a9b6b218dc6ee9c5a09a026892b3bd2d080256414f4b560f73b3d1411ab173c0

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 18:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gpbc/blog-details.html
Size 41KB
Sample260930-w7tabayeng
SHA256 a9b6b218dc6ee9c5a09a026892b3bd2d080256414f4b560f73b3d1411ab173c0
MD5 5dbdea9ad65fcbc7d26c838fc2738a6e
SHA1 73ffbb85b33cd77696a3aed55be380ab3c030292
SHA512 5f18a9acf4e489da270543784e8e31e0c2e16e5d29a777e396716d6a41f1b573fdedf5a101b1da5d33f58efc8deb0a4a1e7f7bf08882a9afaf69cf9c67113771
SSDEEP 768:onhEsM7onYOxS1F+WO9WetmNNcqTBO7IqGpfl:onhDkonYOxS1F+WO9Wp6Gpfl
TLSH
T1B613532118F811371693A1A57E246B2F7ED2D257CA1A1E0472FC5F9A4FD3F86CD2321A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{76E6B709-8FB6-49AA-B86E-713FAAA67C0D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3444	msedge.exe
3444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 4404	956	msedge.exe	87
PID 956 wrote to memory of 208	956	msedge.exe	88
PID 956 wrote to memory of 1864	956	msedge.exe	90
PID 956 wrote to memory of 1864	956	msedge.exe	90
PID 956 wrote to memory of 1864	956	msedge.exe	90
PID 956 wrote to memory of 2976	956	msedge.exe	91
PID 956 wrote to memory of 2976	956	msedge.exe	91
PID 956 wrote to memory of 3696	956	msedge.exe	92
PID 956 wrote to memory of 3696	956	msedge.exe	92
PID 956 wrote to memory of 3696	956	msedge.exe	92
PID 956 wrote to memory of 1248	956	msedge.exe	93
PID 956 wrote to memory of 1248	956	msedge.exe	93
PID 956 wrote to memory of 1248	956	msedge.exe	93
PID 956 wrote to memory of 3064	956	msedge.exe	94
PID 956 wrote to memory of 3576	956	msedge.exe	95
PID 956 wrote to memory of 3064	956	msedge.exe	94
PID 956 wrote to memory of 3064	956	msedge.exe	94
PID 956 wrote to memory of 3576	956	msedge.exe	95
PID 956 wrote to memory of 3576	956	msedge.exe	95
PID 956 wrote to memory of 4596	956	msedge.exe	100
PID 956 wrote to memory of 3348	956	msedge.exe	101
PID 956 wrote to memory of 4596	956	msedge.exe	100
PID 956 wrote to memory of 3348	956	msedge.exe	101
PID 956 wrote to memory of 8	956	msedge.exe	103
PID 956 wrote to memory of 4376	956	msedge.exe	112
PID 956 wrote to memory of 3572	956	msedge.exe	113
PID 956 wrote to memory of 1928	956	msedge.exe	114
PID 956 wrote to memory of 3800	956	msedge.exe	115
PID 956 wrote to memory of 3800	956	msedge.exe	115
PID 956 wrote to memory of 3600	956	msedge.exe	123
PID 956 wrote to memory of 3600	956	msedge.exe	123
PID 956 wrote to memory of 3444	956	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gpbc\blog-details.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x29c,0x7ffca911c188,0x7ffca911c194,0x7ffca911c1a0
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,8341370969756688595,11768719523821265086,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,4292298092850388333,1384465359580512104,262144 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,4386668393434780730,10960757130505526713,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,3483884347728430775,3593636653786853621,2097152 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,6032629520267224597,16328391547266941531,2097152 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,1046117666108130820,16618312207436102416,2097152 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14228218591066760368,12513562220482059843,2097152 