5b090808d6fce870cb12371bbc3e30947f9f0437a35c0510fbc8420065481a6f

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 57KB
Sample260708-pehvjsft3x
SHA256 5b090808d6fce870cb12371bbc3e30947f9f0437a35c0510fbc8420065481a6f
MD5 081aea9a9133bdb5f2c9f1bada7a7550
SHA1 d882397b5ea8bb8158d247729268736bd288e5cb
SHA512 d6a758188b2460e43dcb4085d8835f1f904c8ac3d36b65861336302b0b5739a70399e5f6f90fd0b453a408d91d0bdbcb8e65b43aba922fb5a6c4022eb5e9212c
SSDEEP 768:Pq1cIHZdypJ95i6D4bG4Y1o4FKLFXDaT3Wo0sC6:P3uypv5TD4baRFKLFXDaT3R
TLSH
T1FA43A422C4B96CA3652E435492B2332E6C87F50BCA0559A8B6BCF554078FD9B043FBDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4856	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279864774533091"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2532687178-1633831978-1202193935-1000\{8AD583C3-D1FF-4B7F-B985-4C44AA820F1D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5396	msedge.exe
5396	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3180 wrote to memory of 2144	3180	msedge.exe	87
PID 3180 wrote to memory of 1876	3180	msedge.exe	88
PID 3180 wrote to memory of 4856	3180	msedge.exe	89
PID 3180 wrote to memory of 1876	3180	msedge.exe	88
PID 3180 wrote to memory of 1876	3180	msedge.exe	88
PID 3180 wrote to memory of 2968	3180	msedge.exe	90
PID 3180 wrote to memory of 2968	3180	msedge.exe	90
PID 3180 wrote to memory of 4416	3180	msedge.exe	92
PID 3180 wrote to memory of 4416	3180	msedge.exe	92
PID 3180 wrote to memory of 5816	3180	msedge.exe	93
PID 3180 wrote to memory of 4416	3180	msedge.exe	92
PID 3180 wrote to memory of 5816	3180	msedge.exe	93
PID 3180 wrote to memory of 5816	3180	msedge.exe	93
PID 3180 wrote to memory of 3712	3180	msedge.exe	94
PID 3180 wrote to memory of 3712	3180	msedge.exe	94
PID 3180 wrote to memory of 3712	3180	msedge.exe	94
PID 3180 wrote to memory of 2868	3180	msedge.exe	95
PID 3180 wrote to memory of 2868	3180	msedge.exe	95
PID 3180 wrote to memory of 2868	3180	msedge.exe	95
PID 3180 wrote to memory of 2612	3180	msedge.exe	97
PID 3180 wrote to memory of 2612	3180	msedge.exe	97
PID 3180 wrote to memory of 1192	3180	msedge.exe	98
PID 3180 wrote to memory of 1192	3180	msedge.exe	98
PID 3180 wrote to memory of 5216	3180	msedge.exe	100
PID 3180 wrote to memory of 2324	3180	msedge.exe	104
PID 3180 wrote to memory of 5328	3180	msedge.exe	105
PID 3180 wrote to memory of 3216	3180	msedge.exe	106
PID 3180 wrote to memory of 2900	3180	msedge.exe	107
PID 3180 wrote to memory of 2900	3180	msedge.exe	107
PID 3180 wrote to memory of 5396	3180	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffa4387c188,0x7ffa4387c194,0x7ffa4387c1a0
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,1333464914174917600,18221716645124154451,262144 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:2
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,8171403298278177646,10316317216586093691,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,11433888447634457740,7348140121375925861,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:13
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,16262664856260988577,11505849663719031178,2097152 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,18386194688263125340,13843606250373329184,2097152 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,4597477476654920234,12404207533545289803,2097152 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,18371275834306489224,630912373943343319,2097152 