5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
live.html
Size 552B
Sample260626-pg3bzabs4y
SHA256 5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e
MD5 eac0a6a53d4a4353aace122055b4b4c8
SHA1 b400d2a40c870dd448eed9b418297c3038b9d023
SHA512 5cb7ce5f3f827714d73fdd452a71f1c1cd33fe9e8452292e7fd1fdb21dc597a3433a5fc3b8148cfe61b3fa50936d45615496749a6d892dc99bf628db89da59d8
TLSH
T119F06DAB5F11383F2E679571F4C35168CF680952FB9825E28348011F7A8A04549B5FAD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4716	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269499693455852"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2894455325-857903158-4263030270-1000\{5DED7587-A5CD-4029-843F-4C1E847A1D9B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3340	msedge.exe
3340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe
5852	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5852 wrote to memory of 4316	5852	msedge.exe	89
PID 5852 wrote to memory of 1116	5852	msedge.exe	90
PID 5852 wrote to memory of 4716	5852	msedge.exe	91
PID 5852 wrote to memory of 1116	5852	msedge.exe	90
PID 5852 wrote to memory of 1116	5852	msedge.exe	90
PID 5852 wrote to memory of 4564	5852	msedge.exe	92
PID 5852 wrote to memory of 4564	5852	msedge.exe	92
PID 5852 wrote to memory of 1712	5852	msedge.exe	94
PID 5852 wrote to memory of 3180	5852	msedge.exe	93
PID 5852 wrote to memory of 1712	5852	msedge.exe	94
PID 5852 wrote to memory of 1712	5852	msedge.exe	94
PID 5852 wrote to memory of 3180	5852	msedge.exe	93
PID 5852 wrote to memory of 3180	5852	msedge.exe	93
PID 5852 wrote to memory of 1892	5852	msedge.exe	95
PID 5852 wrote to memory of 1892	5852	msedge.exe	95
PID 5852 wrote to memory of 1892	5852	msedge.exe	95
PID 5852 wrote to memory of 5892	5852	msedge.exe	96
PID 5852 wrote to memory of 5892	5852	msedge.exe	96
PID 5852 wrote to memory of 5892	5852	msedge.exe	96
PID 5852 wrote to memory of 3232	5852	msedge.exe	100
PID 5852 wrote to memory of 3232	5852	msedge.exe	100
PID 5852 wrote to memory of 2684	5852	msedge.exe	99
PID 5852 wrote to memory of 2684	5852	msedge.exe	99
PID 5852 wrote to memory of 2824	5852	msedge.exe	102
PID 5852 wrote to memory of 3084	5852	msedge.exe	106
PID 5852 wrote to memory of 2872	5852	msedge.exe	107
PID 5852 wrote to memory of 6008	5852	msedge.exe	108
PID 5852 wrote to memory of 4408	5852	msedge.exe	109
PID 5852 wrote to memory of 4408	5852	msedge.exe	109
PID 5852 wrote to memory of 3340	5852	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\live.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff801f3c188,0x7ff801f3c194,0x7ff801f3c1a0
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,13474155059184565129,1861727510201274956,262144 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,8841188283160911567,17403240296199856253,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,5770256301154885975,6844057308761342016,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:13
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3384,i,7643320612137352592,2550016355787971025,2097152 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3388,i,16605419441448777252,5125656451646959183,2097152 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,14020518316939987412,12949007738324775587,2097152 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:9
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,15612115340927927667,6440534811236207545,2097152 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,5153150000679460082,441824643193129300,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,12439617259165616517,9896343922203910432,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,8221301091646276575,14159453754993005624,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,8221301091646276575,14159453754993005624,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,2384620640201838967,10553568539288292927,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,7358244903074327850,13889625384491890337,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,11904382495027730264,5756632887715241228,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,17392666228245765489,7291290437126559876,524288 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:14
