33d51d6e1434c50a729ba96b838e834c357d8b733856df5f0f19eda80a9e3323

Analysis

max time kernel
149s
max time network
161s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 33KB
Sample260705-wt8g3sey2w
SHA256 33d51d6e1434c50a729ba96b838e834c357d8b733856df5f0f19eda80a9e3323
MD5 43eb7a99fadcc95de9b81a66cd747a7c
SHA1 f5f7ff0634bf8f9d664d19b59bbd1af647a91eb9
SHA512 95edf590872227ad100d34bbcbbfeff1d1953274efe47749a1ee1f1e276ab154a4e01fa36202ce3709cded5682026cf0a90c8173f94ef081c871ef37ed239f0f
SSDEEP 384:Wnzr/ZdSZUaArkWFxEH1TxKxZ2TZJBTEjF/7PZhhfdnx/T:K/ZdypGGdzTEjF/7RfVx/T
TLSH
T10EE2D6B3A88540517BEF8BDFC055A31CB566F20DCD1986E6B0F901486BD4DFA299B20E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3124	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277488532228304"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3865087520-2734723108-1233268525-1000\{C6DA2764-3EED-40AD-A790-DD5AFD6B728A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
812	msedge.exe
812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6000 wrote to memory of 4532	6000	msedge.exe	88
PID 6000 wrote to memory of 3124	6000	msedge.exe	89
PID 6000 wrote to memory of 4492	6000	msedge.exe	90
PID 6000 wrote to memory of 4828	6000	msedge.exe	91
PID 6000 wrote to memory of 4492	6000	msedge.exe	90
PID 6000 wrote to memory of 4492	6000	msedge.exe	90
PID 6000 wrote to memory of 4828	6000	msedge.exe	91
PID 6000 wrote to memory of 2580	6000	msedge.exe	94
PID 6000 wrote to memory of 3792	6000	msedge.exe	93
PID 6000 wrote to memory of 2580	6000	msedge.exe	94
PID 6000 wrote to memory of 2580	6000	msedge.exe	94
PID 6000 wrote to memory of 3792	6000	msedge.exe	93
PID 6000 wrote to memory of 3792	6000	msedge.exe	93
PID 6000 wrote to memory of 3460	6000	msedge.exe	95
PID 6000 wrote to memory of 5952	6000	msedge.exe	96
PID 6000 wrote to memory of 3460	6000	msedge.exe	95
PID 6000 wrote to memory of 3460	6000	msedge.exe	95
PID 6000 wrote to memory of 5952	6000	msedge.exe	96
PID 6000 wrote to memory of 5952	6000	msedge.exe	96
PID 6000 wrote to memory of 608	6000	msedge.exe	98
PID 6000 wrote to memory of 5668	6000	msedge.exe	99
PID 6000 wrote to memory of 608	6000	msedge.exe	98
PID 6000 wrote to memory of 5668	6000	msedge.exe	99
PID 6000 wrote to memory of 3840	6000	msedge.exe	101
PID 6000 wrote to memory of 2548	6000	msedge.exe	105
PID 6000 wrote to memory of 4488	6000	msedge.exe	106
PID 6000 wrote to memory of 4432	6000	msedge.exe	107
PID 6000 wrote to memory of 2428	6000	msedge.exe	108
PID 6000 wrote to memory of 2428	6000	msedge.exe	108
PID 6000 wrote to memory of 812	6000	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff99e05c188,0x7ff99e05c194,0x7ff99e05c1a0
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,11963552845760239967,2376634531207549060,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,10384423233304629378,13015219428311962522,262144 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,10454928305983312786,15213413482214266234,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:13
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,15759667756811579689,504986900086739738,2097152 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,6725827145106691398,2971980348691309066,2097152 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,11859260769855634109,12083036228732377873,2097152 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,11026822095223405761,16235154654506833918,2097152 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:9
