25fb23868ebf48348f9e438e00cb9b9d9b3a054f32482a781c762cc4f9cc6393

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 548B
Sample260718-aly3saes2x
SHA256 25fb23868ebf48348f9e438e00cb9b9d9b3a054f32482a781c762cc4f9cc6393
MD5 4b074b0b59693fa9f94fb71b175fb187
SHA1 0004d4f82b546013424b2e0de084395071eef98b
SHA512 f928e9faa0bc776fc5d8a0326981853709d437b7b1c2e238894bfb2acbb627442c425cbb00d369c52d15876b6c795e67f7580341686696d569a908a6add4b444
TLSH
T1D2F0909B6F19283F2E238571F4C75168CF680A66FF9925E28748011F7ACA04549F2FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5160	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288075309411944"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{4A0CD6DD-456B-413A-96AE-3DBEA6834A0B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe
1268	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 5964	1268	msedge.exe	90
PID 1268 wrote to memory of 5160	1268	msedge.exe	91
PID 1268 wrote to memory of 2924	1268	msedge.exe	92
PID 1268 wrote to memory of 2924	1268	msedge.exe	92
PID 1268 wrote to memory of 2924	1268	msedge.exe	92
PID 1268 wrote to memory of 3380	1268	msedge.exe	93
PID 1268 wrote to memory of 3380	1268	msedge.exe	93
PID 1268 wrote to memory of 3412	1268	msedge.exe	95
PID 1268 wrote to memory of 3412	1268	msedge.exe	95
PID 1268 wrote to memory of 3412	1268	msedge.exe	95
PID 1268 wrote to memory of 1892	1268	msedge.exe	96
PID 1268 wrote to memory of 1892	1268	msedge.exe	96
PID 1268 wrote to memory of 1892	1268	msedge.exe	96
PID 1268 wrote to memory of 5352	1268	msedge.exe	97
PID 1268 wrote to memory of 5352	1268	msedge.exe	97
PID 1268 wrote to memory of 5352	1268	msedge.exe	97
PID 1268 wrote to memory of 5220	1268	msedge.exe	98
PID 1268 wrote to memory of 5220	1268	msedge.exe	98
PID 1268 wrote to memory of 5220	1268	msedge.exe	98
PID 1268 wrote to memory of 3344	1268	msedge.exe	100
PID 1268 wrote to memory of 4396	1268	msedge.exe	101
PID 1268 wrote to memory of 4396	1268	msedge.exe	101
PID 1268 wrote to memory of 3344	1268	msedge.exe	100
PID 1268 wrote to memory of 3808	1268	msedge.exe	103
PID 1268 wrote to memory of 6060	1268	msedge.exe	107
PID 1268 wrote to memory of 4700	1268	msedge.exe	108
PID 1268 wrote to memory of 2248	1268	msedge.exe	109
PID 1268 wrote to memory of 5492	1268	msedge.exe	110
PID 1268 wrote to memory of 5492	1268	msedge.exe	110
PID 1268 wrote to memory of 4424	1268	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ffd415cc188,0x7ffd415cc194,0x7ffd415cc1a0
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,5450993233683906857,1123429101842882681,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,11382866152304070214,18120784408042863454,262144 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:2
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,17338224595138690073,7288115857207185307,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:13