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,2526243207363830577,6838252281441487728,262144 --field-trial-handle=2144,i,7379713351686061031,7333972537595247540,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4921dac989a582c68ea2ce6e44eb3bfcd7f8bf3d87dd155763734d09e46d6684
MD5 6fe58dba083868c4939df3729856b544
SHA1 2946fc6a531247a5afe5d20c0abec1329e76da1f
SHA512 435b892e3c3ced9c341bcad7627e98220f381783f6c0d232345dd92e9cb28357bd93211262aa046fe541f6bd0686d5084ac7e92c687fc72829288aa7d9c823de
TLSH
T1B7D08034FB45B745C78605F2D514A720637A864534C2C60DB1A2D50D98681D0B7E79F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0f06119439d622a1a5078cf90d2c84d55bc25c179cc319a31bc271a3e62dc8b5
MD5 39897ff436f6a2795449c696417893df
SHA1 b1e15f7b2c6f5ca94bea9d8a160cc9e6864c1d06
SHA512 75fae24fb44003376ccf64d6c3715357ca6f73fb6cca4422a2574a4960dc75c830ef617f5476e7fc21942b321e9fe764ebf9ae64abfc2b05a73fdd7fb96ad95e
TLSH
T1F2D08030FB45B745C78605F2D514A720637A864534C2C60DB2A2D50D98681D0B7E79E7
MD5 SHA1 SHA512 TLSH

Submit Download

173bd577-35fd-4311-8c7d-6f06391d079c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\173bd577-35fd-4311-8c7d-6f06391d079c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 722f379240c40025ce55b72eae0631c2df669974815e366da328e3ec7d34ef0a
MD5 0f9efb6f7da9a18d95c1cb9f2d7adf4c
SHA1 cfa89bee35246f45f863394d7f1c7c08f3f4e071
SHA512 e6ceea4349f887eaba74b16434a38f10bca031b49677b1c30f3cf5f91e468f2b9d7a230ef76d8f0c610d0bdf50726bf57ac636110b4d35f3a9a38553be3dc7ab
TLSH
T1DB615F17726A0466DBF34D3864F21CAB33701EB63127EE9548DC5476BF23B9148A383A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 64ada57d185c9b00fe95a95ee606cfa5951a0e154c2c02b9111d51d7209e8069
MD5 e61dcfdf3bb7547fbe83f983f0ced27c
SHA1 4bbf4c3df73058a151e96497f222847b81f0dc3f
SHA512 3827e5691330aca2b7c809aa518b17f5764f67d31703a9ffc5a80467ddba7e8a4b3daaf29cd53b0da5b67e7df190ab8c1b745ea47a79163f2c1fc803b1babdfe
TLSH
T1A241AAF3C3E8857D990146F4BB182E2BCE2D0954432C3C5A89E4AF5BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b7c563a5b2e957387c0c034c2b21b1b264d4c35c75e5a7c9a0708488db3c750d
MD5 b8dc9778d966d65e8ca59d38a72c8711
SHA1 c2781887fe91451c6ea0924acda0c104199f1d7c
SHA512 e08e0a2c06459e40b6734a10a68075e14f14233a7698d0b9beacb25115e9e5a9532d705f0a694a7dd85960fe3d224d31bbc7ac4194675343c9f1a668a3bfb50d
SSDEEP 192:sxRXvRSyM/jK1Ml8wF2V/f0snZu/IylqzoA8p48/g6+WNIYPPUHGj7IgDFJ:sxR/ob2V/f0sZu/HnR/5ILaTD
TLSH
T18E52D9166628593B8CDBD20DFA457F53D6F91573F2941E44AAFC8B0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 54d7fef9a2f6af533bd9bad7e180ed9f38bb7d8e33c36dc5c261a2eee731d0a2
MD5 e1fbddb3bf768ad71a32b12edef340d0
SHA1 344a1b5dac16f2c3d944fb382974015179cacdc7
SHA512 848880d010bbbdf824ae6a90e1822d25ff065a99f72a00cbb1ce017c9a0c54ce5f48820b1292469df47a925ab6c20c8c5044b3a8d00daf4fce392056b777d02d
SSDEEP 192:sxRXvRSyM/jK1Ml8UQ4F2V/f0snZ8/IylqzoA8pe8/g6+WNIYPhUHGj7IgDLJ:sxR/oqu2V/f0sZ8/HnL/5IfaTB
TLSH
T19962D916A628593B8CDBD20DFA457F53D6F95473E1940E44AAFCCB0C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2b6e2bf097e4e840011b3fd17205081b16b100417f25cc5980a8b18dcc258c91
MD5 64057065307100f485675022e702b831
SHA1 196cd0b08b1d5b8846e5b0d5a169781a3deef3be
SHA512 01c15fd675e144a8cf437127a202d5797b797a3351f1e601f5da293d179255690edee51115dc082274ae8ed43291865a89eac9985b53ab4bff34447b0c7a897d
SSDEEP 192:sxRXgRSyM/jK1Ml8wF2V/f0sHZu/IylqzoA8p48/g6+WNIYPPUHGj7IgIJ:sxRwob2V/f0s5u/HnR/5ILaTs
TLSH
T14C52D8166628593B8CDBD20DFA557F53D6F91573F2941E44AAFC8B0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8b82638b2d755742ad2ffb129d2c60ddc7c77a2cafc4a3e66a0f3cb50494ee26