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,14742707449616552565,3686609234929596422,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,17192518724066545839,6693748465889008492,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,3081796988237088167,7212809220127669096,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,3081796988237088167,7212809220127669096,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,10190341122781610762,16817985272818676443,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,6094832335843790167,7435837658795165685,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,10430122875468127349,2224295923458850850,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,829896356920432409,2517157018270392891,524288 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6444,i,11381363695861727382,17080068091546604459,262144 --field-trial-handle=2644,i,5328012681993213795,5751506054824164130,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 37abd39218624bea608ed1c31cedc29697ad7dcee756e85d36f477bc96d5d79e
MD5 02d5d30f7a50d6501cf8e28620d036a8
SHA1 7b35285f7d86d5c3e0211627a1949eba907bccc2
SHA512 75c5013e8f146add9f0df252bb7669ce045b68d4f02b1aa7609d01a9ab18fda0f9b2e387ce15f36d76b8019dce58f4ed010f4a4528819164adeaf356a9fdc485
TLSH
T1FFD0C02D3D44FC02C1891070760033D0756001F03056C3C59002E01DDC3814083DB0AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b4b91e2c6408056d62e9ab108c4a1bc3372697cc673aea50cc1ab639cb36d31
MD5 31627e295d41c3cf43475c41d5522c43
SHA1 03580db0a47167f6acdfbb28d1db3e5fd631377d
SHA512 b71b6edd012c155ef24382afc691d07b436ca311747e424ecd928e1ae50b54eb9c2cef7113ea3e73a4f92dfa3cafacd84c0410c0f05a6860d79a46a87ba532f3
TLSH
T192D0C0293D44FC02C1891070760133D0755001F03056C3C59002E02DDC3814083DB09B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ad7fb161993e30f50a7b53622ab8823466b1c0a335dfe13d2e62b655ec69092f
MD5 54e86a29483891ecf5db28a3ffba385c
SHA1 aacd784e482decb0110e18009a2dcfa0136c6e5d
SHA512 bd0f32dddf7eb6b00172bb7e381ec994be5979a5d644c7c23f3580b2a3006b7c6b3491e2b8d13b1f6a055b82eabae3e6eeabb86bf07856fe84326c0c772bb5b8
TLSH
T1DE51520017BD8A12C32688B785D0B1ABFF77B293008F7F0A7C59A9374A4FB005B6E210
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c9ba9cb7dee9d98a4f963db48d1351f72c4baf4777d0b2af93e2cb36e8a3fc77
MD5 ab10c725682f666aa0ff6492ea56b9f8
SHA1 95c99c9ce1547a44cbc4524e226b633972607d60
SHA512 0f7c723538318e3ee49b22e638339cdf41a255f288c3d6a5c80572c8966d40c4aed91a8832c2ef08519346c8dd199747a849bab586f0eb04939cf8ff3b0bbbe0
TLSH
T18871DEF7C3E8866D891156F4AB146E2FCE2D0919832C3C5689E4EF4BA3E24B1E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3593436319afdc10f9720c0fe80adf359e316bcb299fcf37a8ec245d1fe361cd
MD5 96aba8bd92ec1784795ddbab11a8cfee
SHA1 adbddcf89c71e18fdb6de45b1324fd50b5d64a7b
SHA512 222724a85fd8bc6d8e2a8c38f88270d590fade6a0fc22ddc07af982cf47c784ce8157f6cc82fc6327901c3aeb7ca844455206d2a326020bd74c40bf944fc9800
SSDEEP 192:sxR/RRyM/jK1Ml8wFw/fwsj6K+Kl3p6O6zoA8p4Q/g6+WNIYHoR3GHIgIJ:sxR/dbw/fwsj6Ch0mZ/5Irus
TLSH
T13952D8066A289D3B8CDBD20DFA557F53D6F81573A2905E44A9FCCA0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0f448904cbe83e5b38610b54e4b4b0cfa5ce03c884516f21314d69261e39f878
MD5 97faf3979b004464feb856d707cb4905
SHA1 39e0265cd705e68010a0e02ffa6c3a3677b45775
SHA512 083a02279a8faba9e7e416c39ff4d8101887fd18d01ccf25cb8e678bf5ce0d6a6525325459eac934d1662b32e174a13599dc5e272e8f203daef73fda3f2b7fee
SSDEEP 192:sxRMRRyM/jK1Ml8wFw/fws76K+Kl3p6O6zoA8p4Q/g6+WNIYHoR3GHIgDcJ:sxRMdbw/fws76Ch0mZ/5Iru8
TLSH
T10152D906AA289D7B8CDBD30DFA557F53D6F81573A2905E44A9FC8A0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5791f8a29ec9ff8aa291f0a8202c08bfc645d845b92c435c42490fe7d0dc0a66
MD5 3300e7b60135ba1eee483d535e81a8d9
SHA1 8f5dfa8e12708fa7bfe3f240a5f558e80336e6ca
SHA512 b25cd97befff081ac55fb909e38e15bf0de1db9320203868aecfca992a2da2a3df4d43b2dab8e7c1a41ac382525a4b70dffe7687f7fb66cb4e338b3d3e823c76
SSDEEP 192:sxRMRRyM/jK1Ml8UQ3Fw/fws76K+hl3p6O6zoA8peQ/g6+WNIYHiR3GHIgD+J:sxRMdqVw/fws765h0m//5Inum
TLSH
