44ca7cf767b3dd9d40e5c1363f8e3085c2d80a469287ed2eaa1a7d8e12962a40

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 6KB
Sample260722-wza4rseq4v
SHA256 44ca7cf767b3dd9d40e5c1363f8e3085c2d80a469287ed2eaa1a7d8e12962a40
MD5 1e1295513bc7b060fb3b73f7fc124116
SHA1 4b48d10ff32709a8af26946a44ddd9f0bddca11f
SHA512 0a43fd920f69b2cae3d616c46e18ccdac89de07df00bb4b197e977762e8a97c5a5353cc16f8d1650a16146db005835d89bcaac362cf652b1e2b37944932c531c
SSDEEP 96:dIudzk9cw9CSPKJAJh6/sUgnlOEDNwJYItK9Ys9UsT4CUbnIpf:jzkOpSPRJhi0OrGLx
TLSH
T1F2D1546541F198F7210300E97B265A0B3F90E713966E92047BEE4BD92FC3C56DE1324E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3916	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292180730004650"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{F0000E7C-6668-4AAC-9596-4791BF283C77}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3204 wrote to memory of 1668	3204	msedge.exe	88
PID 3204 wrote to memory of 3316	3204	msedge.exe	90
PID 3204 wrote to memory of 3916	3204	msedge.exe	91
PID 3204 wrote to memory of 3316	3204	msedge.exe	90
PID 3204 wrote to memory of 3316	3204	msedge.exe	90
PID 3204 wrote to memory of 5984	3204	msedge.exe	92
PID 3204 wrote to memory of 5984	3204	msedge.exe	92
PID 3204 wrote to memory of 5800	3204	msedge.exe	94
PID 3204 wrote to memory of 5804	3204	msedge.exe	93
PID 3204 wrote to memory of 5800	3204	msedge.exe	94
PID 3204 wrote to memory of 5800	3204	msedge.exe	94
PID 3204 wrote to memory of 5804	3204	msedge.exe	93
PID 3204 wrote to memory of 5804	3204	msedge.exe	93
PID 3204 wrote to memory of 3176	3204	msedge.exe	96
PID 3204 wrote to memory of 3176	3204	msedge.exe	96
PID 3204 wrote to memory of 3176	3204	msedge.exe	96
PID 3204 wrote to memory of 4380	3204	msedge.exe	97
PID 3204 wrote to memory of 4380	3204	msedge.exe	97
PID 3204 wrote to memory of 4380	3204	msedge.exe	97
PID 3204 wrote to memory of 4192	3204	msedge.exe	99
PID 3204 wrote to memory of 3900	3204	msedge.exe	100
PID 3204 wrote to memory of 4192	3204	msedge.exe	99
PID 3204 wrote to memory of 3900	3204	msedge.exe	100
PID 3204 wrote to memory of 4312	3204	msedge.exe	102
PID 3204 wrote to memory of 1904	3204	msedge.exe	106
PID 3204 wrote to memory of 6048	3204	msedge.exe	107
PID 3204 wrote to memory of 52	3204	msedge.exe	108
PID 3204 wrote to memory of 5704	3204	msedge.exe	109
PID 3204 wrote to memory of 5704	3204	msedge.exe	109
PID 3204 wrote to memory of 4312	3204	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffeec69c188,0x7ffeec69c194,0x7ffeec69c1a0
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,6133139225142731451,12023826922713194141,262144 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,11398251096204719061,9846833968296684895,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,10579052443014492113,17445991112188938721,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:13
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,5294503886181034100,9111750613459914029,2097152 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=2616,i,16913692749350558227,17247119563393575318,2097152 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,8867919368046296799,2916758176905734712,2097152 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,8406999917909883593,1720452837481694971,2097152 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:9
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,9615582855681589281,10847880445557175972,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,17481795797529092345,16756767794316533159,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,14009834177721381611,13013302845551802975,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,14009834177721381611,13013302845551802975,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,17269023334552538537,2063201467408754282,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,4191936920545796518,5592053704464024711,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,13249930163730045545,4165198347888979542,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,9670542803732614127,18307428188290409077,524288 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6536,i,12790008863824418435,7854070557769183242,262144 --field-trial-handle=2352,i,13533527361521048421,9537562348864287154,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c5a625f82df7690a32507f4537cf4be354c4e4c7fa9e965def6543b96dc134c
