9d7a55c392fec083a71fbd74b63e6842916ca26f0c23ae3380ca7b3fc1ca8967

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 19KB
Sample260930-prphvsyapd
SHA256 9d7a55c392fec083a71fbd74b63e6842916ca26f0c23ae3380ca7b3fc1ca8967
MD5 3aac7b56fd046adaa1e9d42f1e5cbc27
SHA1 8239d5c18e39e9093f1c73eb5fc164c96fd095dd
SHA512 43c8060d5cd10ba4d19c9f9ddfe823d167894d84dd9c7a9e80c55ec8270451634267f921779c097e49c6d24db54e7529bcdb4f40e2e42312f0ad788e1473aeb3
SSDEEP 384:/4wrNVO6+XuDT0yuerQUEuCWjCdzdV8M7Hj9:g6n0ve8UEOCdzdaMbj9
TLSH
T19992336698F41517025292A568E97A1B7E95C20BCF4B2E50B2EC0FBE0FC6ED7CD2311D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F3C26091-C77C-4988-A13D-D0527DA8E695}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4068 wrote to memory of 872	4068	msedge.exe	88
PID 4068 wrote to memory of 2128	4068	msedge.exe	89
PID 4068 wrote to memory of 3800	4068	msedge.exe	90
PID 4068 wrote to memory of 2136	4068	msedge.exe	91
PID 4068 wrote to memory of 3800	4068	msedge.exe	90
PID 4068 wrote to memory of 2136	4068	msedge.exe	91
PID 4068 wrote to memory of 2136	4068	msedge.exe	91
PID 4068 wrote to memory of 1060	4068	msedge.exe	93
PID 4068 wrote to memory of 1060	4068	msedge.exe	93
PID 4068 wrote to memory of 880	4068	msedge.exe	92
PID 4068 wrote to memory of 1060	4068	msedge.exe	93
PID 4068 wrote to memory of 880	4068	msedge.exe	92
PID 4068 wrote to memory of 880	4068	msedge.exe	92
PID 4068 wrote to memory of 2132	4068	msedge.exe	95
PID 4068 wrote to memory of 2132	4068	msedge.exe	95
PID 4068 wrote to memory of 2132	4068	msedge.exe	95
PID 4068 wrote to memory of 4364	4068	msedge.exe	96
PID 4068 wrote to memory of 4364	4068	msedge.exe	96
PID 4068 wrote to memory of 4364	4068	msedge.exe	96
PID 4068 wrote to memory of 3972	4068	msedge.exe	100
PID 4068 wrote to memory of 3972	4068	msedge.exe	100
PID 4068 wrote to memory of 1680	4068	msedge.exe	101
PID 4068 wrote to memory of 1680	4068	msedge.exe	101
PID 4068 wrote to memory of 656	4068	msedge.exe	104
PID 4068 wrote to memory of 2248	4068	msedge.exe	119
PID 4068 wrote to memory of 2296	4068	msedge.exe	120
PID 4068 wrote to memory of 3024	4068	msedge.exe	121
PID 4068 wrote to memory of 2700	4068	msedge.exe	124
PID 4068 wrote to memory of 2700	4068	msedge.exe	124
PID 4068 wrote to memory of 452	4068	msedge.exe	125
PID 4068 wrote to memory of 452	4068	msedge.exe	125
PID 4068 wrote to memory of 4472	4068	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff86622c188,0x7ff86622c194,0x7ff86622c1a0
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,4618612719208611708,2412576720510717904,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,11699019947767964192,14741374000881983952,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,4014925374211897099,9952153949915686089,262144 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,8423270389967087111,7963174932283667336,2097152 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3332182458438066587,348224502087817615,2097152 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6768376084037585786,3754407184487296702,2097152 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,10255528020273696286,17693781333156270492,2097152 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:2
