186c99a97ef6d0e6e26f065f3a160ae0dae85dba09bba8aa05b73a6fdc7aea41

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260701-phpr9sdz6l
SHA256 186c99a97ef6d0e6e26f065f3a160ae0dae85dba09bba8aa05b73a6fdc7aea41
MD5 54400e205d505c6bacea19a6659b7c0e
SHA1 4295da47edb1d2a78c432507675fa638462da587
SHA512 800518d73a791285a69f1e6e70f665b6aa2772e5cc115a8f64cd2158d9aa9b80f85231db7eca4df03beece9e6987fc4b4c9230989983e8da936f685ef85579a4
SSDEEP 192:4muClAzZJgQEHZojIMO0KJLELVC9/2vr/s:hHZojIr0KJLELgOT0
TLSH
T131F188AF0C6547A60553423517AA7218343A590F2121CE30BFFF9B2A7F5CD594493FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4952	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273820650234476"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3704578903-1610922810-1098216751-1000\{004108D6-91C7-4CE2-BFE2-707DD1F59729}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3556	msedge.exe
3556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 5996 wrote to memory of 2768	5996	msedge.exe	88
PID 5996 wrote to memory of 4104	5996	msedge.exe	89
PID 5996 wrote to memory of 4952	5996	msedge.exe	90
PID 5996 wrote to memory of 4104	5996	msedge.exe	89
PID 5996 wrote to memory of 4104	5996	msedge.exe	89
PID 5996 wrote to memory of 5244	5996	msedge.exe	91
PID 5996 wrote to memory of 5244	5996	msedge.exe	91
PID 5996 wrote to memory of 5704	5996	msedge.exe	93
PID 5996 wrote to memory of 5664	5996	msedge.exe	94
PID 5996 wrote to memory of 5704	5996	msedge.exe	93
PID 5996 wrote to memory of 5704	5996	msedge.exe	93
PID 5996 wrote to memory of 5664	5996	msedge.exe	94
PID 5996 wrote to memory of 5664	5996	msedge.exe	94
PID 5996 wrote to memory of 5560	5996	msedge.exe	95
PID 5996 wrote to memory of 1600	5996	msedge.exe	96
PID 5996 wrote to memory of 5560	5996	msedge.exe	95
PID 5996 wrote to memory of 5560	5996	msedge.exe	95
PID 5996 wrote to memory of 1600	5996	msedge.exe	96
PID 5996 wrote to memory of 1600	5996	msedge.exe	96
PID 5996 wrote to memory of 4660	5996	msedge.exe	97
PID 5996 wrote to memory of 4660	5996	msedge.exe	97
PID 5996 wrote to memory of 4660	5996	msedge.exe	97
PID 5996 wrote to memory of 2424	5996	msedge.exe	99
PID 5996 wrote to memory of 5824	5996	msedge.exe	100
PID 5996 wrote to memory of 2424	5996	msedge.exe	99
PID 5996 wrote to memory of 5824	5996	msedge.exe	100
PID 5996 wrote to memory of 5824	5996	msedge.exe	100
PID 5996 wrote to memory of 3192	5996	msedge.exe	101
PID 5996 wrote to memory of 704	5996	msedge.exe	102
PID 5996 wrote to memory of 3192	5996	msedge.exe	101
PID 5996 wrote to memory of 704	5996	msedge.exe	102
PID 5996 wrote to memory of 2724	5996	msedge.exe	104
PID 5996 wrote to memory of 2000	5996	msedge.exe	108
PID 5996 wrote to memory of 2020	5996	msedge.exe	109
PID 5996 wrote to memory of 3016	5996	msedge.exe	110
PID 5996 wrote to memory of 5652	5996	msedge.exe	111
PID 5996 wrote to memory of 5652	5996	msedge.exe	111
PID 5996 wrote to memory of 3556	5996	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffe727cc188,0x7ffe727cc194,0x7ffe727cc1a0
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,9110397291077595521,11204864131188926177,262144 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,3457430636780663749,15568747361871876553,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,15306096014694090775,1193725797172856307,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=3200 /prefetch:13