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3836,i,11825482868898502413,11160410542586576208,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,5083561671707229741,2133703696675008605,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,7107031473834374904,13416106716038512659,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,7107031473834374904,13416106716038512659,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,14696604909884804593,2719753657044890089,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,5760342893124543157,5883857797531240203,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,11942758134534294931,16806274202740053447,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,12488634413552887285,6690214207842158982,524288 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=840,i,12788204344958914362,16311553640163960701,262144 --field-trial-handle=2948,i,18131759264981619241,1606456763091427496,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 99348710dfa24f06e3cc9e5d66d99b450d2606932193b821d1cccbb1b0382494
MD5 99dd082560f2d99883b896493c6f1a16
SHA1 8c1328ed9b1727d8e368914ffd96b9d8d9882e17
SHA512 2eac54e4bf6c56c6a86be1ac66b75e47cf5afa02dca24674366691d2eae08e023308cf9c0e790eecff6d37160a3b4bc6aa0d7b2cbe2bf4b7074898f149ff8bfb
TLSH
T11DD09BE56640D94DC58020721593D555F5705931D80553C85001743DDC952C703574EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f2f36159b1a73a0ea0e59f51f1f373932375016885fcf17933887e7d1b2c3016
MD5 2dd00ee0ca93975f2038728e856681d5
SHA1 24fcfdb6befe18bca66bab129cd0fba4ad709e15
SHA512 d734e4919f2bc11b3e1a733c99b812ac0c7d2d76c45401d957b2b60a896b0bfc172f211ec13501d83d82cd3445e59aa5e9e4a25b2d71ff9d2f99bdb12460b4e4
TLSH
T10FD09BE56640D94DC58020721593D555F5705931D40553C85101B43DDC952C703574DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 eb0c6823585c1da4c41383d933d0526c6e765b752c4bcc77d0fa6e4d8b07214b
MD5 e88dbfc38ff864ad3165c0fefa0fe5e2
SHA1 3b7dcf61bcd1554774f4441b421c59f5c6c8a947
SHA512 803751b5fba5c58f299de2c5cd70e1fc6014486f5c02752c9f49a0c4df22ada02248c79b2fb882ee44176bc4535393cb2f46c70aa4b8f593fbad3b2802ad8653
TLSH
T1C341A44A03331EE7EBE544B326D1008B3E308C99E2C75F24E292E1328D7A34CD44E126
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 625f26e97b965a6c193378b9d224e4e1b2e447caa87586ca5e67a876caecca7e
MD5 37db9f8597176ec7b7c9713c798edeae
SHA1 1c44373b689c94833a7707208392e90f69e88849
SHA512 b42256b0428d0e693d0e76695166ff0282c57947fb39f9b10f73ce0b6f5580b5d183f4ca06c4d7f38164bc3a7e55c4fdeee0cec4f0fb316a242a2274e199b9d8
TLSH
T1F661BDF7C7E8867DC91156F0AB143E2BCE2D0519432C3C6689E4EE1BA3E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a80cda755a18c4a756b763ea6df554aa69657c6fb39f448d39362a83255ae71
MD5 9d1d4f798b449f330eb20e681a6ce57e
SHA1 f53dfc0eda15d82e4c1dd0720fbcafa06127fb27
SHA512 f1625d00d9bc291162b2e71793118c17de3392a29e76d0eb0758adf45008d3d339f18d7e5a1536b22f1307d4e31e1c9a467d7264922228d5ae1040019eca81f4
SSDEEP 192:sxRCiRuyM/jK1Ml8wbI/f1smyZpioM8zoA8p4G/g6+WNIYPQdlHGuIgDQJ:sxRCi8lI/f1smcUnt//5InFA
TLSH
T1BD62D716A6349D7B8CDBD219FA517F93D6F81572A2501E04AAFCDB0C01E7ADC2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c39edfd024ab2c8b8a497d0be7580478cd1f4dbc5fc4f5064ea478432177c0cf
MD5 5e32adf5d54b6c6435b84e9987a1af66
SHA1 ff9fc2db6acf6c604a00d95969f17b3b45b6fe46
SHA512 8a2e0a3fafe83065f75d1253817227061cfb6b6ad757d49c51ab9b58deccef75b35c5a5476a77e914e02fa0e7cb30c44ab099ea85e7af94f1a524c7409be020a
SSDEEP 192:sxRCiRuyM/jK1Ml8UQDbI/f1smyZpioM8zoA8peG/g6+WNIYPQdlHGuIgDQJ:sxRCi8qXI/f1smcUntd/5InFA
TLSH
T18A62D716A62499778CDBD219FA51BF93D6F81472A2501E04AAFCDB0C01E7ADC2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 095723118b1ff628a4f650396973a2e7d331390a488897c32f14451034c76d02
MD5 37c3432264029f86866b44b8c0ddd7cc
SHA1 c8eae5e56559c598a8a682da44b7c969908fcc69
SHA512 65da4f5fda498e2705a43628ee8a80b7a035fc12496d53d80865b3a001b0f69ce5d80d2169ff9fe0e552636f6abbaa98e1f4869de1aa1eac775526ca879818dc
