f93315e77d15e2dbb40988f7da923801befeba48c960f204ba37376467309c64

Analysis

max time kernel
149s
max time network
159s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 949KB
Sample260826-pptpssdn91
SHA256 f93315e77d15e2dbb40988f7da923801befeba48c960f204ba37376467309c64
MD5 d32504244c3e39b39341c57d471a4548
SHA1 9e288ab78be79e81797318ebec37f72f697f0e64
SHA512 7b49611e6d5bae97902a0753ef5227a5c388fff1698d93d715665f75c65572c8098cab4ddf42599cce0b131b83428629abc957ac5efec3938d067fc9ff92ae93
SSDEEP 6144:EGdzz99d9MENMD2GOfhf+UW+ELhAB4e0HAe7uX4vUERsg1Tu:LdFzNrdXOLe0gt7ERsg8
TLSH
T168255DA07244943CDD6763AFB349AD5DEE196602CF9225ECF8B646D042C37F702A235E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6128	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322210925476289"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{BD2B9D4D-A8B7-42F9-A211-F445E43FB4DF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 2100	4964	msedge.exe	89
PID 4964 wrote to memory of 4860	4964	msedge.exe	91
PID 4964 wrote to memory of 6128	4964	msedge.exe	92
PID 4964 wrote to memory of 4860	4964	msedge.exe	91
PID 4964 wrote to memory of 4860	4964	msedge.exe	91
PID 4964 wrote to memory of 4356	4964	msedge.exe	93
PID 4964 wrote to memory of 4356	4964	msedge.exe	93
PID 4964 wrote to memory of 2548	4964	msedge.exe	94
PID 4964 wrote to memory of 2548	4964	msedge.exe	94
PID 4964 wrote to memory of 2548	4964	msedge.exe	94
PID 4964 wrote to memory of 2724	4964	msedge.exe	95
PID 4964 wrote to memory of 2724	4964	msedge.exe	95
PID 4964 wrote to memory of 2724	4964	msedge.exe	95
PID 4964 wrote to memory of 3808	4964	msedge.exe	96
PID 4964 wrote to memory of 5492	4964	msedge.exe	97
PID 4964 wrote to memory of 3808	4964	msedge.exe	96
PID 4964 wrote to memory of 3808	4964	msedge.exe	96
PID 4964 wrote to memory of 5492	4964	msedge.exe	97
PID 4964 wrote to memory of 5492	4964	msedge.exe	97
PID 4964 wrote to memory of 5936	4964	msedge.exe	99
PID 4964 wrote to memory of 5936	4964	msedge.exe	99
PID 4964 wrote to memory of 2596	4964	msedge.exe	100
PID 4964 wrote to memory of 2596	4964	msedge.exe	100
PID 4964 wrote to memory of 2008	4964	msedge.exe	103
PID 4964 wrote to memory of 4340	4964	msedge.exe	106
PID 4964 wrote to memory of 2664	4964	msedge.exe	107
PID 4964 wrote to memory of 1148	4964	msedge.exe	108
PID 4964 wrote to memory of 5600	4964	msedge.exe	109
PID 4964 wrote to memory of 5600	4964	msedge.exe	109
PID 4964 wrote to memory of 4444	4964	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffacc52c188,0x7ffacc52c194,0x7ffacc52c1a0
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,15798363305057821572,8323610016141410256,262144 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,10118616079182325867,1622482191631087229,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,9193485912636637386,1993087231435991143,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:13