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,12688306073254006893,5179786897656664114,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,1500562615038889229,13428330210699882480,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,17131618902953984705,5309008320044592302,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:9
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,8278505277442604305,7361727087245961497,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3692,i,2355585162467581342,6025663797784653274,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,10451598441147896269,16038018908344656300,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5240,i,3984746759027642432,963519787288115397,2097152 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,7367381031161342078,8894500600679408922,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10634867922084689671,17750834724786609380,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,16583116552999587086,11934794625614880561,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,16583116552999587086,11934794625614880561,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7124,i,5659947589722349134,2784675521056564633,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,1924809463197159445,16788154220370944559,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:14
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7132,i,849833688392477547,12223995346782782678,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,1260001559508696675,13844631246186566965,524288 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7036,i,3464147615333233937,10347333970291228160,262144 --field-trial-handle=2768,i,14141935712224888771,2599687107949520729,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d392040b151e037bdd4b8dd90263b9fe3dac01f8dd499aef3ecb25759036c141
MD5 01b35953b55e6c6420031dd844948c7f
SHA1 938fab41ff3e572f2da957a24ee7ba3c418593c4
SHA512 8877fb75caad473736cb21b660d4e77de8a3e30d08c65314d923d239828e1cd760d9057f2bc4b31224543a8e6a32fe3db65e7760b7be17927803319b0d8ca3dc
TLSH
T157D0C0203D08F904C680303164C00761B7204911742B92847120B02EEC281E6535F4FF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 335d46e82e7827c9bbdf75dc74cf8a19c6cfc1d480ba1c0150bd140253b36afe
MD5 46e65a17a7d49a903bbfd766fbc10cf5
SHA1 e333e3884760170abaaf444aa4ac6e0e6f16a7a9
SHA512 cd3e74be359f8fdf0eecaea7ff3123a7faf3c10c3c7a1511cd1d9d32d35ff268d183eca6331e37778cb517c07435ffcc73f61f111c459f20fa5331121cc2a12e
TLSH
T1BED0C0203D08F804C680303164C00761B7104911202B92847220F03EEC281E6535F4EF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f3a272e842763bc287955d66e878eab2d4e392e39402c25c64eb53a22247eb4a
MD5 322ffbe422b415a35399af7676d79294
SHA1 90e4e6baf3a67bd55a268d4917ba15569c2bd25f
SHA512 c27a9bef92b8d44a596745bc91f0da2f61dc0ebe5f00126cb251091d2e4e2168e4b93afebf91c1904e56d0ac0c255532b1be7edfb6b567d9515896cf2c5e9c5c
TLSH
T19671522737741F91CB6930B669D310C93F7A42A94B936E11028DB2F5CF0EB841ADD711
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fe60.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fe60.TMP
Size 3KB
SHA256 8731e1f9b439d5a4076a80a6c6a849a38bc9512363c675a7be7ca66ebad1bb82
MD5 f3022f46608983c7a7f829e05c56704e
SHA1 e205e536d8334f831e3f0bf92f077ee0d76c4a9f
SHA512 9a457c32502856ccf0c27f05ad8f69ccf334e61a67d9cca71e31e236ec325f4bd7dd30b4f4ffebe8a5506eb1ecdf38c3cd6f98f0c9f00f93248d5f6d7a2da7c1
TLSH