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,17043218047371550393,11923224126959370274,2097152 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,5676147340716716274,7633129732686022312,2097152 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,15259803800584143065,539056815927004380,2097152 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,12469610720774196683,14923847097235295662,2097152 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,8943390558926752865,9553770921310048640,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,8918470877302861750,16269185395428609737,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,6413040531575715596,11912198501974396266,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,6413040531575715596,11912198501974396266,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,8776309882250866361,2018720238224310950,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,16079455371546168948,8274752824777850931,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,10442907664127134960,14688807108992580275,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3132,i,6412135609490454111,13464136190663627077,524288 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5764,i,14462965526128255847,11186423793399446184,262144 --field-trial-handle=2624,i,13082189059864596105,11555968867055141367,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5740

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d1c2bd301f6fd15ce491e436034724e5d2ecfb7c3419ec6f2f883f74efca9ac3
MD5 490a75bade060c2ff301a3ac96852b37
SHA1 4feb9fbe37ece454b8fec1c826a498c7d2af9b67
SHA512 857527598111ef64aa1e5a5a3667902873f62a5bb9e59b6072b000dfb9c1da7ba9380c7a23493f66e0f43b00fcd23973fa394edb7c6666ecd9b499b802428772
TLSH
T1696172D203A505F2E72845F210E1648B72FA84A515032E21F07CEDBA5855F341CF871F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596567.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596567.TMP
Size 3KB
SHA256 09e8ba3e50faebce4a9eb2bddc4a8d9c8ce4f00f46fb131b901e5ee2e9cc9b0b
MD5 dc95a7c9a522e15988b2212195af002e
SHA1 4313f5ddf9b34f9ded3606f519f722ff6729d29f
SHA512 00118f6b82c1087241b2ebf4cfc3a70dee8c534ec3deb2688e0d1f1195db13b610de93f023107a4278f08908ba2d2388feb3352757f06deb5df1f7e0a02cbdfb
TLSH
T13D6170D203A509F2E72845F210E1688B72FA84B615032E21F07CEDBA5846F381CF872F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9ea313571f02fe92d58d4e6486941bf3db9a29f1ed54d3c198048d92f6599edc
MD5 d04beafa74e2f226a1efcedff4ef008a
SHA1 42600d1244686934d38cc21abe207cc803f42311
SHA512 4edf10a342ad3d2fe07dfa38b8e0df81622e440dd56d78dca808d100825392dd2611dea86ca1cf52d4f3dd0ba81d90c4ee7054439e63b320668af7da9b5f09e5
TLSH
T1C841ACF3C3E4866E890156F4AA147E2BCE2D0915832C3D5AC9E4EF1BA7E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f8a05dbe79bbed984a5dc68e853cf0d82128f4c810cc875ffe4c6eb62659624a
MD5 523e2c231e75df39077e5301a4f24d6b
SHA1 cf5582b4115f3fa7b4b5ad5d0f40808cfd27f6a8
SHA512 6f37416e2fb36b02a36c8d337c71eca998aa2c4bdb5ce5a220e23fa58fe357a6843dfa4762292e35f9549d4a1cf337adeb08e0349e121a7e2d4e156592c8bd33
SSDEEP 192:sxRHR2bK/fVsKmWHFSaDzoA8p40/g6+WNIYbtZ6uGjIgIJ:sxRHKK/fVszWlSayl/5IK6Fs
TLSH
T10C32A7166A28A93B5CCBE21DBB667F53D6F9503261D02E48F7FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d624ae59167eb28fe0e34721d744426b1709397375f3e56707699b540d8f45b4
MD5 231c85f07b2ea13f783019f4fb4cd862
SHA1 3eb23d0577089c2a3127edf9f2c46e2263dba10c
SHA512 4366c1db7d327f95a24d553840f55432a0cd3edf6062a6e3d456dc8dea0cee6fbc8a94abbde2e8ddb78c47766bc7c5932f39ccfefef439aed02ac9419fb860fa
SSDEEP 192:sxR8R2bK/fVsgm2HFSaDzoA8p40/g6+WNIYb7Z6uGjIgDCJ:sxR8KK/fVst2lSayl/5IW6Fq
TLSH
T12932B7166A28993B5CCBE21DBB567F53D6F9503261942E48B7FC970C04EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 de07ac509e9a433e5c2ddaf3e03a19db06375eef663e09d34eb35bfa56bb4c4f
