b3f873a2bd042c20cc1d4da543c9107ce9738e1fd3aba474b76d6db32408c4fa

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vishal1/index.html
Size 4KB
Sample260820-plz3eack4x
SHA256 b3f873a2bd042c20cc1d4da543c9107ce9738e1fd3aba474b76d6db32408c4fa
MD5 069cf64ada1da508bfd02f35ad1b4a88
SHA1 172e8693dc136984cbb5da322ca4d01f541efdca
SHA512 817ef74041d781cf5b827bcf19f0acd2e19699daf0b98f6f88609f49a98126967cb97487b7f8947016705383e64ff5391c0e9e91d15e550d6ee09961bbc46270
SSDEEP 96:xrOrhV+kTDYHvY5zu2pMHHJgyWYzVXTfhBi7iaLrM:xrmhV+dvYgFzV1BibM
TLSH
T1E1913178A1F204A760E3C6B3B6C26F6BADA8C91FD667D5A071DC81812FCBC418D47304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317023532686653"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{4D0AE89E-C829-4B1A-B31D-9C5DC128D157}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 4312	1600	msedge.exe	86
PID 1600 wrote to memory of 4012	1600	msedge.exe	87
PID 1600 wrote to memory of 2904	1600	msedge.exe	88
PID 1600 wrote to memory of 2904	1600	msedge.exe	88
PID 1600 wrote to memory of 2904	1600	msedge.exe	88
PID 1600 wrote to memory of 5044	1600	msedge.exe	89
PID 1600 wrote to memory of 5044	1600	msedge.exe	89
PID 1600 wrote to memory of 840	1600	msedge.exe	91
PID 1600 wrote to memory of 840	1600	msedge.exe	91
PID 1600 wrote to memory of 840	1600	msedge.exe	91
PID 1600 wrote to memory of 4304	1600	msedge.exe	92
PID 1600 wrote to memory of 4304	1600	msedge.exe	92
PID 1600 wrote to memory of 4304	1600	msedge.exe	92
PID 1600 wrote to memory of 4744	1600	msedge.exe	93
PID 1600 wrote to memory of 4768	1600	msedge.exe	94
PID 1600 wrote to memory of 4744	1600	msedge.exe	93
PID 1600 wrote to memory of 4744	1600	msedge.exe	93
PID 1600 wrote to memory of 4768	1600	msedge.exe	94
PID 1600 wrote to memory of 4768	1600	msedge.exe	94
PID 1600 wrote to memory of 4668	1600	msedge.exe	97
PID 1600 wrote to memory of 8	1600	msedge.exe	98
PID 1600 wrote to memory of 4668	1600	msedge.exe	97
PID 1600 wrote to memory of 8	1600	msedge.exe	98
PID 1600 wrote to memory of 1156	1600	msedge.exe	100
PID 1600 wrote to memory of 3792	1600	msedge.exe	104
PID 1600 wrote to memory of 4220	1600	msedge.exe	105
PID 1600 wrote to memory of 4908	1600	msedge.exe	106
PID 1600 wrote to memory of 220	1600	msedge.exe	113
PID 1600 wrote to memory of 220	1600	msedge.exe	113
PID 1600 wrote to memory of 4704	1600	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vishal1\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff95724c188,0x7ff95724c194,0x7ff95724c1a0
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,9533888005967024809,16277005819801744502,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,11027202995149357691,7329847056253713952,262144 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,4889078794267201614,4310746002069031919,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,2185441448588385899,9434761824001541227,2097152 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,8563116743966094247,2049327360242200991,2097152 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,6233484778938942461,3042888537786925176,2097152 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,4719110507546719615,18192797456222744380,2097152 