T1D371512737741F91CB6930B6A9D310C93F7A82A94B936E11028DB2F5CF0EB842ADD711
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6e0d4af57b204910e5dae91ff43ec0717f4ab3d2f1d0a2772f186f68cefb4728
MD5 32079db4bafc0aca101d6f42fd7153b6
SHA1 f1456ca5b42882f4a6528b46b4a21a1ffb2d247b
SHA512 b34d793eefbc878925d68d31ceee1e0795e4eda7953def0284da3799f12eb79b7097ddfa579ab7d82a7ebddd84f0efa8ef08fa4ee4216df0df73dacbd4c4c64a
TLSH
T1A0418BF783E4867E8A1196F0AA147E2BCE1D0955832C3C5AC9E4AF1BA3F3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 61b54e20096bf25f15ea7968dc10bcca0755d4f347df90e46f55db24874d2758
MD5 8a2c7725904820f5dcd936eb05d35fe0
SHA1 a3523f48aee722f2e39ba9e8abf458188a866aa6
SHA512 312d66052b853239677a3a9e7ce6172d243417f4be53dfacd19967d5cf2ec9fbbdfc43f57c9c34e7d5de4f56d2d70834be53929c239bda16c0c454514ceb2cce
SSDEEP 192:sxRV498RI5yM/jK1Ml8woYY/fzMsHqQ7xCMifTzoA8p4Va/g6+WNIYlTv78GmD85:sxRzeOf/fYsHZ9CMD9/5IBs
TLSH
T13E52EA156A24597BCCDBD20DFA55BF93D6F91533A2901E44AAFCC60C01E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 994ca7624426074381b28ef7e29a7cc289ccfd865e93a3bf545d1e2098d04659
MD5 6293118283e84bd29d31dc38daefef75
SHA1 10ff22396cf168a90f290757e76e30adaca0ca6a
SHA512 8ab368c0984755358a2f44969173f8161eb3f65b53bf4639c9a938d2e97893783197d36efe511ecd91b6d460b2dd9204ae6b23ed97d8b4a85a4ad3a0922a2882
SSDEEP 192:sxRVP98RI5yM/jK1Ml8woYY/fzMsY3qQ7xCMifTzoA8p4Va/g6+WNIYlTv78GmDR:sxR8eOf/fYs+Z9CMD9/5IBqA
TLSH
T12E62DA15AA24597BCCDBD20DFA55BF53D6F91533A2901E44AAFC860C01E77EC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1c7907d04438af38d26c5c924c1ebfb0c301ff0f83f3c6212ca7e4e51b59631e
MD5 687312f8d48670886d9c066f4755b395
SHA1 b4deb003b2aa832717bb322407eb1d009df6159c
SHA512 9a897f045e10c1f6e919aa753ca53c6f01e20b0561c4b1d9a746e295c8a07632a95cbd748acdf47d4203c1c45ba53b88c6c5333e623aa34a3434b73280762bcd
SSDEEP 192:sxRVP98RI5yM/jK1Ml8UQYXoYY/fzMsY3q1K7xCMifTzoA8peVa/g6+WNIYlwv7a:sxR8eqTf/fYs+F9CMDP/5IyqK
TLSH
T15B62C9159A24597BCCDBD209F655BF53D6F91533A2900E44AAFCC70C01E76ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0a8e9d635bcb7a56a0c803256d789af47470273ac0a00342d007b5d2d6dac588
MD5 1e00e8bbb24044b998ddb8c6c8581145
SHA1 8b4f07a200abe9f3243fbf196d65536f2e89365e
SHA512 c1b4d8cde18430f1370e7eb063dbce2345e745c27a91a2496f5f2c211d1b982ce8b61c438d5019b31598721724af30605b329e97d59197755e3e28926c3d4c50
SSDEEP 768:Jlz6pCWgFZfIp8F1+UoAYDCx9Tuqh0VfUC9xbog/OVD1dELroxhd0ny:Jlz6pCWgFZfIpu1jau7E4x70y
TLSH
T1A2C2FB3B640CC77F4F844A6DAC25AED66DDC02CB9B988D5447EA880C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3b16d890505b35760abecd8247ddd1a193c68f5e8340f93c4ec082a593737c0c
MD5 39866c63b22c5738b922d7b6669332d3
SHA1 e7d83011bfa3c4fe0256e4d3cdc84b28a38ca0c9
SHA512 0cc7bd67223a9ce2959e0a2e959dfe9f3673a2d0a41d872bc26515c3c6c8ad9a0894596f7aa6a239fc8ba672a0097f75b3162bb5c451e57d9717bb573e8dc80b
SSDEEP 48:KohI9K6oAPyVdIlK+IQXyFpI9KqQIjS3eyEkUyz:KohOK6oimdCK+IyOpmKqQuS3eyEkUyz
TLSH
T1AE914800B37E1711387E250991B8C82B4781746676DAEC3B7B9830D65F6AD407EFCAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d289.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d289.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 8f510dd73e05a7ee6b37707244bdb5b1fafcccf23acb718c510a291f0f264607
MD5 5f3b49b500e0038242f4964c8fb4f9f0
SHA1 b5c95d047390a94e063b0236e7b5855d9c348151
SHA512 01a35d639f7aab251e3afd54dbcf8280b3663e4a45f7c62e27563dcad7f51c0c80ce78f1e718d02b8b8950c8cb163d8ea2cb6ec007273f645038c30fe52a5e8a