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7950937051756465850,2915943832603320143,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,15772976198239344331,14736307992418475731,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,8629026888781554225,3735739784703455539,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,8629026888781554225,3735739784703455539,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,15994321513279396631,820166131501984181,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,17488503361952558424,4725213963759539274,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,5655683289766199844,3145267112298227828,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2904,i,7723023432713203874,4513712849347956763,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,783754873219715732,4063406226163143233,524288 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,13030851754564164833,6673646936210538115,262144 --field-trial-handle=2200,i,2422501257316162062,5586369045575375376,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 418b0972d2823e8e550d35981b89397fcd5210e2274cf4f56e3451821d6a7890
MD5 e046cd5bb6a864de2118162e970880f8
SHA1 ef8d81fdf3cef275deec636135c3d23f5d15270a
SHA512 507df90952e8f7edaad5f92b2cdbe65c401e1834152c85e285ed0b3ae0b593f387603749068c0430909126143ddcebdff5523d016b088a13365ec24edf6f7ab3
TLSH
T13C51C5C10D7301A0E78B42700CD3D9837634A87249832E1B1EE7C4BB5B4E76A4DF6344
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 eab1ab06af5d8f31a45e83d00b7adf1789497f2206b9bfe399d5022a4b39c546
MD5 2016e096e0ab46b161d6577ea5e7a241
SHA1 9f64ee8bd6b60dbf875cc308cdd53f9ce2800179
SHA512 ca461c6a46935e422cc8f25576b7b079187acdd25ad63412421ecb1ccc89da5e0306072c47c71e35c5dae8a5ecf290247110a13b715fff0de580e8bb45465c1f
TLSH
T13831ACF7C3D4867E890156F09B24AE2BCE1D055A82283C1AD9E8EF5B93F3071D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3953bfd3acbc9cd900795d2295ee8d576a4ba56ba0accb43e3364612d497d06b
MD5 0f6a70807814f90d14bb6cf122ef9337
SHA1 fa9970ed2b6da67291d26f3e375d6b32cebfd502
SHA512 a07545ed5ff8c56ca1e57e3cc4031366c033010a55e87646dbf16e6ce42c58597ac18bc4e493bf5ba2b72af95fee8379e13b51a0fbee89f1e0e836d6d6165c75
SSDEEP 192:sxZPRmWp/fvsMjIdpdFHW6+WNGY36amcIgrJ:sxZPfp/fvsM83HbGXi9
TLSH
T1D022D8116E78A97B8CC7D20DBA25BF13D6F9503291D11E58F6FC861C05E6ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 703d139633fd1b69fae3e569d5b049097ed0e8546c0bf2f86f5a389f9924e043
MD5 8972b53978456d10a6699ddeb7dfc576
SHA1 c957f46b09d56085746a0c51e7b888af6db14b81
SHA512 a19a7bf2f5e0ceec3e0faca7984c8c498e507776db2b5a9dc8763cbf49fc916aa6f5b460fbad04d9143d26b14b159b61683b711347ec59cd7df6eb1b46bfb3da
SSDEEP 192:sxZPRmWp/fvspjIdpHFHW6+WNGY36SmcIg5TJ:sxZPfp/fvsp8lHbGXaH
TLSH
T13D22E8126E78697B8CC7D20DBA65BF13E6F9503251D11E48A6FC8A1C05E6BCE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a99afe5ad86c10a891b8756b687671c8b1aba25da46ba1297f9d99663d4979a1
MD5 1422f1a6f06ddf1bc7b7f4ef85644e6c
SHA1 1546c4181b95e2e480250e28e511988e7a0a947f
SHA512 ee1afad59decdbf0ee47cb86b1e01159d5914d1a74c09a4bb9ae8e4c757002482870647d9ba04fae0c7425913572cd2a9e80e2bdbdd822c4503f794fd38ef985
SSDEEP 192:sxZPRmWp/fvspjIdpdFHW6+WNGY36hmcIg5TJ:sxZPfp/fvsp83HbGXRH
TLSH
T1F722D8516E74A97B8CC7D20DBA65BF13E6F9503251D11E58B6FC861C05E6BCE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 279103350f792f944fd3fd21739248ef56170742bac60597d943b9ec11e51239
MD5 e6d29beb9e6ccff47d4846dc5e4280c5
SHA1 828d5c24ffd8d6158740f6587b1f282e7494be36
SHA512 85118ca5c4ab2a5c845a6a697af63175ec11b0f81c25e775bdfa21d16c46228f538b545a5f32d87adfb84183331bd3ce78ccb42b032515ac2699f9f5099f42a0
SSDEEP 192:sxZPRmWp/fvskjIdpdFHW6+WNGY36amcIg5pJ:sxZPfp/fvsk83HbGXih
TLSH
T14322D7116E78A97B8CCBD21DBA65BF13D6F9503291D11E58B6FC861C05E6BCE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 acb0ab1ccf55681c202d9eea5c44d98b8c423cd863db5314003cde8d5a508fd5
MD5 0edf08293b8b994c7df579bfeef5ef9b
SHA1 cf2c88002de1a41acc16388394014a92ef4cee19
SHA512 caa90060e27d23b549c70c26e95d5edfb9dc0d717d36df4af313cb445707a36b10881816200b0d9980b62f969e9e6ac249ebd6bb69541483331217e924087a90
SSDEEP 768:hJKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/uroN1:hJKlm7QWvUYe0u1ja8/L/E/lN1