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,14899449583260732513,158489133258187718,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,9094392965371062417,16967783978646210710,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,8995937607733938575,1628067313381390777,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,8995937607733938575,1628067313381390777,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,12425054091960882061,14791725994701648901,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2919877223865981139,8115515337817280813,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8511115627613393947,9375130150095673480,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,9872637012332941446,5768563372229764465,524288 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=784,i,10267827574145318531,8759820205505271967,262144 --field-trial-handle=2308,i,410973954269365872,5360795308743555657,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 405fb679910ad8fda0577a64ada193287053257723206a5683a8cdb36725c382
MD5 12eb6d64c68b790049591901cee4986a
SHA1 955262f9dc14fe16c0634a52fefdf25a8539391d
SHA512 09b3a21623b94a5dbe7db749e09ed3e3eb40380fb4a182b44ad99a40b232a2d9fd98386beb5673bbf94fcec69dfcdded25a17dc0b7118aa45e32fc491e34fa3b
TLSH
T19471513B126209BAD3AA8033D0F323413577AAEAF4235E5A17708CB76634B52B15957D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6b0b3b6ee2b0b71bfc4d7c20f69b50edc861ef51c10af9f5aa0e832c001a63cb
MD5 590e69a090a03d8528a8a2d2029f862a
SHA1 b0f2110d53190704ae7cb6819a9327d538044c6e
SHA512 46c9ba197ac525de993c480870cccab6c1ce8b073b31f5d2e1b06813d22a8bc990cb7c12835dbce3318c1e42335a792902971a7645da318867576aee5bc6f373
TLSH
T147217DF7C3E4867E891156F06A24AE1BCE1D0506822C7C5AC9E4EF2B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d760985f0671a6d7aceb87cbf2fbb637c22db7439c47280cfce8cd03ccd59be4
MD5 04e4378f3d0947d8856cb856f990aba1
SHA1 ca4ffe72508454153a0838c58dda5732c4570107
SHA512 c44daacb11f4463617fca43be3367c133f5b17ce6bffafef1ee2788f4c5c324cad89942b3ed76d427b73000965809c2068812b5b2aa4de32c32c07f08861075d
SSDEEP 192:sxZzR9ZyM/jK1Ml8Mk//f/Xsx4Y8Idpd4HW6+WNGYIkTsvIgrJ:sxZzLM//fvsaYluHbGx9
TLSH
T1C942E8126B346977CCDBD209BA457F53E6F80472A2944E48ADFCDA1C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 df735f61f136f5ba4e8ed9e06b8540706b26d0a74fcd4c7fa75efc972e22bc44
MD5 14fbad25e558881c00ef5a8e2269c186
SHA1 337cc8d82edf1ec9c7b5751ed2687a8cafde31ee
SHA512 a3b0b1ff43b93ff0c179d14f6646f50d916b685a157cc9adcf9422de7df01194bcffea5ff5882f482c0e53a8152e8380192b32de7e539a612b74cf5f0568d5be
SSDEEP 192:sxZzR9ZyM/jK1Ml8UQVk//f/Xsc4w8IdpH4HW6+WNGYIyupvIg5zJ:sxZzFqe//fvsLwlYHbGLv
TLSH
T14152F912AA346977CCDBE209F9457F53E6F4447292940E48ADFCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e361a615e856ad78c3a8d78ecdd5448870554cfe0a988aeea88d031a00bb6bce
MD5 20659d212ee65229058d6e971bca33a2
SHA1 f7b6ee1a7e4a50da531694747ab876e9480aee66
SHA512 d4add3f998932e080625e713f1208b1c5d13b57dcc72b681a65474882205e0a079c74ff38ae4ddb715bdc6bd146d01e7a49db19611d3fc07abb779cec256d429
SSDEEP 192:sxZzR9ZyM/jK1Ml8Mk//f/Xsc4w8Idpd4HW6+WNGYIMFsvIg5zJ:sxZzFM//fvsLwluHbGtv
TLSH
T18B52F9126A346977CCDBE209FA457F53E6F4047292940E44ADFCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 91ac0614ea28559f10ae77b3c50af29acaad7ecbe58d88fbc52d08b21258f6f8
MD5 665c31adae82ea86d271f727a0c50276
SHA1 c834022b987d49448c7d3808d0b5d6ccc34b28f0
SHA512 29503271d156aae8b560aebe8079560ea73a0804e2a8bc452b955797eb96d26035cc01b49baec3f3c09c4b4021667ec90a5393f471732a8ef2072875832d5188
