2d9cfe10bdebd0f5f4f73276a9cda06e9cf91d9b87af35d277c69a341263e472

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 17KB
Sample260729-ap2cbadb24
SHA256 2d9cfe10bdebd0f5f4f73276a9cda06e9cf91d9b87af35d277c69a341263e472
MD5 67d9739893854fe7e6bcebc67276be09
SHA1 8a85117c7bd16c7a7b49e7d75a593add46cb8d0b
SHA512 d6a8568b206d079481ba7091a0b240e89f2237579cc194cfebc8466f306de55c28810c4e38e96a0103ab0d303e37412a261b31ea39bc4ee2998e9727c6d05c02
SSDEEP 384:ZqD5hOuVVXMg+02QLPkoPu7rCFX4/lzsuwB3qZH5qpSbc8YvVDMgCmQY2xil1Zg:ZqD5hOuVVzn2QLPkoPuyFX4/lzsuw9qV
TLSH
T1D782E533A38038BF172345D6B5A673E7F16A9118E3410C4095BCC1AD8BD6D85AA3FB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297588838333378"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{161892B5-8882-473B-BA0E-8068516F9C04}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1904 wrote to memory of 2640	1904	msedge.exe	86
PID 1904 wrote to memory of 1192	1904	msedge.exe	87
PID 1904 wrote to memory of 1428	1904	msedge.exe	88
PID 1904 wrote to memory of 1428	1904	msedge.exe	88
PID 1904 wrote to memory of 1428	1904	msedge.exe	88
PID 1904 wrote to memory of 3636	1904	msedge.exe	89
PID 1904 wrote to memory of 3636	1904	msedge.exe	89
PID 1904 wrote to memory of 3936	1904	msedge.exe	91
PID 1904 wrote to memory of 2388	1904	msedge.exe	90
PID 1904 wrote to memory of 3936	1904	msedge.exe	91
PID 1904 wrote to memory of 3936	1904	msedge.exe	91
PID 1904 wrote to memory of 2388	1904	msedge.exe	90
PID 1904 wrote to memory of 2388	1904	msedge.exe	90
PID 1904 wrote to memory of 4436	1904	msedge.exe	93
PID 1904 wrote to memory of 4436	1904	msedge.exe	93
PID 1904 wrote to memory of 4436	1904	msedge.exe	93
PID 1904 wrote to memory of 1508	1904	msedge.exe	94
PID 1904 wrote to memory of 1508	1904	msedge.exe	94
PID 1904 wrote to memory of 1508	1904	msedge.exe	94
PID 1904 wrote to memory of 3968	1904	msedge.exe	98
PID 1904 wrote to memory of 3968	1904	msedge.exe	98
PID 1904 wrote to memory of 2884	1904	msedge.exe	99
PID 1904 wrote to memory of 2884	1904	msedge.exe	99
PID 1904 wrote to memory of 5000	1904	msedge.exe	101
PID 1904 wrote to memory of 2932	1904	msedge.exe	106
PID 1904 wrote to memory of 2468	1904	msedge.exe	107
PID 1904 wrote to memory of 3340	1904	msedge.exe	108
PID 1904 wrote to memory of 2836	1904	msedge.exe	113
PID 1904 wrote to memory of 2836	1904	msedge.exe	113
PID 1904 wrote to memory of 5108	1904	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd9b3ac188,0x7ffd9b3ac194,0x7ffd9b3ac1a0
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,9475824584731790635,6345944720124715448,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,1696027128659852809,8717475240715002737,262144 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,1199307878263591460,6694915155786959832,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,17484678099679291530,16793369629929963526,2097152 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,10630678345660673221,4302555321102549144,2097152 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,11046338599793335471,15077229283789406036,2097152 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,1259828772535634109,13507390567385288840,2097152 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,18051246092684392606,10656876539789076974,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1238238769681166512,6772247712890762032,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10430195901989991142,8596075818094083415,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10430195901989991142,8596075818094083415,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,3816299602338891963,18295027427393671327,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11676162319102354311,13827256902609942857,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,2312276291042666190,16035898716028524834,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,18230009909490459997,13860826449907006536,524288 