SSDEEP 192:sxRCWRuyM/jK1Ml8wbI/f1sgyhpioMdzoA8p4G/g6+WNIYPqdlHGuIgIJ:sxRCWclI/f1sgQUnQ//5I5Fs
TLSH
T1CA52C716663499378CDBD219FA517F93D6F81572A2905E44AAFCDA0C01E7AEC2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 06455d19be92ce2c3f7805267c8623c44574546cd0c15548b8bf6f7213edefb2
MD5 ce9d1d33e46b4e833b31412bc8fd444c
SHA1 c0d411f8f693a77162411bacad81170cca7484d2
SHA512 3c383127a9c06670474598e2f3a8d2141a9143600c20f17b8c25c403201b9fffef2d556d47d434a4f96a1674b9364fb30617b79685881ad07ae6f404231133e4
SSDEEP 192:sxRCdRuyM/jK1Ml8wbI/f1smyhpioMdzoA8p4G/g6+WNIYPqdlHGuIgDqJ:sxRCdclI/f1smQUnQ//5I5FS
TLSH
T12852C816663499378CDBD219FA517F93D6F81572A2905E44AAFC9B0C01E7AEC2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b06e3e0f1d90df868f4d4d6c2632f441e6e4f0989128cc8e33981525e3f49bfa
MD5 9a34544b956f44f17cf6d3d3d2ca715a
SHA1 a7befc2db93e25be32b86df08da8dde336718451
SHA512 e86c7b6c94a35ada14f811e67bf8faba7627557767b247f6e3d9a4b80d33f5a0743a48fb5e4b426d93007c683f307e674ab2795dbc29a39a85a023f9657624bb
SSDEEP 768:5+Mc6pWgFZfsl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhj/erroVjN:5+Mc6pWgFZfslu1jaUTeYVjN
TLSH
T1F8C2FB2B640CC77F4F844AADEC25AE966DD801CB9B988D5447FA890C03C77EB521B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1097bb0a5e31197fe81123221e146536f399ecb41bedc0891704f3f7aff99e93
MD5 d9fae12917b2f46211dfa623831faede
SHA1 7c053e3ba0bb4468ec598509509b0a4f61c9b60e
SHA512 16d0768e7fac1f149330e4f5aa0182093e3f25d797f0f7a862092ee96b1070b36da8990856efcb5766b79e88597b775f23fa2ecb1fa0a9d9ad3e97e5c99542de
SSDEEP 96:KRFSr/VPTXWbAOgHXK42gZXc9lYrj8HwBUAyeSIWWLbgIIK4Ng6IcooVUGJGXThe:CFSr/VPTmbAvHN2gZM9lYrj8HwBUAyeQ
TLSH
T141916145743B42443C7E784991A58C5686C2F5A3701EA5FBBBA902E11F27E02CFFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 03901fa7106e0da3d0cb20c5bc2201a032ea73ceebcd3382f72c99abb0a0c326
MD5 7f24797885f8b768a7785f977a87de3b
SHA1 ffa66c75d829fea922e4b248c6260b6960707704
SHA512 10117842869f96c9ed5d9ec3130fa13e570fe9f1520d7753be826752e52bf317c732d62f7fd5871f656c4bb4ecbba21631633af9e6310a0b431d07ec2642b809
SSDEEP 768:9Yrv+4UNbdg3/oU0JGkMf5nfStfqf9X5WFbxsz56f0+ynobdq1T:9Ybsbq3BfZfsqf9X5WkQ5Rq1T
TLSH
T13A03BE32E82899B75EF3D689F25736477EB85263D2C40A9499DD3B4C029B9DD130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 342933a8c07db3c5e6f3f65e5885ae5a6567537dca9a2c675949ed1a186d2471
MD5 8bd94c41920d06d7ae19bd39d6c88f0f
SHA1 2d6b9ecc1f682032a8d4652813ac351f79e2095c
SHA512 3098e1b23a7fbdf795d04920e051f28088129f7b69ddfc71510b85692c5efe34a92b59faec8887ac2689078d30f1713861e20ffee78cd3f0a28a13ed27d921bd
SSDEEP 768:9hj+9G3/ov0JGkMf5nfStfqf9X5WFbxsz56f0+ynobdqMjxH:989G3UfZfsqf9X5WkQ5RqKH
TLSH
T111F2B036EC229DA75EE2D6C9F257374BAEB45263C2C01D8499DC7B0D42C76AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a5e4f30015b6be855896d9ddd74dfd5e37aa139c5532708b153530023dc0ec72
MD5 5302eca7e5b900540dc4fc9cd247a38e
SHA1 96f4f097b3836d44f8c3bbb63998c5f48010573c
SHA512 190df1b97e8282d85fa23aab01daae7fffbe533af70a2e5df215bfeb5d0cc9f1274488b5b101a153486fb8adeecd6b53bdcd4c3a41ef41739d5174d83273dc75
SSDEEP 768:luj+9c3Kov0JGkMf5nfStfqf9d5WFbxsz56f0+ynobdqMjxH:lN9c33fZfsqf9d5WkQ5RqKH
TLSH
T1B8F2BF36EC228DA75EE2D6DAF257374BAEB45263C2C41D9499DC7B0C42C7A9C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 af3e07315afc2c7d2bd6912aed5ca3ba9415270363db6204e636ef93bd73a2e0
MD5 ae48c9550e2722efd3fe6291b6697045
SHA1 a6dd41bd9e4b9549169d7a4b2498666232b13989
SHA512 4c32641d3c5df61fa45e3f3bcdd062396862c316baeb88de06c4ca30eb3c3508794572bc802e02cc9e8291de27c8870f18dd863e92a6d0b5e064a44be2e46a60
SSDEEP 768:Dirv+4UNbdl3av24JGkMf5nfStfF5WFbxsz56f0+ynobMUixK:Dibsbr32WfZfsF5WkQ5AUX
TLSH
T15403C036E82499739EF3D685B28B76477EB81263D6C00E94C9DD3B0C469B55D2307C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download