d0fa7737781b516916055c1da
SHA512 b485a26517bbc41bf7c44d3821edb47523a01d7dfab49393183ff9eb9fc3ab12d913b472d0a778386fede8f3e06dcba8f3a0002cdfbcec8d3e4e3795ae019d36
TLSH
T15F215F2AB13603F1687F2E0C81DAF55E8A8131A33114ED2A777800770B67E445EBECC9
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b992.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de1ba3f9a002548c3b260c8048555e9db186757d69892c6347a6add7a9607cf4
MD5 27bd0767915783b843926357bff7aeeb
SHA1 a838bbc74c5517e6c147e84b3b8a0c3cce10547c
SHA512 c7b85724e03bb2e409d7033815eb3434c7be9efffd653c8422d328df66d4f0773fc11103bfc05a7bc439e8fd5f1c73b73445262e15b3de1e8c5325206a3d0f56
SSDEEP 384:rZcIhsNC/d3b7SSh//Per+tgOIwZOy1KoJ:zhTS6/y+XsBy
TLSH
T1CD828E72A8B85CBB5DF7E144F48B36134EB48067E7C56F84D5ECAB1D01DA1A8130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 50f2b3dcf87e1f450fec407ab93416b4473f0760056faaecea8eb08914a6b969
MD5 06a8871763cb4100a158ee418a31389c
SHA1 635ed78b6a2d121078b2f0fff01d3a3178dc7889
SHA512 2cc5a934b47378435c00e3f868116780b42d7b0fbe0e5b7350ffe2406c2b129937318b40679a0b315f3461a4874477d7e22283942831541c403e079e174a799f
SSDEEP 384:JiFiZcI1zsNa8TUNTUlIlad3b7SSh//PeN+tgOIwZOy1KoJ:gFQNfwgeS6/y+XsBy
TLSH
T1B5A27D7398E8987FADF7DA44F58B32138EB440A7D6C5AA94E6DC9A1C01DB1DC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c1d73a1b9f32466e465378b5dea7e13448f1ee945441b26f03e4db7a72a4168
MD5 f47f9d4816ef948fe646a62802be055a
SHA1 33b47c64ee429de9a69cdc42223705a23411bb1c
SHA512 c23437f997b7ce9a545de01ea2dd388a2b7e3a331a85a8b45b6fe94c871f6c47628d71706e21031c7eb84a83346dd67cab488acce5d6aa78290c514ab5cd28ff
SSDEEP 96:KqONkPQsjpfbUmjH5ih/cIPURHl8h4otop5QaDWBKP4v+Y1xf//ojdexBywvBCgq:BONX6JUm0QmiUyJGso//3ywvBCu/VSU6
TLSH
T1E702FA38BC687CBB8EF3AE45B48777235FA4106BA6952F84DAE81E1C01D725C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6227d00aa658a6a00052dc364d60c7396bc13317ee75a25466d3bdacbdb18f66
MD5 0fdf471706e8db735cbcdee5777c98ca
SHA1 f522e5b6944d98750c3be41803529ca9e392693b
SHA512 253d8666194295ff8a5840f1fdaec0dd3ef961e0f18d5ba6f095c91e785ac96b29bc6f73215ba784603100d77c0f95be01d7947ef074004ab24dbfa7ef11a8f0
SSDEEP 192:BOND6JUkQmiUyTGOo//3ywenezCNxwcqTTU6:BOND6+0hOo//Pe5+U6
TLSH
T13F12F935B8B86C7B5EA3E994F48736235EA44167EB897F80D5DC2A1C01DF19C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9b0c9fcd4335aac5acaf21d8aaa3f0dd2cf3637303acae7f5aabf3bd36c24163
MD5 eea6ca7393d87fc9791d8e71330b8c5a
SHA1 5846d7f52a88410fe29f0abdfd2a54f3b7b3105b
SHA512 4f2f0925098ffbb92dca4029b3a73d836900b44aecfaa973854967fb0a98ea34daac2c82f734ea56fc990ccc84879890e3960d06496f55d8dfdb2c9e714e781a
SSDEEP 384:BZcIhsNCad3b7SSh//Per+tgOIwZOy1KoJ:JheS6/y+XsBy
TLSH
T1E2829D72A8B85CBB5DF7E144F08736138EB48067E7C96F84D5ECAB1D01DA1A8030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9604daa-0cf6-4aa3-a387-c91a08f02d12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e9604daa-0cf6-4aa3-a387-c91a08f02d12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d9903e28da8c7714d0ba9746855057f8e64242aa897f05908ba0478241baf643
MD5 4c47810f859f4261e20a5ce814745f7f
SHA1 98efc47578ffc51bd7f8a34d279411d37ee55483
SHA512 38e2131c8bb72882afaf6e1d1d34bbc62b362d40869b75931ef42706462748504e74db4b82e387fc93676e1111db2955bfb2456b205c80a709aeebdde0fb6033
TLSH
T1E6413158B6F91008B7777E5ADBF6A42D487EBD732E0AD45E40110E4F0A23B00C962737
MD5 SHA1 SHA512 TLSH

Submit Download