SSDEEP 768:arv+4UNbdF362FqiGu9ERpX5xZp3M+119A2c8Kzd:absbH35qp1Rt5R7b1ctzd
TLSH
T11813CEB1AC648EB39DB394C5B54B3657BEF85243C6CA1A44D8CD2E4D02CB2EE130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 18b75a6e3555d2d78876e5c3f7bc196b6ab0e601b815384d10184aff589d956d
MD5 c9a07de2f081b2124fb7f0b946a7a620
SHA1 dacc5019db235a9b3081f7841eb772da9f27fb8e
SHA512 aef28e3b3c9503367936ba7083a5275448c5ed7ba9c3e413e78894bdef6cb0174ad840d3f29bd0c8a004616de1b0f3a835038144ccfd5d96363fce2ee4855082
SSDEEP 768:trv+4UNbdh3sjFqiGuLRpX5xZp3M+119Qt+8r2Jb:tbsbn3Oqp6Rt5R7bKDr2x
TLSH
T12F03BE71DCA88973ACA6D989B54B3217BEF852438AC61744D8CD2F4D42CF1EE131B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8246d65ba993993aac402bc225853dd511c26174c0bed23c4dc60c96857d545c
MD5 63c8ed7790de8c07c4d57965a94c509c
SHA1 a5d456b5e3fa22affbdccb0660a3a53078c7e972
SHA512 ccb58a669ac25324f476bd11e9eab88a93d57dcbc64c080a0296c2b93cb09a5f83233b4eb68b783f9df302632c7b6b1f7543f5993e2e5c6b5b4606be355bce87
SSDEEP 768:nj+9r3R2FqiGu9ERpX5xZp3M+119A2c8KzA:K9r3qqp1Rt5R7b1ctzA
TLSH
T18AF2AEB19C618DB74CA285D5B647379ABEF59353C6C62A4498CD2E0D01CB3ED131B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 aaebbd49877c54e037b060260d35d54703f70d3121e62df12a1f047386cb9089
MD5 aea087f952bd00e0eeda8137c1ca824a
SHA1 66e30c8c65ac3c716c3414d7ec821633f20169bd
SHA512 0354d0ed5f65d3d512911f7017a02bb8d22668dc406dc0d0af6f3dc6344af7766611cd82ddd16998d8672af55b06a268270660b52e73ed8bd38da701a77e9cbb
SSDEEP 768:uF1j+9731wgK2FqiGu9lRpX5xZp3M+119A2c8KzA:L973tqp2Rt5R7b1ctzA
TLSH
T15F03AEB29C90CEB79DA68AD5B60B336AAEF59253C6C66A40E5CC1D0D01CB3DD030B856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3ba53054dedb488db08d5ca6ae6f5d4b84be1f5b7e9ec64c84f637e0e3cc2c90
MD5 cb331215749460950705c9753d265826
SHA1 582a6e6971a4873049f0f4047ff5b438a1760b2f
SHA512 4e024168f827d49e73a9bc13ac9f91382c1839f80acad4679e3d1a413ec71494e674a5bfbcb51f1b2a05d57e79e572ac3cda9a4086a9db3c689573893aeacb56
SSDEEP 768:3j+9r3c2FqiGu9ERpX5xZp3M+119A2c8KzA:69r3bqp1Rt5R7b1ctzA
TLSH
T1DAF2AEB19CA18DB74CA2D5D5B607376ABEF59253C2C62A4498CD2E0D01CB3ED131B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 11782d1956bab2d17bc0f06b9bd572d2effca25ee970ea67007a8f5ec8687958
MD5 28224270b527b6f3042e8de087844f3b
SHA1 175522e8163740594736ae451e9542b5adf387cd
SHA512 25dae6854bc4a77b3019b922dd09a8ccbeeb4e6af0eb68e2c89c0a64f67173ac736c372b0381c0c3e57b54c790fbefcec6eda492c928eafadbcb6593dd156e52
SSDEEP 768:OF1j+9731wgK2FqiGu9sRpX5xZp3M+119A2c8KzA:r973tqpXRt5R7b1ctzA
TLSH
T15F03AEB29C90CDBB9DA68AD5F60B336AAEF55293C6C66A40D5CC1D0D01CB3DD130BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13637168-e432-4956-89ae-9601361204c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\13637168-e432-4956-89ae-9601361204c6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Unconfirmed 998280.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 998280.crdownload
Size 320KB
SHA256 4c2f15e91123c94b87e2868986dc86201ca2e980ee8c700072b7565ca804630f
MD5 6a83f1e2bac7685a8e62863950ddc418
SHA1 cb57b64989ceb6b930bce4e4f6b8d9b4c8d60208
SHA512 888df8852adc92d7b691744aba8d98b43260976814e023279e4e72892de7cde40d20950397d8f45600e451f47bed41c0a7fa526399653ed770ea54a3d8114d83
SSDEEP 6144:PTV+T8myJz6DYIdrnH296ElG6Be56fbmRlP/gouuTQTR4nl3yAsd:YMJz6HSptw5EQHgoukoR4nhy
TLSH
T1EE64CF4B67F530E4E677867884924655AB76B87107309BBF32AC02691F63EB04D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download