SSDEEP 768:KQsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9aroP/p:KQsqxXlWvJD6Tu1ja54LAs9RPR
TLSH
T14ED21B3B694CC77E4F840E9CEC266FD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 5b0b726c26aa3600b8f3269d9ff1124c96f002e6af493a611381e3f5c1e38b45
MD5 a9ad0ee0e50ad9c69f354d41568748da
SHA1 51eb90e33de2218422b9c1f7f9bca665d087278d
SHA512 46f8f0b44b466ed6eaa4c28b4701abef6ef705ada7577c6326bcbef8701d7e9371d9c52ebbfc6eb52d5a1e72b1feb362ec1e5e6dd9d5b2ca53d4a0f003867d62
SSDEEP 96:KYbaKYIK6m0Knq6+HuKYYj5uKiYCiE4KxCR:ExX/l9Zfi
TLSH
T168E11202717F02033ABD7908A2AA89374E4275A37458A4BF3B7954614EB7E115CFCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 372f1b9fa6a93324c3089e78f2e644ba555e493821696269462837a025a72dc5
MD5 80d86543af055f6c68d6a0911841c062
SHA1 9b72e0bf938de8413d45697b147114f97a3c7515
SHA512 45ebb5e8cc30e871bb63987b3f507a967bda429d433ab6cc27027191f57f879e926681ac7edf93ae666d349f42df996f8ad9b7b4bbb2019b6793f49ab3209fc3
SSDEEP 384:yZcIhsNzZShbW3xVRNwOWG9JkYivFUbo3:AhTaXHwOp92YiW8
TLSH
T153827C315D385C725DF6E585F64B250B9FB88027EACD6F8484DDAB2C01EEA9D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cd7d45db3f537fd01364a5fa7af463c477fe846b5e46f48c3a358d9327805fc4
MD5 a0106c48098c735722335eebef400b91
SHA1 eb6fdc51b9d34836d4248392dc6eae2cd75447a1
SHA512 46d5fcdbb80da6c15120e95c05b0dbbc35fa2bc09e89933de8b938a9aafa639a6ba1b7fbde82732d9056848744a57ea0566dbd633860ff52af4bd99e8b3e59de
SSDEEP 384:gZcIhsNzwShbW3xVRNwOWG9JkYivFUbo3:ehwaXHwOp92YiW8
TLSH
T180827C316D385C725DF6E585F64B250B9FB88027EACD6F8484DDAB2C01EEA9D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 93172259d1f8bee50d6b697df56fde055a60a3262af725b399049f79ff5e7a9a
MD5 aa80aee150577c5a470e7cfab3a16ffe
SHA1 61984f6f1e9aa7335c310a1e05c6bb0ba3df8f77
SHA512 4947883d7510a86080dbf924e05a1d982feda081c003ddf9379fd48757b960f965df13f461b84a4a36e42305253a01e770a4e5449dd23efb1c8ea819149e213c
SSDEEP 384:8ZcILsNzwShbW3xVRNwOWG9JJYivFUbo3:qLwaXHwOp9rYiW8
TLSH
T1FC927C715D385C735DF6E585F64B250B9FB8802BEA8C6F8484DDAB1C01EEA9D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3d301f3d7c4728aa2bb4f709ce8fef37c108d150ef3ab67c2fd82e247bcc481b
MD5 79e562d9cb1aa1fe667af8f3e4427e85
SHA1 5f758f1ab4f7bb43da0c2ecccab119e910df9263
SHA512 255410addb9084f809262f721417ff7f28098788a6fef78e1158330a82f61d6b1ef106e9f49280ee07d924e93481a843b5a1097bb3e9f2290ae1d3c4c39a8f05
SSDEEP 192:tONg6JkRtQmiUy5FW+RNwOmhOmQh3mRQU6:tONg6Ur0W+RNwOW0RU6
TLSH
T12002E93568382C779EF26E49F54B27175FA4107BE9852F84DAD81F1C01D765C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 950f7e426dd542204f4156ab0e3e75f8785a79da88b64cef072f26f58473664f
MD5 99fd3c15c70a5a070971cf8e9a65782c
SHA1 e3f693713ee76b022225e5e113486e8f612f578a
SHA512 97fd7c4c11796bc91a8be5df0a7266885f8ef6e273870943f4ef477a4535a1916a308a72f1c6052d950c3c00a9a1ed23f02af72d9e02aa9ab7551fbec2e44357
SSDEEP 192:7ONu6JkRoQmiUycFD+RNwOmhOmVU9DFkVcWq+VU6:7ONu6UIfD+RNwOWG9JTYU6
TLSH
T15E122A3168385C7B5EE26885F58B36079FF5413BEA896F80D5DC2E1C01EFA9C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 225f3ffa04145ee589c7d6a8d659b524354344127f282c8b674cea292326f2d9
MD5 ca6161efdf390af8d6a5aeddb1840bb3
SHA1 a0d122b6f67ad28c52724fde3ca3a36e7102dfd8
SHA512 88a33da73cc2f7187fedb6c926bc104dadb3e18ae9abcc441fabbc65ba9b5bcdc52062b8ad57ad18c29f5c62cfd60c6c1ba3c81f4f61445b9356384636bf048f
TLSH
T1CD413B58A6F91148B3B7AF5A9BF6A86D587E78372E06D55D00110E4F0A27B04C862B37
MD5 SHA1 SHA512 TLSH

Submit Download