f93315e77d15e2dbb40988f7da923801befeba48c960f204ba37376467309c64

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 949KB
Sample260826-pptpssdn91
SHA256 f93315e77d15e2dbb40988f7da923801befeba48c960f204ba37376467309c64
MD5 d32504244c3e39b39341c57d471a4548
SHA1 9e288ab78be79e81797318ebec37f72f697f0e64
SHA512 7b49611e6d5bae97902a0753ef5227a5c388fff1698d93d715665f75c65572c8098cab4ddf42599cce0b131b83428629abc957ac5efec3938d067fc9ff92ae93
SSDEEP 6144:EGdzz99d9MENMD2GOfhf+UW+ELhAB4e0HAe7uX4vUERsg1Tu:LdFzNrdXOLe0gt7ERsg8
TLSH
T168255DA07244943CDD6763AFB349AD5DEE196602CF9225ECF8B646D042C37F702A235E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4076	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322210810496805"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{83040C0F-3FE6-46BE-88ED-DA4EA1004038}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3852	msedge.exe
3852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 1780	3208	msedge.exe	86
PID 3208 wrote to memory of 4200	3208	msedge.exe	87
PID 3208 wrote to memory of 4076	3208	msedge.exe	88
PID 3208 wrote to memory of 4200	3208	msedge.exe	87
PID 3208 wrote to memory of 4200	3208	msedge.exe	87
PID 3208 wrote to memory of 2060	3208	msedge.exe	90
PID 3208 wrote to memory of 2060	3208	msedge.exe	90
PID 3208 wrote to memory of 1412	3208	msedge.exe	91
PID 3208 wrote to memory of 1412	3208	msedge.exe	91
PID 3208 wrote to memory of 1412	3208	msedge.exe	91
PID 3208 wrote to memory of 4148	3208	msedge.exe	92
PID 3208 wrote to memory of 4148	3208	msedge.exe	92
PID 3208 wrote to memory of 4148	3208	msedge.exe	92
PID 3208 wrote to memory of 960	3208	msedge.exe	93
PID 3208 wrote to memory of 3652	3208	msedge.exe	94
PID 3208 wrote to memory of 960	3208	msedge.exe	93
PID 3208 wrote to memory of 960	3208	msedge.exe	93
PID 3208 wrote to memory of 3652	3208	msedge.exe	94
PID 3208 wrote to memory of 3652	3208	msedge.exe	94
PID 3208 wrote to memory of 3752	3208	msedge.exe	97
PID 3208 wrote to memory of 3752	3208	msedge.exe	97
PID 3208 wrote to memory of 4804	3208	msedge.exe	98
PID 3208 wrote to memory of 4804	3208	msedge.exe	98
PID 3208 wrote to memory of 4960	3208	msedge.exe	100
PID 3208 wrote to memory of 2220	3208	msedge.exe	105
PID 3208 wrote to memory of 1260	3208	msedge.exe	106
PID 3208 wrote to memory of 3464	3208	msedge.exe	107
PID 3208 wrote to memory of 4208	3208	msedge.exe	116
PID 3208 wrote to memory of 4208	3208	msedge.exe	116
PID 3208 wrote to memory of 3852	3208	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x278,0x7fff596cc188,0x7fff596cc194,0x7fff596cc1a0
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,2873400295256466407,15780954296652105176,262144 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,7797120880557801599,11615230426024864432,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,325683448680590761,12760764933202217118,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,13266926455300098093,7692032197164572615,2097152 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,2220799213099721284,16813997336018158121,2097152 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,6836566810903812595,7626995059773854846,2097152 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,10888457796010580591,10596638475659394529,2097152 