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5940512234589087500,11795649372516967318,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,10966200305092467463,17852246902475640537,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8957248518322921725,7928159453741153418,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8957248518322921725,7928159453741153418,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,12193820719980585061,2378397233751156861,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11242374252111460877,6605470421819833863,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,7317027280539237379,10195744001368218034,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,4709232249651609700,6855287255368203755,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,9426540730769259802,4667765141601770433,524288 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,8984653433627753320,4920758502537749529,262144 --field-trial-handle=2936,i,15495444206337725972,3486859604045845042,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8f4c6402061886011aa0bd061a60c57e37490e8171652ffc03eddbf55a011f9d
MD5 bca1c49994abd59e1b9e433264a61204
SHA1 87616b9d2b78ad88dd8ed247c5e9b670b5d3140c
SHA512 94b49762158627e963c222003505c548b5b6fcac6014c889c026df30050ce45267c0d0263b962684c31b8ca1a7bc974ea23fcdef8827283c659e0964a8e13a25
TLSH
T188618F90BFD178A1FBA87FB9DFD7048336B3A7C01AA7ED40A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590083.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590083.TMP
Size 3KB
SHA256 d1239a948070b88f5e1b6ae16c03dde9dc015c715e16a2c988880f91f2291cf9
MD5 c8735a68a09a6e2c97d0f740c5104aa6
SHA1 7bd2e648693f182ff6a5ca97a9222abfc0427137
SHA512 00873e63e1d130f2b07fbfaf1d6f78f37fb4710c163696ede5237aacd37b9f9b0634d71c39801e6af575135c515f85a659154a23b953b6c95989cb8beaed3f94
TLSH
T13B618F90BFC078A1FBA87FB9DFE7048336B7A7C01AA7ED41A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2a94ff653ed47f9d726a1467112c8a933a65e8edbfc8de8b15383b2ac95ec5e4
MD5 fb006818ff04b76edf59dacee94f781c
SHA1 0782988cd4cc214a59ecc2802885affda2ef7ffe
SHA512 898adb099678fddb145f0f55063723f106332eec5bd461fa2277d44e898e9eafcf6f25832bfdd10ae3a07717b8b9a77d0d333f526da568156311a786e5c69d6d
TLSH
T1913190B7C3D4C66E8D1156F05A38AE2BCE2D051642383C16C9E4EF6B93F2475D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ebb4ac69a84d38c9819d9aa71d2682586af4bd3d2475d4a47d11c418163a683a
MD5 3071a25ea55fba579d1beeac39949a44
SHA1 46bdf6ccef186b29bacc000e4fff004b6be0b0df
SHA512 57c2c993bae364cb980c01f2dc7250cad1ee7a1a22b65961259be82b2b39b8976c263f0019db9f3dd59794f274f8a9f86c23b6e3aa947330baee50489bf5e8fc
SSDEEP 192:sxZERzWm/fRsFzIdpdRHW6+WNGY36aVZIgrJ:sxZEYm/fRsFs3HbGXI9
TLSH
T1D822C7517E28A97B8CC7D20DFA25BF53D6F9503261D11E48BAFC861C05EAACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 be96ed4a7aeb82491a82e29088f7216f7d147e52f65cbc96c9717b38a9418fa9
MD5 fbf55f824185715b1756f406087e03fb
SHA1 5644f5202df699c5dee5eb271df018ea1fd7dd74
SHA512 ca043985c727f1e2ac6c0ecd7ecad0be5ba9f49ca22c85a9b802a3224450ebcd2b0e1b235caba31101effc6d2ded15ca633a97d9c2f3299d08ff3c65918dccb5
SSDEEP 192:sxZERzWm/fRs2zIdpHRHW6+WNGY36sVZIg56OJ:sxZEYm/fRs2sxHbGX6x
TLSH
T14522B7527E68697B8CC7D20DFA25BF53E6F9503250911E48BAFCCA1C05EAADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 54a15d10b1675b915d6ea12275ed08847722d47d3b8ffd225927cfe57711da80
MD5 7cb6afa4567f8de3e1f2d7af76d384c0
SHA1 d31feecdbf9d524e60c588e3bdcc1c870a57a431
SHA512 89abd10bc03095de89ec32c56a4ecc13afe8009854777cd300be2508191ec3d489508659435f508ab3a981e7ec0c2230903f1876fb32fb148600b705d77810a6
SSDEEP 192:sxZERzWm/fRs2zIdpdRHW6+WNGY36OVZIg56OJ:sxZEYm/fRs2s3HbGXUx
TLSH
T14922B7517E68697B8CC7D20DFA257F53E6F9503250951E48BAFCCA1C05EAACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 dbfd1d9e27a06c0b7e05d01ef37981ac9906d5e4f4e707383a862bef5556700d
MD5 4380a17b01a8aff3a48fd353de92706e
SHA1 b31224cd5b80ad231b15469b54c92ffa233b170d
SHA512 7ed3a74df694d8f7a1f667c4b5622592db4466811095d30a40d7491d0dd0f133161b28bcb727c9b0829c3e724170efe78a01eb8bb95c6046b8db6c572c25ebcf
SSDEEP 192:sxZERzWm/fRsBzIdpdRHW6+WNGY36aVZIg56cJ:sxZEYm/fRsBs3HbGXIv
TLSH