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,11118191638988713233,6769987736210442312,262144 --field-trial-handle=2388,i,13739789681850449518,17532608334543638392,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e48f50bf03cbadb8edfa43c4cda8d5b1d714be6e95bb2fa0b3ea9b85861b8c29
MD5 5ab2fd2721866ff96c09cba142e5c44c
SHA1 4cb9db9e404eaa76b509f4e042cc695f821b7503
SHA512 8de1da3b33dc60ef562b7c2afa781a214c4c90cfd7767ff710f06e0abfbf20f16de84c1649325a689b90cf9b9f284adb28fd9a606ed47df0af6f43b58049723f
TLSH
T17861603E101109B1F3A142B353C249C5BCB1F7FBFA63FD46E159ADB91B06B41C659188
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5c9a101a9f29edaf0e86889fabf32aa489f2e3094c7ef34a4594875a267425a1
MD5 d8f052d283b7bfe0d69ad5bb377c2e13
SHA1 1ee2cb5715ed65ae10877f9be630da0272cf35b1
SHA512 e86d5c6c203294b43257e63cb62ab0c1230eb75ed6104e50bdf05e0075a4d0d1b775289069d6af8d3d40bdb3687042976dd66bf78e473b459fe1d4e8a1edb308
TLSH
T15C319EF7C3D4867E8A1156F0AA256E1BCD1D0506832C7C56C9E4EF1B93F24B1E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 70ba0f94edb0b18dba4b55ab246100df20a714f1e3464871699974483ac59cc5
MD5 9ce6d79aef51a308dd0714fab4a82373
SHA1 166146e9e7e15a5aa7bf52d088e23b637a537e28
SHA512 dd5c9ee6ba21dd014bf156f96ee73b77a7434a24f62b69375b1e4920cd9f3482cc17b9dafcd842efcb820a50cc035aa215a11e8ff801e567fee032353f68bb65
SSDEEP 192:sxZBR1kj/fjsSKXLqIdpd8HW6+WNGYzQklHIgrJ:sxZB0j/fjsSKXnuHbGm9
TLSH
T10922B7166E38A97B8CC7D209BB157F43E6F9543291941E48B6FC960C04E7ADE230B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 76de42168edc4cc8d175a5d42c12e0103692e4cfdef08b6c65a88d769bc9f5c5
MD5 e850ee2c65aed603372c402aecff918f
SHA1 702300eacd0bb98b2c9a914f99418f57d8441863
SHA512 5875ed26eddf062d2071fc5cd1daa10f04c98c569f8bbe44f4a364452d4e3f90858604e9c29fc830637d518ddde5bd897ecfdc2c4a3cfe6b0b3fc2b7ca37e62d
SSDEEP 192:sxZBR1kj/fjsWKXLqIdpd8HW6+WNGYzQklHIg53J:sxZB0j/fjsWKXnuHbGm/
TLSH
T1C522A5166E38A97B8CC7D209BA15BF43D6F9543292951E48A6FC960C05E7ADE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ceecd35457eaba151fe424b241e1144d4d2cf5f25a1261780362de0aa38a17c4
MD5 cb8f0c6ab41fa4119a090420e6eef855
SHA1 4829348f9a5b7cb8de2600d71ef2263e3397c5ea
SHA512 08bff13a473b240291c5291573df09351898d6478a1ac6c8f2704e0088fb019c97e56ea0101302942053522302428e42fe3695355a1102256f77467b9597dc69
SSDEEP 192:sxZBR1kj/fjsWIXLqIdpd8HW6+WNGYzrklHIg5FJ:sxZB0j/fjsWIXnuHbGPB
TLSH
T1F222A5566E38997B8CC7D209BA157F43E6F9503292951E48A6FC860C05E7BCE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0335a681ef2eec32cbc79ca20f5eaba8ac3e5643934e7ed544c6915e09d303e7
MD5 55d78714bdfa89b5236e8fa3efc480bc
SHA1 69250a9d884f42189c2298b78980da367990ef14
SHA512 75a525fddef8cf22ead897d47ba31524f74ee6ef7536994e26ee31aff8d0509c18565bd048d7daa84e7c28605d1cee941f87793407c4d1e39a4a0198921abaf3
SSDEEP 768:r3k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBIroy4Y4:r3k7u70WvqiEau1jai5LA3BzO4
TLSH
T15FC2E93B740CCB7E4F800E9DAD566F973E9802C7A6948D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 046aaf797a344114d96c935553de3401387bf848c940c6a806e6679106201ac8
MD5 dd2a237387189cfdb92de01b2d50c994
SHA1 f11f682847ea7d79ad24df0b3d7e42c4ecf96f85
