32febffca939ed0ac98eb6e46114dd9ee3a47dd2201a11487fa4c9c072511be6

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 9KB
Sample260724-ak48eaxyex
SHA256 32febffca939ed0ac98eb6e46114dd9ee3a47dd2201a11487fa4c9c072511be6
MD5 40b9d970e313a7c37a187985417a6edc
SHA1 646d0ed6852f74164dc9e4cb70b18aa04e036918
SHA512 6ad2962e96968348f7392ac1dc22e8af42558f595f193faebb866c1d60e6dddfae85d339619fe5b8e06eedc7b0800795c2b8e0692b8c6c0b1fa657d09867bec8
SSDEEP 192:J8UjZpZpXQg3XJaWfDbzppOgg6bugYv31Plj:J3TJlQggd31J
TLSH
T15422D205B5C5105B9B73D368AB71871CEDA34093DB05AD99399C1B87CFFAA008823EED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293258423083878"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{A26C8DA9-9C58-4BF9-AFD7-2FF314D05A1C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe
1412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1412 wrote to memory of 4868	1412	msedge.exe	84
PID 1412 wrote to memory of 2772	1412	msedge.exe	86
PID 1412 wrote to memory of 1848	1412	msedge.exe	85
PID 1412 wrote to memory of 2772	1412	msedge.exe	86
PID 1412 wrote to memory of 2772	1412	msedge.exe	86
PID 1412 wrote to memory of 2724	1412	msedge.exe	87
PID 1412 wrote to memory of 2724	1412	msedge.exe	87
PID 1412 wrote to memory of 3040	1412	msedge.exe	90
PID 1412 wrote to memory of 3040	1412	msedge.exe	90
PID 1412 wrote to memory of 3040	1412	msedge.exe	90
PID 1412 wrote to memory of 3324	1412	msedge.exe	89
PID 1412 wrote to memory of 3324	1412	msedge.exe	89
PID 1412 wrote to memory of 3324	1412	msedge.exe	89
PID 1412 wrote to memory of 1164	1412	msedge.exe	91
PID 1412 wrote to memory of 1164	1412	msedge.exe	91
PID 1412 wrote to memory of 1164	1412	msedge.exe	91
PID 1412 wrote to memory of 760	1412	msedge.exe	92
PID 1412 wrote to memory of 760	1412	msedge.exe	92
PID 1412 wrote to memory of 760	1412	msedge.exe	92
PID 1412 wrote to memory of 3724	1412	msedge.exe	98
PID 1412 wrote to memory of 3724	1412	msedge.exe	98
PID 1412 wrote to memory of 4904	1412	msedge.exe	99
PID 1412 wrote to memory of 4904	1412	msedge.exe	99
PID 1412 wrote to memory of 3316	1412	msedge.exe	101
PID 1412 wrote to memory of 652	1412	msedge.exe	114
PID 1412 wrote to memory of 3992	1412	msedge.exe	115
PID 1412 wrote to memory of 3928	1412	msedge.exe	116
PID 1412 wrote to memory of 564	1412	msedge.exe	121
PID 1412 wrote to memory of 564	1412	msedge.exe	121
PID 1412 wrote to memory of 2388	1412	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b0,0x7ffaf62ec188,0x7ffaf62ec194,0x7ffaf62ec1a0
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,9179325470300676650,8750134262274501727,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,656989373662994114,10198122779478096573,262144 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:2
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,11043321740457405758,17131263696919078491,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,13652851338064162574,15652042527798466395,2097152 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,2108924006025226647,866631840114977836,2097152 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,17998547144620079049,8436221147959002210,2097152 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,9947694599202492143,8240257111794140945,2097152 