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,6425301823983894244,16260592989199109732,2097152 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,18066171773276581610,133099872803645533,2097152 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,11796303564164682386,15738766922742959533,2097152 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14319878863830417272,15135673482201358996,2097152 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:9
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,9545284599324197636,14540407111513840742,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,7707770385066821803,10999676744941739353,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15473011776299167083,8324519302409720023,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15473011776299167083,8324519302409720023,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,11063360251282387697,18203945463701803074,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,9643863040486027465,6525354184630286417,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,16079037548809702928,4341426454183154061,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,16192886349428430844,5066596792606910095,524288 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,532692417285697273,6373070599392338738,262144 --field-trial-handle=2164,i,15512062523531490915,1649689552380826218,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 472dff27fbc3240fb474b66dedd3d5be1825d2569701cabd06d23a1117c07e1c
MD5 47f070ef5cc1f117e3f3576a0d077e79
SHA1 bb32141511cbe9e108f58a320b8585526b4c518d
SHA512 0708609df9e3db098865188f6ed305de585b657170d9274578d142fb04c13d5c87f41c05f0358620317479f4094a92354e6a5ca65a4b34b1b56f885d638ff7be
TLSH
T12D51506623270BD1D7A645BB50F25CA93EF48677D1831E187F835E7A480EF7820E2263
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599919.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599919.TMP
Size 3KB
SHA256 7f912e9ffa5b07b4f1be5a5ccd1fffd461c9fbee65d13e4e54720a53c0b4bc21
MD5 74735bfa1e8a4a2e5fe0c48b5a66b2f8
SHA1 33d8efc9be01b1dbd6d6d6ae26bacab3d164a022
SHA512 67e14cbc6d5bb608d9a5d15f1e0c2c59c76f728ed56070283f181046ede3e47feb614725b2c1e84762509de744b01db6553e857640d5994f328d24026e6d0328
TLSH
T1B951605623260BC1D7A644BB50F25CA83EF48677D1831E083F835E7A480EF7820D2253
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bd1d7925014fe40377878b76c67d081d380bf64a81715af83c7e140b60053697
MD5 ee113a007ca94ae1e0fcdc98a220ea3c
SHA1 de0438a2dd3e6e448bcee4b04472ea712e132ac5
SHA512 adae20fcbf12ca38e0b1e1b3a239a44bbf8ae3bf71a04d56678c5f4895b0ee04ff53fe35cc6af83c45efbf70b80d6c2681717434f1fd898256230f973d97565c
TLSH
T136818CF783E5877E891152F09B156E2BCD2D0516422C3C66C9F4AF2BA3F24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9e4db7247712e0c393bddfcdee369128bd7150078868a9abb3aaebb015898b4e
MD5 3e3b62d0b633619df1ccca38d50e51df
SHA1 c1548769a96a4653ed7769bc7fee726fafe4c407
SHA512 261867579be6be58aad72a129a09cf52acf5e1abe221b837cc518c092d73b9b7bd8cd12a08dc3d15ca3639ccca49a05234ecdc9981685de22126472b9f33608c