MD5 fdf5249f6b925265c54035115dc06fc8
SHA1 bd4d43ed1f386d18a8e9684f7f44629aba016323
SHA512 0d19315b5a5c72bb33ce9da7e17db56c80b0001254f0b9338818ae584d97d2531bcc2ea18cfba111e7bfb67b26b1617475b71e68fce4544c8244d1fb97b6f386
SSDEEP 192:sxR8R2bK/fVsgmWHFSaDzoA8p40/g6+WNIYbtZ6uGjIgDgJ:sxR8KK/fVstWlSayl/5IK6Fg
TLSH
T14C32B7166A28993B5CCBE21DBB667F53D6F9103261D02E48B7FC970C04EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7dce63956a8c47a281d2cbd5ef16d6dd302e9c8024c6f678da16839a0b398abf
MD5 d15e241f6eba54643e6da0c9edc147d6
SHA1 f039112c9de9ea059a43f8067153fe55a3926129
SHA512 7a65695080c91ce78bb39b5ffef6eb7006fb0dcf5c751db3a82b45c0617d0be91fc66da5c2bd002b4cb8dcfde4c21f65f4f828eed4419aea1f0506b941bb3f19
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFEroAoZ:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Ve
TLSH
T1F5B2DB3B600DCB7E5F800A9DDC19AFD76D9802C796588D8447FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

712671c2-4519-4a96-bce3-05cc9d38c953.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\712671c2-4519-4a96-bce3-05cc9d38c953.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 13227bc2b6dc73f25af487c6ecfcbe62730cfc62ba3d30a765ccb1bf3d8a35c0
MD5 aaa4b0dc8b0d408287e60409df16bae4
SHA1 9a2d1254949e64d52425c9c76466c9481d7ecd29
SHA512 6dcfc16c1a8a62baee598426e355a2a8256b73b117cb9a259149cafa2226f12d37134183b3d462032500e6c81cfc99c8fb4572dad11723a81eafe8123363f1d7
SSDEEP 768:Qj+9a3UGPBqobGQgjQXtZu4aWADIidy8LuVb9Mli:v9a38UXtZzaNsuVL+b+li
TLSH
T1FAF2BE3AFC56CE735CA69284B2873A4AAEF49263C6CE0DD895DC1F0E01D74AC4357D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6ba1d26eedb82b7abfc6907a6746aaeb2b86be673f528168d340d0bd5c07641a
MD5 e5c68ddeb82799e624c26b7637788a61
SHA1 ec41a3834068bb40f6186e4c5b84928b509a76b9
SHA512 b98f98c549d071af71effa9f911eea4f0d2ab7e2550bd153452d3db4e7cda653dbd99fe605ee2044ca570c9398a444d58b863cafb70cd0d6985f079b82a9961a
SSDEEP 768:brv+4UNbdE3j6PBqobGQgjQCtZu4aWADIidy8LuVeVH1S1C:bbsbO31UCtZzaNsuVL+EH1h
TLSH
T11E13BF36F8A9CE735CF69284B187360BAEF8516386890AE4D8DD1F4E01DB4AD131BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 bd58f39475b2d96887d974c5026d7a0cf09520f1f2e988eae9ad9464fa97a5a3
MD5 e6eb4b317186ac0e6a8137b5aecb50ea
SHA1 4d672c0ac5c45bcdc6044b6cbb0f5a8476aaa0df
SHA512 0452578ba8798c773265c0d4775c080bd093a369e2f22e79c091b9d75c3914244b45540ebdd21994e849b51ab6218303b099ce8518c34346e36b8cc671a274be
SSDEEP 768:gF1j+9J3SwgPGPBqobGQgjQptZu4aWADIidy8LuVb9Mli:t9J3aUptZzaNsuVL+b+li
TLSH
T1FB039E3BAC46CE77ACB69B84F2473A4AEEF442A3C58A59D496CC1F4E01D70AC0357D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 987504cffaa8e9eeced7aff2f4ac6adc8946b272a80fb0019fbdc94b6ee49223
MD5 add9f9ce0bf9cc739d0ebd609d9097d5
SHA1 c19e4f80a6f0d8e8ee4faa3f1d520ba3c1852506
SHA512 b0a0e38fb35f3b937191637300255c4e9dd881d411bfac1bce8d0f6ce1371ec8ded241fb86c3fd663092e98ecf1cc66a3ad191983bc2392316d80c4ee425e80f
SSDEEP 768:9rv+4UNbdC3L7LBqobGQgupZu4aWADIidy8LqTeVH1S1C:9bsbw3wupZzaNsuVLwEH1d
TLSH
T18903BF36F859CA779CF79284B187360B7EF8926386890AD488DD1F4E41DB4AD130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c899de6-d765-4665-9ad7-3f0928b06f6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2c899de6-d765-4665-9ad7-3f0928b06f6b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download