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,6448075979305135509,5126249168464574474,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,5051613952840926300,11918295780195198694,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,8883104109999793713,17081729242635980683,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,8883104109999793713,17081729242635980683,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,10758811017557662008,9205547790403163539,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,14168062721207572694,1489416545283560912,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,13140153477747540070,7373257880517496928,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,14896624394275582851,11961871598482114862,524288 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,15434520604742610704,13626254856344603511,262144 --field-trial-handle=2848,i,12482569764592594074,2401326464047706832,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b05416cd4c27fb2a0b6e792d36c363a3b144f062209803fef3f775db5a20d811
MD5 210c755f2e081cfb6d20141022b8ab0b
SHA1 654089b27496e612abb6a85cda8e089d5d9151dd
SHA512 cdd066d7fb022afa951fed1dc99fa8411b51a8ec7d8ffd192ec3ea29bee996e75f8c6692306962f2dee8ed556725eb028dcced8c3ac75d6d3611bd95039f3d27
TLSH
T1EC61825D224F3D6EE39AE6F3FBD2174770318495092F5EC31080A8BDA52532CC971C18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d693242fa5a7a25e3e8613764a06da3c41882de2557c090d300bce5f7d28ae78
MD5 c8183f9c029874b17caa23b7b89cef26
SHA1 6d0a2b8ec2935227a4b8c3c7d4db6583d3abd613
SHA512 753c9666cabaf199dbf381b951e2cf9a44393bdb5fe788cbb3b17cba98e3912c23d306af9cdbc9505bdd7d17299d9feacc0a2f0b92f12b907f0f945b8bafd8ba
TLSH
T1E81180F783E5856E8A0156F09A24AE1BCE1D0506432C3C1589E4FF2BD3E3475E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a122518a9f266709724668256a127422f3f89dae4dd14101b1fc3fdb6b385de3
MD5 98d83e2afe7888ac499a47ddcb67cc1f
SHA1 7d8df6efff5d5e1d9119a65bfba1eb40acff01e3
SHA512 379846c69a0ece5077fdc7398de32d76dd55ebc526ed22a4837b8a6302b40b5183dda09f05c8bddb625a54dca6d6ea57a702a5c3ccd011bb2c619a5f27c467b0
SSDEEP 192:sxZ7RAkG/fxskq3KIdpd3HW6+WNGY4wJW0EIgrJ:sxZ75G/fxskq3DlHbGuo9
TLSH
T19C22B8166E38A97B4CC7D20DBA25BF53D6F95072A1D01D48AAFCD60C05EAADD630780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5ddb7dddb1575f5da7009c63bcac80667ac1e241d57533f745c2281bed7698fd
MD5 fdae8dbc8533e221eed2821cf3c4f561
SHA1 330a5af2fa1cb8adf1b7030867434fcda12b7a51
SHA512 f149f7ada698d40f324e9a80dd77b7939a8b5d3b24984f46ee2559c767b6e2bccf2b826167d2037d4c5e7d0304959dd45abce8a14b07e10da8e43485acb44fc3
SSDEEP 192:sxZ7RAkG/fxs1Eq3KIdpd3HW6+WNGY4wJW0EIg5OJ:sxZ75G/fxs1Eq3DlHbGuok
TLSH
T11A22B917AE3899774CC7D209BB25BF53D6F95072A1D01D48AAFC960C05EAADD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e365ba01754d401172a028f7b632ac9dfa156b6097fd26a99268fd5656c8353c
MD5 8cc661274d7cdb314ce12fd84a2105b2
SHA1 3bc1d50608231bcb62d256d29667644bbf95d74d
SHA512 b1f5e3f255e606a966422cb5d2b5fdee1b627e15564e42767e399a28d7e12a2d45bb6118282490d5dd96ece86e670eac75563bf71825e50233a2a35fa2e6b335
SSDEEP 192:sxZ7RAkG/fxs1El3KIdpd3HW6+WNGY4ZhW0EIg5kJ:sxZ75G/fxs1El3DlHbGJoO
TLSH
T18122B8176E7859774CC7D209BA25BF53E6F9507291901E48AAFCCA0C05EBADD630780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a346d28e9508848699d22baed28aec599abc67b0e475259d4d188db29829ef48
MD5 85a31a1484c86cf12d7a7c7e5c29238e
SHA1 07bfe0e4cd14fd8141ee24de7f9552d6271c7195
SHA512 19963b830359fd775504c8ed825cf9c9da505a6b41623c365d87dcf0742677568ddcea9b00086dfcf0c8a7538176a7a9e96b5067ab2520b282dff4a12329bbc2
SSDEEP 768:Q3qirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTfro4DUnM:Q3qirTNWvx7jru1ja5ALocTM8UM
TLSH
T1AEC2EA3F640CCB7E4FC05A9DDC5A6F963EA802CB5A948D4047FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9345484347e541f4b92d5d80e50162d889e0693c97caeba669e10bfc359a733b
MD5 4a4c418920454c4ac8c15243fb7f51ad
SHA1 2f15e05ea4a9bc4d2f582b42fb8079a75e873447