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16355600788434641240,3681302076643359689,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,16894738099277651873,3913953004409392214,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,2653501646181959918,13603462333250808492,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,2653501646181959918,13603462333250808492,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,6280039110841683376,13242999388142747018,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,10415474663523726857,765022888195000789,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,2030182252301525658,11688858184534236662,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2804,i,11544054582899172016,7740869989241917516,524288 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4656,i,13601272743813707142,8824798700111680695,262144 --field-trial-handle=2244,i,7908360985884986613,9459173216863371964,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3852

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 47ed73aa778fab1f1e66a9e604f6ac9d80a3b9b5a1f230c39b2af157618df4a0
MD5 9976936933b3935291c80c338bcd0062
SHA1 38d218210049b6001b51cbeae908fe44f5567eaa
SHA512 9fdcd695c56180f17085233ae6d8f2ca307bf94511744c237eac8b16dbafe06a90a911105c1f1b3cefd0eb08a39db8fab754002925c77018ddc896beb19f0786
TLSH
T18A615E3C09410465F3624032AFE16E0A7BB383E9F61F6DF195A06B7457F57D3C159428
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3234a08d1eb9eba9e350a7aa26553598abb7c194703e53d3c8e826f66fb0b06d
MD5 81f2d8ca5edac52b6c69b02b7e5fa5aa
SHA1 1249233c78028974b9dd310af616f9708bf258e9
SHA512 c9bcbdf3dd897bed74210c9e3f54e7afc2869ff3bd84810fecda8ca176fc6d94b67f98ebcbc601f17066c4a3a544debdae02341cd6042047dd65021fd00a2013
TLSH
T19E615CBAC3D4877E891162F09B256E2ADD1D151B422C3C66CDF4AF1B63F24B0E20129F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b2380ca6c18a091230c0add80ad635ab901793aea575c60f374cba3d8a00d24a
MD5 0991b3ae49c469db3f61970297e1c358
SHA1 97c29622623dcd80374f9485101cb1c80d908a1f
SHA512 c657abd57eec72a51be3ec030871c6f0be28db11e7b2dd4e58f910594e769b766df450b3c04d3cedbc54e7acb082a53f1ee5dbf59e7a1555a7d6bf0b4441ff2f
SSDEEP 192:sxZ2RHk1/ftsqDxhUIdpd7yHW6+WNGYzQNtkIgrJ:sxZ2O1/fts4xnNyHbGM9
TLSH
T15E22B7516E78A83B8CC7D21DBA15BF43E6F9503291941E48A6FC961C05E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 893be24dce2dfa34e2541772a81a8a93f68f13841091b631caf2bfd467109d0e
MD5 036faeeeb5f92bd7fbfdbfbf29807073
SHA1 678d43eb5ad8aa889dad129fccee363c58e310e0
SHA512 f4e3caf9666009261637f2117ace6b3214b1114441dc7b4e96591a123ad23108a221e4d2fd54ac61ab34a2e59c91edb4ef014221cb2f77e58a848b83d9858401
SSDEEP 192:sxZ2RHk1/ftsaDxhUIdpd7yHW6+WNGYzQNtkIg5FJ:sxZ2O1/ftsIxnNyHbGMh
TLSH
T10F22C7516E78A83B8CC7D21DFA15BF43E2F9503291941E48A6FC961C05E7BDD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c68765476e69b5b12e1ce3d97d1f4edceda436cdd69946dbb9da69df083595b4
MD5 b31daf7e1f5fef3879bfd56502e718a1
SHA1 6cfb14f0ab958c2aa227e3eab960675f3ec6dcc3
SHA512 33a2c54d33d4fc5ebc340f3ca4d10b9a1eef3205c64cf125425ae6bcf906599f1911a0b092edd0552bac6b0dee2d5fde3a6e99dc757ec3893166a9fdaddfb353
SSDEEP 192:sxZ2RHk1/ftsaDHhUIdpd7yHW6+WNGYzPPtkIg5vJ:sxZ2O1/ftsIHnNyHbG1H
TLSH
T17822C7516E68A93B8CC7D20DFA15BF43E2F9503291951E48A6FC961C05E7BDE220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 12a1d304f33a8ba70e3f4807bda3b1b6e3e534af44a4c695f2554a0034df571e
MD5 98899f7cf003b2d1f19b2573236c519f
SHA1 3f4006b3e89f470404becb155b45452daf11ebe4
SHA512 e21c5087d58c8e0ea08c8a43ccee37c8697d7ed3532497f5b2ed6c6c6fb639beae558725af5c3513ae017ed7c03ae82c72857fd7bbbcf5938091ced8613c7646
SSDEEP 768:fHk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBMroyGGYm:fHk7u70WvqiEau1jai5LA3BXdLm
TLSH
T1CCC2F93B740CCB7E4F801E9DEC566F973E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e7d263d60d5184ee229591df25f8b5dceaba478cf3f1530fae6fad91697f3eb8