MD5 2a24ba78b1aca9c54e840237a32a1758
SHA1 1935563daff6a4790db5e30344a205cdbe2e6bef
SHA512 5f8cbc465c60a3745f974451cddf7fe305756e6414e053576d0ee8b7f723fc61a8715681647a9a160e2ca5f918e18516a24413082bc60ae061a6881e5ff08d36
SSDEEP 768:LKKg6xWgdVf7k8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJ3nYErouevdWMm4:LKKg6xWgdVf7ku1jaY3YPuevdWMm4
TLSH
T117C2FC2B240CCB7F4F844E9DAD26BE9B6DD801CB97584D9447EA880C03D77EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 796b037b5bf2969902ad1020ba2960b97bb04a4060597f35be72a9c17545c8be
MD5 9ce5f8e60c02530373ae81b8fe51d3b5
SHA1 fa261d23e5a6399d0ecbd1b264801bbba477f720
SHA512 9771038a0b2016b48c36889a0586dda4f9e84cdc382aaabb77c49a2bbcdbe5684e159c2a3be2e20db58532adedb7f8ac4e283db7b98adebb2b0f03d24c825ef8
SSDEEP 24:KG0D0oCIhKQhU1qS1ipyXiBeNUlIfK5h61WSsTARulc1IfKJha1yScPryXnQWeDg:KYdIhKGUMDyBeIfK/6oP6IfKPaUvyxz
TLSH
T1E2917611747E671238FE240891A5891F664270E2309A7A3F7B6C74E52E7BE040FFD9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

201427e1-4e30-4bd9-a951-ee6e991d160d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\201427e1-4e30-4bd9-a951-ee6e991d160d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3a586f3ca05e1662d6deda53548cc0d71a91f756ccbee5e8f20af02fef132824
MD5 a4eb93cbd2aae863d14e5b951555d41e
SHA1 b2f786091bb2a3a07ada9ba55e37f384b100c674
SHA512 fc283aec012d9627bf4df413ef46ff7856da428a6dce72977957b07e809e879e9dc3439df6adfa2f33f440643617c8c90db7c9a908803a7497e9f23d0b92c343
SSDEEP 768:kqjaeqD4MlshiLdMmd3YB1cOmgkQto75riXYUsZUgb9eHcI2NTi:kqqcjhIdMy3YLYiIUsZUgb9sK4
TLSH
T1F503C079DDB89C6B8CF2A6C4B21776476FB5009386C52E989CCD6B0D02D75DE420FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3925bb15aa314a7ac3884ad1378ce11b6f4c395c261dd04a9d965f57df3aac88
MD5 34b6b9474fe94acf77cc7022c198bfd0
SHA1 cdd4624624cf628867da5624e96a9c439e6473f4
SHA512 dc87b8095658ec6ee07835bdbbcb5a49f4193656e1bd98935112a39f8294c3e18859f2e91a8f19399ede753966b7a3b5d13e15c16953b1c99bfe2c2a12899486
SSDEEP 768:1lj+9T3U11cOmgkQto75riXYUsZUgb9eHcI2zn12bf9:1Q9T3UvYiIUsZUgb9sKBy9
TLSH
T1F7F2CF75DDB88D6B4CE297C8B217224B7FF6406396C5199898CC9F0E02D76AE420FD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0585aad0c014757651e5e88038221f5cc4aeb481a29f5663e2ac5e2bc26d9787
MD5 fea9287fb9962db21f2857935d01e660
SHA1 b068c15fe8d114dedc2530694fe4a1ac5c932c4b
SHA512 798da694943a0e233db0accc0caf89d1dbbaac34b418b380f84034773167ce6a022225f385be5b3b6bdb3746b60a057a424375d6132c41a98348303ec8d02519
SSDEEP 768:klj+9T3111cOmgkQto75riXYUsZUgb9eHcI2zn12bf9:kQ9T31vYiIUsZUgb9sKBy9
TLSH
T1EAF2C075DDB88D5B4CE297C8B21B224B7FF6406396C51A9898CC9F0D02D769E430FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f08852f05d01b7ef02e7f96617add82ce6d0b43343a86bcde8c38f66161549d2
MD5 cfccb1b3bc97ebabe274cd663adc2ad2
SHA1 ca69872243aaeb6e2bfe4fe6847914c91fd2310c
SHA512 d01d5f505d59ea636cbfc34e20b23dea1246362f44bf84b69137e3a448da94ff67da683180bd89d46a9790837c602a1ecfe40c5dae2bf4545e8fb912d0f76388
SSDEEP 768:9yF1j+9N3YwgH11cOmgkQtS75riXYUsZUgb9eHcI2zn12bf9:9H9N3GvOiIUsZUgb9sKBy9
TLSH
T1A403BF76DDA8CD6B8CE29BC4F21A320A6FF640A3C5C56994AACC9E0D01D76DD430FD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b56eceec11f795012ee86f84c6547e3476be286d202b0dce623fa2331260f459
MD5 1fc630331f6e00236065cb3af973e947
SHA1 0d82f9b3acfbc20a27577fc97a5e1bc1457e43f5
SHA512 91d13f1ddb24767a38d57a9a5bee9b2b5232cc79212b21f91232dc4b77c40117c7e36ed41621a41a35febe945f88a6b282e8eec12c749b305337c2d2686e9418
SSDEEP 768:ZkjaeqD4MlshiLdMmJ3CUIcOmg775riXYUsZUgb9eHUf+ApXTcHT+:ZkqcjhIdMG3CPpiIUsZUgb9se+KXP
TLSH
T12C03D0799DA49C678CF2D6C5B36766472FB901A3C6C52ADCDCCC6B0D02E35CE520782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89a8a19c-721b-40ca-945c-467add96ab8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\89a8a19c-721b-40ca-945c-467add96ab8f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download