T15A22B6527E68A97B8CC7D20DFA25BF53D6F9503251D11E48BAFC861C05EAADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c85480ab31a8283921445eaa964a976aae5996ca3d75b4151b396bcb7b72f3b5
MD5 1a044fdd6243dfd6b7e3420a40911249
SHA1 7b0731e258a1e3e1525463c7ab96d02c32e96d67
SHA512 a6eaac1562848078d4dac09e4bde577c5fda5eafc1dfef911faf9659e664bd4b6f3ff6f5137ed643eaf6381737281cb502cb01ea52752b5dc2f0e1fa7e009716
SSDEEP 768:WwKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Vro9n:WwKlm7QWvUYe0u1ja8/L/E/u9n
TLSH
T1A9C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25878d88-0151-43d3-b32f-13ea8d45216e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\25878d88-0151-43d3-b32f-13ea8d45216e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8f2d829f121b26503ae85bc72cf2034f3fe6697fd4a953885f061777d2855e8d
MD5 c611f61aa64ace6221b88f7102b27611
SHA1 5ba44d41b4c2de3c5738d834c7699bfbb1dfc587
SHA512 740cf7aad05080c867c26f70ef3963d4041dc01664cf699078a27ace217cc5f8e470ab437c91736cde6d7acd0fdc1981197e5912d0e74511bfc61b981930f1d3
SSDEEP 384:EiFiZcIezsNQ8TUNTUlIlthNbg/dh//z8ExUXQQBtgOIwZOynqox:fFQ+xwgJ+D/D8QQBXsnK
TLSH
T1FEA27C7368A8DC7F6EFB9A44F54A32038EB04067C6D5AB94E6DC5E1C019A1D8030BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4273e5be845d159117c1b96db00cd084b1d698fb2ddcac3a2d2fb51ac16af461
MD5 70ac315c6ba469f6a6761567a12b0e80
SHA1 913ae8972e965b2c549279af01cccc7f0fe74352
SHA512 9f6e9efd68dd2b00140f01bb5894c6992d681badc17ed2f4c4ba1e8225383f0bbbd0a2120b43a145c6e4812cbcd4b6839e9f98e531093fe85c79382b9401cdbc
SSDEEP 192:BONN6JUm0QmiUyWcso//jjzorB6ywxWjBCoaU6:BONN6+mECso//z8ExHDU6
TLSH
T1FF02D838BC687CBB9EF3AE45B48737239FA4107BA6951F44DAE81E2D01D725C1302D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1b970a44c7119a72e0730d8df2e00a755ab2866a721b9a791adc10df7f782de8
MD5 ca94e8659a0db8273e5694bc7c263a95
SHA1 0283780bc5c430092874e0da6ffd8a114e3f28bf
SHA512 8d460c649994efbfaaa7846089e5116f42eed5aac1047f6e26ebbd2a3cb32e60c0a6cd71833018bc55a3b98d7fff449ab42dd2a51645e7e60fc99c4ab109377b
SSDEEP 192:BONZ6JUNQmiUyPrc/o//jjzorB6ywxW5XQUNx/qGU6:BONZ6+LX/o//z8ExUXQGBU6
TLSH
T109121B35B878BC6B5EE3A545F08732239EA44127EB896F94D6EC2F2C01DF15C5306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 950ad6f08c3af96a1be9775997157fe0618c60058d8e5e3e254b6ff4d7dc364b
MD5 6f50b4e7cc8190fb63d530121078202c
SHA1 2ebb25b0feadd85f0b8697c4d517a39594e79713
SHA512 30c7a72fe1f4ec34d1a6980c6d6317dda5b9d8a9c5fe5b0e18918897fd49fb11e513146af40418aec530534d78b445a07b4d1f4ef3b52d4bb2e8d1c6f4ebe74a
SSDEEP 384:/ZcIhsNQ8hNbg/dh//z8ExUXQkBtgOIwZOynqox:XhY+D/D8QkBXsnK
TLSH
T19B828C7268B8ACBB2DF7E145F18B33139EB44067E7C55B94E6EC5B2C01DA198030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 52c1b1174ef287c0d788f4b3a179ae4429270dedbd61a52548b7bca0da902507
MD5 60aa14db366bc8dac328faa514838f54
SHA1 bf3dc4b2c93a4e93e1440b5ee2587909f63ffa03
SHA512 9bd369876b71d3b510e49d4b6aab670d95ab6e0af53f45086639d4a0a5c3c5a6b3232874f4493234075c2454c1c47f95c9ff9ff6208fb2cba8b6e93ac7707a98
SSDEEP 384:CZcIhsNQthNbg/dh//z8ExUXQkBtgOIwZOynqox:whb+D/D8QkBXsnK
TLSH
T1B5827C7268B9ACBB2DF7E145F18B32139EB44027E7C55F94E6EC9B1D01DA198030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca562d94-5b7e-4c95-b8cc-656f73ce711d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ca562d94-5b7e-4c95-b8cc-656f73ce711d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 94fd3d3d6c45e6ff0a7e8d55d9ae2741a9b9d6af72bdca0eaecd303a9f1a5459
MD5 d8f69a102de493afd287259ed3d551b1
SHA1 be4f90d279f43b0ed302b41bf33ba41837d0e7be
SHA512 4c946cdcbf08a6d64d24911c4c8ab87d2fa1b2ff3a573242056c89e9034cc528d06166412b2eeba467664f08caa0a591290468ffcc1fe17e1b5e917b7e792f2e
TLSH
T195412D5CA6EA1158B3B76E569BF7A86D88BB78772E0AD15E00110D4F0667B00CCA1B33
MD5 SHA1 SHA512 TLSH

Submit Download