SSDEEP 192:sxRORfbu/f+sH31pq1zdbzoD8p4A/g6+WNIYGlbDkpGhIgDAJ:sxROpu/f+sH3145DF/5IEWQ
TLSH
T12B42B715A968AD3B8CCBE21DFA55BF53D6FD503260D42E58A7FC860C05EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9ed99f41a09fee9814f568ff2ffebf4df4141a9ac9a4300edc8120e7d7df275c
MD5 ec4bdf8fd0d18fdfbb6a25b0641c8d14
SHA1 47e2caa08f77b2b0f0027cee2d2692257055fec0
SHA512 a0df04d9520d703599facbd0746748090298f66315e90f3ea19e694d3da434e1dffb5074d8fa9285d17ca10566f105acd99e4a1477bc80ef54614c583f0e6b76
SSDEEP 192:sxRNRfbu/f+sI1pq1zdbzoD8p4A/g6+WNIYGlb8kpGhIgIJ:sxRNpu/f+sI145DF/5I5Ws
TLSH
T10632B7156968AD3B9CCBE20DFB55BF53D2FD503261D52E58A7FC860C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f06a641ee2708f8b28ff8da4fc1e0cdcd6485da6e315fe8b128f9abc2091ebd1
MD5 9593b6896bb232b351151fb7c5b47625
SHA1 0f6464a2415f49fa45e7c770ea1e573bb1767ebb
SHA512 34c147f74579df51c274ab429e6c5898c5bd800276d609fba11fc2d771deb400db475e23d3ee9abb325a378ced625011fa08c687c66e1287e3b7b83581c12842
SSDEEP 192:sxRORfbu/f+sH3+pq1zdbzoD8p4A/g6+WNIYGGhkpGhIgDiJ:sxROpu/f+sH3+45DF/5I1Wa
TLSH
T10542C815A9686D3B9CCBE20DFB55BF53E2FD503260952E58A7FC860C05E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e37c8c1f4f366e698bb1aa5540af5116226b4bb59d62fa89a73467504fdfdc8f
MD5 e35a26c5a309fca623ad9f265665d95a
SHA1 f4c7bbc6c44b08cee02ba2c55ce278580dc9c939
SHA512 33f0b4a5baee50d1ea77f35a974c1bf9fef5107f019fb0537ce26a208d1dbbedeaadc8b05248c2241d161d7ba651a8c3b6c127ceb94f782c87918a02af9552c2
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIUrowT:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0VU
TLSH
T13BB2FB3B600DCB7E9F800AAD9C197FDB7D9802C796589D4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eb56e27c95c9246d1ad04bbff90df28b737421d1d56d9c544b0b3563715ba551
MD5 93c6affac4c0946e1129c86539bc283e
SHA1 d6ab97140a5eecc71b4c025bc2320c2ebbe5c350
SHA512 908a40c0044b4a47d0b40b1dce1d3d6f4856d83cb77e6d3b6d8627e656badada13c84be3890a7f2f8f23a07a4bc08b7f749d622d2bd1e072c6710261ad251f52
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkv4dZvtNhW528gBhK4Igvhc3f+BtiS4gKV26a:Cm7KmgIIJ4tWGm7g09OGlkv4dZvtNs56
TLSH
T11D919152B1BA0251387EB90D82F88C1BA7C270E33054E52F7BA855A61F67E065DFD9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2d5b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2d5b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0c3315972ad4c8e7cbc611e4d438373571df72a298489d77332c4953c652269e
MD5 d4be2f9c6fefe368adb6aea1862e9357
SHA1 762be66d436d440aee66443a8e2db38782d4ff2e
SHA512 b2bfd84f2d3f5402a63b85457b8f1ad462724bbe353bb78d22b523d59eaeffd8fc81f3001601348036e3362d3f541f568581f31116fb4cdfddfab3dfdb68f6a2
SSDEEP 768:arv+4UNbdS3G+lYyGSq7Hucys6BRvi82oP4/z6himoft2bwn+h:absbw3CI3imOz6Imo10w+
TLSH
T10203BF35E4588D73EDE78188B446BA537FF4522385C92AC0E5DA6B4E028B99E530FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 06b4feb4db1df6e4042d952ba0f1b00fbbae0fa8f59928f0b4d65c12c4ce5753
MD5 2c4d7441f6871476a3515fce11c234ad
SHA1 6faf80eb76dbf91588cc62b33c78f72350cd5a1d