SHA512 16449ce3abcc1606ab3957abeeb0cee7db9e3841491c0be4bea8ffbeea71da61f76ce3bbc1c829734f348ad279a428c8d433733aca748f010010b4d306815b15
SSDEEP 24:KdPfWdUaRdFVF4Rt+4IjxFKiiha/F1E3VSm/M681+yXYRfcHuaLdzfn43b++Ij7T:KkMIvKRWcDyZOIfK3qwL5IxKKc8jyC
TLSH
T10091410235FB52023C3D2869A560DAF75782F1E33019A96B7BA860750E6BE344DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1dfd134-b0c8-4f13-aa52-2293ec9b598a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e1dfd134-b0c8-4f13-aa52-2293ec9b598a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7b6ea5b39ebae13f727a4daa7a98dca1faef12e05ada2dc4eeb21bebdf1f1685
MD5 35446aca54e0ff4db72fe81bc21d9221
SHA1 085e7c1f769cc82569b0561be51780fe0e718f29
SHA512 fcba0ff0a547554fd1062c22b10a57f8dd403ea35ab399706b16ced0e13595934b0603c36fed468755f4ae8b2a5c398e1626a0d0c8f8b4da4b9638286e243ebf
SSDEEP 192:ugm+xasuheOwQxMGsNLwQx7Qrm8dQmiU1v4gJ4k03Br9E3LIZqmOOZljYRHKKGnd:sZcIhsNLwli+KgWkMrSM3OObjI9G6w7R
TLSH
T1B4928D36A878587B9EA7E515F487361B4FF8917BD3C82BC490EDAB0C04EA5AC1306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 8b98cd132af112323ef4450e39766222a373a077f6be0ea044857fedcc559be0
MD5 da5272ceb7dfa1d64046a53f2d2234a6
SHA1 34479893fdab50d4620c7de0cec60a27a4f82a08
SHA512 38e6653721edfc9b5c5ab69186e1f65db000986f4cb07e961c771e7d7286ca2aec3b99db5e83c3d14d7dd4fef0345a74a79f1f4cdbaa909f6a3a24b7a86de963
SSDEEP 384:9iFiZcIkzsNV8TUNTUlIl5li+KgWkMrSj3OObjI9G6w7R:0FQYIwgTvj329MR
TLSH
T1C5A27C339868997BAEB79A45F59A36174FF48177C7D8AB84E2DD9B0C00AB4AC0306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c2a602b04dd8a81fadba07ba970de9bb454b675e03f4720e392201115e480550
MD5 8b0ed7a3c81f7b6a4f8807fa4cb51b64
SHA1 c1d379a1fa2ec07eeded89a813d1f5e36883c0fa
SHA512 7e8aede04c473e955e5d5cfad8a28766716279e1f2d6c9f53f826b9546d6246f288174110f9d438ec398e3a045c736e4bd6a039615c08cc111189b139b97d6a9
SSDEEP 96:ZqONkoQsjpfmUTmDK5ih/cIPURHl8h4otop515DLBhPwivh50xy0SFYKcAxMbsaB:gONo6kDfQmiUyH1Z903B4Qi/W2+U6
TLSH
T10B02E83968782C7B8EB3AE49F58737275FE5113BEA952F80D9E81A1C40D725C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 40c52cbd889dfda5871179cfaf75dbb37b7805cd171bd1b1a999b074ca133d9f
MD5 6039828e58130d1f39f00033c80bbe7e
SHA1 5b8a3bcbbe1d2318ca726fc1f26ce4ff4998fd68
SHA512 60c560169e0bb20244ce6f71036d47709104abf5cb4eee2c91096d2d03a275d63a3d7f32274ccb8f25332b930c63869d67594e0851fdcc3b097d8d53f0e3252a
SSDEEP 192:u1m+xasuheOwQxMGsNL5Qx7Qrm8dQmiU1v4gJ4k03Br9E3LIZqmOOZljYRHKKGnd:RZcIhsNL5li+KgWkMrSM3OObjI9G6w7R
TLSH
T1E8928D36A878587B9EA7E515F487361B0FF8917BD3C82BC490ED9B0C04EA5AC5306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a0c5e6a3026b0776d52b523483c67bab4146aa21b93cb10b9dc8dfda886b2573
MD5 695888fc9627dd0b12d4e94c2cbc07ea
SHA1 3e5ac61cdc2d1ab7f3a20007d13c7a4852c4fe06
SHA512 8817a0b906fd209fb17778c0dcfe949af82754978c6f4dbba679746643ae852f81ff37a0226b54cca70b5345fed4c3f068e0fc3c3b9dcfb71cb6b64784416caa
SSDEEP 96:KqONkF8QsjpfmUTHK5ih/cIPURHl8h4otop51wDLBQPwivh50xy0SFYKcAxMbsaU:BONO6kyQmiUyY1C903Br9EocRZqmU6
TLSH
T19A121936A87C687B5EE3A945B48732175FA54227EBC97FC0D4EC160C04DF69C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65e88999-6566-4dfa-97b9-a7016f85244d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\65e88999-6566-4dfa-97b9-a7016f85244d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3bd86caf1ee7e45e9c74905a008fabb582dad55a399a4a3554a6816e817be520
MD5 36dce033f81f4556534f245e290bc67e
SHA1 970494a72cd0e442f5cdcc22467509feae4a8757
SHA512 3a177f898e7a822faa95e8c34057c22138a1fd6dd3411f0abdbedf2a330ec035204e7a2d8d1d7a2d71025332032b0993c021890ed64da691cea341cb4a197915
TLSH
T1BB412968A6FE1148B3B76F569BF2B8AD487A7D272E06D55D10010E4F0627E40C872B33
MD5 SHA1 SHA512 TLSH

Submit Download