T1E062D916AA289D7B8CCBD20DFA517F53D6F85573A2901E44A9FCCA0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7021f74d0f7664a5e9dfc8791d4c867586a36c0dd40aae81e350b806e3e77d39
MD5 203dfde0f2462c8aa71ef100157d6a61
SHA1 c02908152d7a047b42fe8408796db3cfacf95701
SHA512 52ee8066c70f0ad826a69e21905523c2cbb08edf80e500f960902abe65034b2d3339daa2b30b82b0505b67d94e87e1b61226bbb8636fa16b52f178619d3e3ad3
SSDEEP 768:6laYAjWgRNf2b8F1+UoAYDCx9Tuqh0VfUC9xbog/OV2AzwGro3J4L:6laYAjWgRNf2bu1jaHUw954L
TLSH
T14EC2FB2B640CCB7E4F84499DEC297E966DDC02CB97984D5447EB890C03CB7EB521A4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d4e5a722d07c32943babf1d4af4f5e861893cbca467028eb0f0f163e494b6778
MD5 8af5b8e5889c4ffab1942c79ccbadf68
SHA1 84887095d4032afa7846dbb717e5835c56c9a15e
SHA512 09a5c688b5127cce6ad5c605500f7179b125d7b0a2d84d5ebbad69d9ff708a8040cfa1a150a9f5d524947d3fa9f87c339abc7138a6d84e22b55891f7ff29dc5b
SSDEEP 96:KOf2DvFB1Qx5kD3HQKfF3NQDXHUtf9uJCKKQUOd2KmUWUsUtUYU8U2UP:9f2DvFB1I5kjHbF3NQXHUtf9FPRFUsU4
TLSH
T144912101B5BB5B01397E7809D3B8852B564234A230DEA83B77B861E11F66E005EFDBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3bb6d85f7e7ede32b643bb0f135a19ed7ae8e19d11476b19f62842998c4b7bd2
MD5 2f8da931c306109c65d269d9d78b6b16
SHA1 8b98ecb0dc98fc2b0c8baf72b3ab68ebe87a4355
SHA512 2cf5b7207bd4f9e72b738825756997df2860b228b48146883bacb69cb23e1b1b50eb961c7aa56b9a5bbb7465548cf8112143863f3b2782146fbca4ad537e6fe2
SSDEEP 768:arv+4UNbd/3+i7C9x+Tf/O1TfxgfvFWyvPIINRzWnhIoQfV:absbh3nTfOTfifv5gyROIoSV
TLSH
T10103BF32E9788E63ACFBD2C4B64B76937FB4455382CA0B90D9CD1B4C458F5AE130B846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6f5508090b11c0924efbadc2be1a409fb2daf5df6b3653316b95a88369ccbdbb
MD5 0487a1b4078455527f3bc4afadd0e275
SHA1 f10159f3ea25291098cd1987973e8475471468b8
SHA512 2da6a1085af5c08a9823d68572826f8cb15a7b562db62e842aa435a48ae0634c93208c27889c12f7f3b0ebd4752eff1d5e5581be2615232cb4514e03a20b137e
SSDEEP 768:nj+913+r7C9x+Tf/O1TfxgfvFWyvPIINRzWnhIoQfb9Mp:K913MTfOTfifv5gyROIoSb+p
TLSH
T1BAF2BE36ED618E639CA7C2D8BB4B3797BEF4466782CA1F9495CC5B0C05CB2AD8307405
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1b2fe11fba9060a937adc269bf3c92d9a7f9f1d00084d65eb5ad5f0cb5e1ef86
MD5 41ec1e8b537b91207a9710629c67b253
SHA1 c4cbd6f09feb5b9c6668ee0859f44f5fb520e5e9
SHA512 bcad2c7db07d285b206db1cf471d63d7eeab103ad7b3bb5fce298d94dd1e0a963dddb0141e7b1963e48c5d729c426e671c9dd95dc4a356203272c1783c1fee05
SSDEEP 768:Mj+9137r7C9x+Tf/O1TfxgfvFWyvPIINRzWnhIoQfb9Mp:L913rTfOTfifv5gyROIoSb+p
TLSH
T16DF2BE36ED618E639CA7C2D8BB4B3797BEF4466782CA1F9495CC5B0C05CB2AD8307405
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d0cd2395824c239763218654c19b5db488f8a616c44131deebed195e44d1eee0
MD5 c7ea54727beb908b32355f444fbdd5db
SHA1 0f045adca185212cbc23687d2761a6c7570ec85a
SHA512 9812e40da80225c19c37b9c67a50c6266aa218804c8ec3b2ebbbdc47140caa44a7b78547d05b19099aca9d8f678d6a91ac141429dc4d0806c49ae609002dd6f7
SSDEEP 768:tF1j+9O3iwg2r7C9x+Tf/O1TfxgfvNWyvPIINRzWnhIoQfb9Mp:k9O3RTfOTfifvBgyROIoSb+p
TLSH
T1F903AE36D9548E67DDBBC7D8BB4B3757AEF04267C2DA5B9096CC5A0C058B2AD4307801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 412af28f478a751ed53222a93fc9b8d43363cfd5bd938dde9e23115e49c6c5b4
MD5 c0257062335e764f9b379e5d13a49a83
SHA1 0ddadccdd1aec5996f740103ad412b347d42c278
SHA512 c1918b85205f2dbb04fd5d80110a535b493a7ef28c95de4352e5c480e1b7e9f4cea00a48438aa7cc6270c0e7e6885416e9d6dddf804b56f2ca283769d382c2b4
SSDEEP 768:arv+4UNbdB3lpC9x+Tf/O1Tfx4WyvPIINRzWnhIoAm+8r7W:absbT3TTfOTfsgyROIoDDra
TLSH
T13203CF32E9644AA3ECFBD688774B37577EB4416396C60B90C4CD1B4C458B6AD130B882
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b0956e8-1850-4354-8c96-433a142278a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b0956e8-1850-4354-8c96-433a142278a0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download