SHA512 1fcb91ed42c566872cb689df901882d2b54ae6f3a25036c8692ce2d8725f2b222283bf308c0a206db9978a58b5600da2f225926362bce8fd08edab3b6d45f2de
SSDEEP 768:lrv+4UNbdg390lYyGSA7Hucys6BRvi82oP4/z6himo6t2bwn+7:lbsbW3tc3imOz6Imo20wM
TLSH
T10513C035F4589D72EDF7C184B44ABA537FF4522385C82A80E5DA5B4E028B9AE530FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 5603e3ec7534b8fc58693cb31de83c2990ea5103cab9a41a9ee9662129a95f2f
MD5 5986aca4fa836a5bb5ec1e888a93f84e
SHA1 fd2b01ab0dc3cd71d4e5a7efab0f146a01d87c8e
SHA512 f757dddb1855ad108c3b748e2305f1f306ab31e6d8f1bbcbd9405895fb43ab30df6c85861ffaf0782c89c7addbc3afb962c0a611f9d896496977050c2cf44b75
SSDEEP 768:xj360lYyGSX7Hucys6BRvi82oP4/z6himo6twb:xj3kB3imOz6Imo2wb
TLSH
T149E2AF31E8558D729CF7D2C9A95676436EF1522385CC6E80D9DDAB0E06C7AAE030FC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 45fc18320ca157e089d2b35ce63a08ebc0f62957731b2aea8ef3539056409c7f
MD5 51aee98c3a9ef7b40062fc8bb7cd21f5
SHA1 09e35fbfd1c6b383637ec40f7aafc9f40601d728
SHA512 9a267666a7438c16f076b2040d6246f1e416f0b9d60383805937e919171e9690be066a18813ae8a3440528cf74cfc9da3d358571b3f3c32d6aa28a6f1e23918d
SSDEEP 768:Zrv+4UNbdg3z0lYyGSX7Hucys6BRvi82oP4/z6himo6t2bwn+7:ZbsbW3/B3imOz6Imo20wM
TLSH
T1A613CF35E4589D72EDF7C184B44ABA537FF4522385C82A80E5DE5B4E068B99E530FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 714faa527fa8411b476fc43f663dda39ce68ce645e77bf39b14d4ffe447f8d66
MD5 417a86b3a6f850a5b7c3f123ed49ae74
SHA1 171599e8fc633b6b7192a5d874e4dfb05955fadb
SHA512 61e1c5e66df740224f6495f3fb211ee74e5a5fd4ec0815262cc616380fefddbcf8da13fd507e66a07a170fe4f5c1b9056227c818455aac82a5eedea46ab58aa2
SSDEEP 768:brv+4UNbdg3i0lYyGSX7Hucys6BRvi82oP4/z6himo6tK:bbsbW3cB3imOz6Imo2K
TLSH
T17003AF31F8589D73DCF78288B447BA537FB4121785CC2A94E5D9AB4D06CB9AE131F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 14c7f7ab908f4677af260df29e016a72cb82fbb6edda6c9eb78efe73413166c9
MD5 b7a5f1469090a57e5c8676446e6e8202
SHA1 37554d09edb663876952358d895d1eccf4d58c10
SHA512 862fcf7800104b3008edff7788bf8a0e922cee58a24ceee1dd6665cd5c5d3b83dd374586996ab2aa6a02871c208af59b81976dfc490ca5a1e6c8bb459e26717c
SSDEEP 768:5FaX3IwgT0lYyGSR7Hucys6BRvi82oP4/z6himo6twb:yX3mL3imOz6Imo2wb
TLSH
T1DBF28F329894CD77ECFB87C5A95A7643AEF10263C58C6990E5DDAB0D12875AD030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f802612dc8dbe66bdd88ee438e8074d07bd284b6fa64a3706df2beeea5c88a62
MD5 c8085128c481bcb7b18fed1870dafa10
SHA1 ae681c10e2e1a5926ca1dedddf54b88d84f27145
SHA512 af947e95b01a669f0f327ba7cc4dc3d3e173a695a917439affffe791fe177379f72f9f9001a0da547c17cad7e2b4f2ce85cb954477b6c3e846f585293195b0cf
SSDEEP 768:xGrv+4UNbdS3dlelYyGSx7Hucys6BRvi82oP4/z6himo+d2bwn+h:xGbsbw3dz33imOz6Imou0w+
TLSH
T1D503C035E4588D72ECE7C288B44ABA537FF4522385C91AC0E5DE6F4E029B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8896ad17-a69d-47e1-9358-39806114f44b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8896ad17-a69d-47e1-9358-39806114f44b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download