TLSH
T1CEC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0005bba1b0f1b10b2bde71f4f09ca2250ee019c0f8e33664186d099590760907
MD5 2939a04346a5b12f6eba62749803c9a4
SHA1 40aab724577ff27d8be3e48dce5b35c0094dad92
SHA512 1f66db5500eab56c219cde3d22578a746784cac41617ea00d9463f0cd4f479d20db7a8fcc313ca88b85414e7837aee431982c5cfbf7c0f9038bd1437511dfed6
SSDEEP 48:K0q1YEqo4pb0TkIS8pK9g1apxS5YrMYayL2xMwuUUNb4PgISINK9s1uNxmdYHYgB:KIRyKqoy+h2KyQFNWK2oS6u8KXK5
TLSH
T172B1EF1131BB23513D7D394984669B1F428231B23419EA2BBFF911B24F6EE485EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c00a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c00a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 399313f544adeda67f9b6042b3d8489b78d233cb47eb2213ae61039541da4095
MD5 11a078a34bdbd0754909e176e0beb846
SHA1 6c9b9723aec355bb2b60a71c1fd4670370e682cc
SHA512 76672267b4e77ace8353cb696a8f3d67dc818e16bf9a6177a875b009d81460b35db76215d777197355a7f675ccd64e703410d94abba53370b2fdd869c42148fc
SSDEEP 384:xZcIhsNbzvYbC4gh//TymmtgOIwZOyG9oC:ZhcY8/b5mXsRp
TLSH
T197827D329CB89CBB6DF7A184F08772038F748067E7C56B9495EDAB1D05D62A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 368aaac644f3d6c263330727279f6161734ab66d8a021e4fa4974ac4100d5792
MD5 0233afedb1fb97fe1fb9620f9a75fee6
SHA1 85dbaa2dd92edff20dd7bc6d4e5854a1e0e42b13
SHA512 059c0b215496801edc18936693404a2fd2ed4d21c024e5ef5ba19ceaf64e9d9646091a5eb78aa39afd96264a9f1012e72ab4c74c1e38be91bd09c8f36237e742
SSDEEP 96:KqONk+QsjpfbURH5ih/cIPURHl8h4otop56TDIBmP4v+Y1xf//ojdoxyqsoe8x23:BONm6JUiQmiUyw8Ao//Tet+NxXqZU6
TLSH
T1D9120B35B8B8AC7B5ED3A954F08736138EA44127EBC56F94D6DC2E1C05DB2AC6307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c37cb38d993124ab5d615cb7a5835d388df4a026fa0100239b204b6a98b8c37f
MD5 19bdf520d62e845a73df36b7283d19dc
SHA1 facbe7bcb7e530fa3dc3e75e8e4769d6c0f2173b
SHA512 a420dc257b618f83217f3e42e17e55b6fdafa4a997127c9ee5f78afb2b770c19f7c60835f5622e1630f0a7af712694ebabade0000af0e27d73a91988774d516e
SSDEEP 384:piFiZcIfzsNl8TUNTUlIlivYbC4gh//TyOmtgOIwZOyG9oC:AFQbYwgUY8/bXmXsRp
TLSH
T112A27D338CB8D8BBADF79A84F58A32038FB44077D6C5AB94E6DD9A1D01D61D8130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b0f6ff112935dc2560df8fbcfc282ca46ed060e8babd6c87abac6477ff9b75b0
MD5 e0a82a07b41e12f76c7e4802aede1364
SHA1 2f46fad55cfa3b033e33183ea5404918028c9802
SHA512 6956408f0a1d19388c44c7c4cc1eea98215ebc0e33c5badd7dc3f3d1b10f28cc07fb0faa1e5806d5bea96fde9c53d3e6525166d00e38b630924052e20d4d894a
SSDEEP 96:KqONk1QsjpfbUmjH5ih/cIPURHl8h4otop56aDIBKP4v+Y1xf//ojdoxyqsoeQBF:BONl6JUm0QmiUyn8so//TeQBCWVU6
TLSH
T1C602D839BC786CBB9EF3AE45B08777239FA4106BA6912F84D6D85E1D01D725C2303D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfdf8e08-9a1d-4048-a8ad-e854b1737bba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfdf8e08-9a1d-4048-a8ad-e854b1737bba.tmp
Size 18KB
SHA256 ff37507ba88e0ac8468d091af1ce09ed3ea0b8fba8334693644c0b1cf59736e3
MD5 dce9f529da2c755b7e0ddd89f765d642
SHA1 e993772678a029470314b7a9eba7bebf40829973
SHA512 e6bc35ab2b01ac45eec6f422f5c39be028907ef5bffd991c4e0697532a811d6572a63aacdb443dc5850c69138e96c0206963f90a759b3c56a72188b17118b1ea
SSDEEP 384:9ZcIhsNbivYbC4gh//TymmtgOIwZOyG9oC:lhvY8/b5mXsRp
TLSH
T1E4828D319CB8ACB76DF7A184F08772038F748067E7C56B9495EDAB1D05D62A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f1e1bc5a88f65c2a6cc232a89b4b42ce5484ae80f93e418e04e1e8ac0880c0e5
MD5 2c9ddc721bce5a5ad744d4b3096662a3
SHA1 0b42a167ea1ed290924de1147575d46a00e45cc1
SHA512 62529d91c005056734e1cacf6c64c26eea09406c2d48263c900f0b17330a4032b65e033a808c28e06daf8238d3ef788a3a94b2d2ab27594855d2d0ceee52f463
TLSH
T12E41095CBAFD2148B3B76E569BF2A86D487FB8372E06D05D10110E4E0A67B40CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download