MD5 9b0bd8994a297fc8ce0f6f2300d4961e
SHA1 ba7f37bf40bc7b2ce0a308089acf7f7500b99486
SHA512 523522b337d4e0dbc24943e8d2ecfd20a9aa607898b2f925a1bc28afa301493596b65a9051801ebc5495f303f360f094c3c2fa49aa7e88c88687bd4b1cbf56f9
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT3MIXKZqYHyNlIJKek8KOIXKXKl:KIbCKc3MIKZqS2lCKeklO8KXKl
TLSH
T1DE91101B717A06013C7E2C489299C936AF4236A33454A8AF7FB814754EA7E124FFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d97d41de-8e72-4767-874c-f3d6f9b75e2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d97d41de-8e72-4767-874c-f3d6f9b75e2c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 79345cb4827ffc7c894974ada4bcab7453d9c4166801e61ac6b469e7b5d9db02
MD5 b6476ab562d8ed80b58310f1d00a21e3
SHA1 a5dbf948f3bd712831de0e32774ac4889a85b4f4
SHA512 3ece30b2837636eb7866c73dff500d6938e43ec8d064186edf5887a3ef86deff237a127964e9c543457e463fe01eec2757ac0bd8c479a86664abe7ccdafa5333
SSDEEP 192:uem+xasuheOwQxMGsN8qQF14BbBqQmiU1kL0d4aGBPKScC256bePNndN7qQ+L21T:QZcIhsN8qBb83yn2Vnv+LBNj5kso9
TLSH
T18F828E729CB55C3A5CA6B140F48A37035FB4C07B96C4AF40D9ECB71D05EA6A8131B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1225bd6cc51d4ff04b75956d5541471c4b104674fe81e2b8f018a84b2b043dc5
MD5 537e9ebc34accac340f490bf14e1d7f7
SHA1 e7a14bd9f413a6f9773558b569158305e4d767f8
SHA512 8d5daa211b4fd056d9e18373326cb6fabaf81b6a74e0f242fa8a2141db8558996cef532149ccd416d1480f7cd266052537bbb8e607b9f200d89fa4b874c3d26c
SSDEEP 192:usm+xasuheOwQxMGsN8UQF14BbBqQmiU1kL0d4aGBPKScC256bePNndN7qQ+L21T:eZcIhsN8UBb83yn2Vnv+LBNj5kso9
TLSH
T126827E71ACB55C3A5CA6B140F58A37075FB4C07B96C8AF40D9ECB71D01DA6A8131B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c8b026bd07ce9a06a1519a07af77a64eca69e2bb4963d1d7f7018b6af38e7985
MD5 5b2c67e8925008fe886d9657bf5e2261
SHA1 b9ba5d2aeb1a32a197e011b4e78fb32dbacc4f3e
SHA512 c72fbaa4a3cab78cd65b6115b153a9649ee61c64a43c744161eb2a3977a44fc671fc10b0e9f7cfcb7b5b61e8b3c39c875498601250831cca92cc0be0b37549cf
SSDEEP 384:HxiFiZcI7sN08TUNTUlIlUBb83yn2VYv+LBNj5kso9:HYFQ79wgSKwHvWN5JC
TLSH
T1BAA26E739CE49D3F6DA6A640F94A36079FF48077D5C4EA80E6D8AB1D019B2AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c377070f6c54c545ca34c8cecc9885e906496e8549802c4d51a83db1defd44b2
MD5 3ced973234469e91765b64c70c891d08
SHA1 f23724285c340e9ed8c2f3d372a4af54301a5c3c
SHA512 1077fe10cd821336beb3935ae36cb829d2825ee0e24c346d4f92b50d9850fef041a47322555002c51eaee6f54f8c76be72cd6d4f52525810d400bd20d920adf4
SSDEEP 192:MONa64BAQmiUy918W5GBPKScC2567aDSphU6:MONa6eAiOWE2BIU6
TLSH
T196021A396CB96C7B9EB2AD45F48737175FA4107BE6906F40EAE82B1C00D724C230392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 551ba299abbd05d5d1f1a8ad84161952aea3bb34653583d99fc4c86cf55be7cb
MD5 067c6c54ebb363659e8ef3a6c7b8331a
SHA1 7346a2106799a8d13c640de50db5dc1cf5765259
SHA512 53f3e3a91afbcb21b151db5ed1dc6113657e285c52e4d0bb5acbdcd24abb18f9e305601b3f37d89996e7a9d941dd4a2a9c2382503749ba2ba40765d058962f4d
SSDEEP 192:zONt64B0QmiUyt8u5GBPKScC256bePN3Ww7qQU6:zONt6eEPuE2VjvU6
TLSH
T154121C35BCA56D2F5DA2A540F4C636075FA5413BE684AF40EAEC3B1C01EF66C230B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d7d2d7d96cfb26693b37afe2dec3da0302f308cf0b711017cc5581d76b1016be
MD5 c2ee937fd58d37bb5623e8b36ff6dda2
SHA1 e1bfaa178529e2dd5c6ac6b4ae7b4262df5a8b71
SHA512 a327dd616dfa31df048e28d0ed00097e9b25e6f79732244478604441923ed21c468529a310ef1d99e4d21ae84d5a816824ce73662cc0ddd9236142f0cb889678
TLSH
T10F413A59A6FD2108B3B76E46ABF6686E447BB9772F06D85D00010E4F0622B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download