SHA512 a8e8bf484e9cae07f26841514579a8be582384fee0becd9a9b16616ef451e4250cb146327d4bf20ac2d269554c72352f94017edc590856d295b6f2834586435a
SSDEEP 96:KIbCKc3/WKQouWF8BVr/7gfH6z99gKV19jgxN9qDjYYKpj:sSdWF8BVr/72H6B9J19juN9qDkj
TLSH
T18891A855303B06413CBE689892A685768E8232973899B56F3FB804624E27E174FFCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14ac6328-a363-44df-b743-ae89175da125.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\14ac6328-a363-44df-b743-ae89175da125.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6ffd6ae92845771432e2ec2d821f5b186b582db6c455060256efb26da3c311cd
MD5 e2dc98544844938e6b5018e69760533c
SHA1 e2aa1b4f95ec83a231681aeee21e9d8fd32cf9ee
SHA512 d12e56b89be8d53ec8482967dea3846db5da1c1159ba69d0264970a0d9dbe8bcbd14e02053f0ef36dd5c24bb71cf50f2d832a506d5be1c0a6ea76213e11aa96f
SSDEEP 192:ugm+xasuheOwQxMGsNGWQT0Bbs1QmiU1OAdk4aGBPKrs+FdGGm1pFE8PdNOqEScy:aZcIhsNGWqabIPdbEddm1Q8vAScjmwa
TLSH
T11F928E725C785C7B9AF2E142F4863A135FB89173D7C41B84A6EDAF0C05E96BC1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 606040258069d931d6a30147406e3262e19a50ece6ed320e5f5ea2462928df1f
MD5 e6267fe1d80e6ee36710cabef9b1ac86
SHA1 d601e50faeff94e42f1ccd61e7ea830c332071b7
SHA512 599e06e189d71c59a9d3126c7d95bbf9de83a601ea6f2f74a1eab3d8352eba19dc098d0f0b28a4938054b24fc7ba3a093a68ff134e41a3edbd54ea50e7656163
SSDEEP 192:MONE64BAQmiUy71IW5GBPKrs+FdGGm1/aDGV9U6:MONE6eA0yWDddm184U6
TLSH
T11302E934AC786C7B9EB2AE45F4873B175FD8113BE6905B44EAE81B1C009765C234282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7e6bff675af99ed561c4527ee4ae4c9bd52386efea764609d1a25efdde943108
MD5 d6b26be2201e7d84175515843f3507f0
SHA1 21696b5d0f16cd116829c94e850442ef913d270c
SHA512 265d113539d77af709c3a890f09dd61741d48ebe3012a0e4b92976f41984f4a6e501108d853f7be291a16a1ff6dca424e0f11bfa70c7bd18fe6ce10b8dd9d656
SSDEEP 192:uom+xasuheOwQxMGsNGDQT0Bbs1QmiU1OAdk4aGBPKrs+FdGGm1pFE8PdNOqEScy:GZcIhsNGDqabIPdbEddm1Q8vAScjmwa
TLSH
T19B928E726C785C7B9AF2E142F4863A135FB89173D7C41B84A6EDAF0C05E96BC1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b6734819f2f9e1753b6df661d87307bb2db60c2a3319b8511256ec332008f775
MD5 3b4771128d63dc9888a0c7254ecd2828
SHA1 091cf3038de1a7a13089ce70d61369a13a32bd7b
SHA512 c6e4c55f46601d34b53b6af0d367f0b279030a00523a2a16d7a6d8eea743da5a38dd880b6df883e910b297b3688dab1eefc74d7a5964dde4ca9452b350c2b533
SSDEEP 384:EiFiZcIUUzsNG8TUNTUlIlDqabIPdbEddm1Q8sAScjmwa:fFQdbwggaYdomQ8sA1je
TLSH
T1F9A26C735CA8997FAAF6D641F88636139FF44173DAC49A80E7DD9E0C01AA2EC1307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a165665bc85fe64c6df87d22b1f0c17652214adc392f6b579ac6c0711ae7ca8e
MD5 9bae50b3398ab3d676bc2b1e577addb7
SHA1 a12e7951a653cbfb4f27ca03d92ae277c52eefcf
SHA512 d0be6c81c7df8ec08613c41b672186a31e7f8ea2029e1f31be1ae3171d8f414ce6deadde7853a8ca19850c597c58ff1a1161e18325ee244566279fb27cda3cfb
SSDEEP 192:1ON364BuQmiUy7I55GBPKrs+FdGGm1pFE8VWwOqEU6:1ON36eql5Dddm1Q8ZAU6
TLSH
T1C6120B356CB8AC6B5EE2B545F48736035FA5422BEBC46F40E6DC2B1C05EF7AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77c2a684-17e6-4e52-8687-4799fbdf3bbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\77c2a684-17e6-4e52-8687-4799fbdf3bbc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bbb221dcd52f4db3bf3b14739e71889b599adf47767644e9409ba10b68fe9fdd
MD5 4b1309e92ec4321d1332308d985063b3
SHA1 e1450e77bcb46562ad32b63e9fac9b4fe21a3b18
SHA512 d40b921a290568e8364481a89e3f94a66007bc92526e40efa598e25cac92f86e928a18aef9403d4db8f18a2b2b9179ae884986b3ad624f44e44e78090a565bde
TLSH
T13E413A9CAAFE1148B3B37F5A6BF6686D447A7D772E06D15E10110E4F0A22B40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download