MD5 bc7ee49fac154434d090c0df6b449d20
SHA1 c7e2ad9f674c999b45f75c845f3547ccda89e725
SHA512 33ca14219c7819a82043173df96f2e329ccb03ae2f75c9e711a4ffc8e343656c2534287874cc119e69ffb79b2a00f214a59c62190bf573dc256ef46b5373332b
TLSH
T1F2617F41831A18EDD7A788B1AFD0874833F29271EBC3AE54A0412CF05B67F3093DA027
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599ee6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599ee6.TMP
Size 3KB
SHA256 9c8a6a5746d4a23ea6d0d578d20147c312ad19e76019dceec30ce6b1f1a6ff9f
MD5 eb44514de583b3f3613a63381584151b
SHA1 d5766221257797dfcd4a7eeffd3de664a2e8d5c8
SHA512 43cd65fd9cc39a59a4710030578d766dc08eaf90f0e7befa2fb64dae440e7e68105896beb3a500df1bc4673a094c719a9f63192f716cb66596c602c980ed438e
TLSH
T106616041831A19EDD7A788B1AFD0974833F196B1EBC3AE5590412CF05B67F3493DA117
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2b2a28af7b40825f95c9b6513c1c12aeed3fb432ab12bd1d6a368858f9c39a14
MD5 ae28a01a10d5ccd66b94235eef79b26a
SHA1 9c18f8a956121687e570e58095dd96a2532a5238
SHA512 32773af138dbc8925784a8052e0454e566a5e8914a04b12571d7360022df90f16c8b9e576c54ec32dbca750dcb1116d52daf692bf469941c8c2eab0632cbc36a
TLSH
T11D418CF783E4967E890196F0AB14AE1FCE1D0516432C3C56C9E4AE1BA3F24B1E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 db514120e5eb52d849ebce8b3c8bdcd508dd84038a9d3516cd394e8cbe3f6780
MD5 01fb9d670aa40de6d25c642baa758cc0
SHA1 9a947430bc35e57e099e45e8b00ddd2530a47b78
SHA512 5e4e7fa317074b21e2d32ce0979989066ce0256fadbd79c9e2f38175da5cf2e5e7beea88dcf6822bb4a9a37ba1fea816ad83a0564a1536a6b42c5cdac1a934d9
SSDEEP 192:sxRUqRfYGbR/fzsaIKCA94/szoA8p4O/g6+WNIYD986SNe+GHlIgIJ:sxRpGYR/fzsaIZ8gv/5ISSNePs
TLSH
T13E32B6166928A93B9CCBE21DBA56BF53D2F95032A1D12E48A7FC971C04E66DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 feaf91dd0b28f0cedd1155027f0df6bf950136301759d511d22f99464f4804ed
MD5 e713b112ca841cf41ab532cf391e9592
SHA1 7ef3e9b1739bfe7407ec94504b76ed336681e649
SHA512 10c0a28335d87059a132970b81f47fde953e010c4ff2a93748ce8c889c7794f92b0f930c42cf7d82677a1df8c3b2b4f7fa0e871dfcb5c9d51a40e819478c6d9b
SSDEEP 192:sxRUBRfYGbR/fzs7IKCA94/szoA8p4O/g6+WNIYD9o6SNe+GHlIgDnJ:sxRSGYR/fzs7IZ8gv/5IISNePd
TLSH
T1C542C71669286D3B9CCBE21DBB56BF53E2F95032A1D01E48A7FC970C14E66DD230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d5aff3fc55002d39eb35187648bd34a67637947e49fde8d0451bd31151f2c10c
MD5 e8010da6cc5f3bc6e88f2b2cdb67ce38
SHA1 16fcd58d185b5bf0a9dfbd57721933d7a6e71644
SHA512 a67d3051e410b2ac812ed733bf8d7d6e3d8321b6ad63c51116bf1c46daa0a7d1c9d081a060468d0f5cd61078f48d3443d2016ec91c1a5482f06bf8d96e360c74
SSDEEP 192:sxRUBRfYGbR/fzs7IKCA94/szoA8p4O/g6+WNIYD986SNe+GHlIgDRJ:sxRSGYR/fzs7IZ8gv/5ISSNePv
TLSH
T17A32C6166938AD3B9CCBE21DBA56BF53D2F95032A1D02E48A7FC971C04E66DD230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cf78f5ee11572168def347967ec083b528da2f47004721feeb82e7ff395465ca
MD5 7e8d234636e802b709f049ceb87d7c93
SHA1 864dacde2ae177d37cdd8f29f16d15f5dba504a9
SHA512 269404d39b6b2a491b650be97e04cfe026dea18b32c6f6c89467b777c1cc3757070867fd3d36bde8f4e3ecc6572683a3bda8d6c4607f11e13fda737ef5b8dc5f
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcPropD2:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VF
TLSH
T1C8B2DA2F600CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bbf6859d427cf58c9b9a241e1099aefda71efa06731822526b23e31dbe1472e2
MD5 029dc80151985c6927d4e513d77b7227
SHA1 c0ae42ce524a686cec49b42ce31b59c697c69c75
SHA512 1652b40b1383f8d7a428b564817330c624d5d475af0779e23de3bc024acccf4640fcb02b633836994db35808dde434b0131bfb6335c3235de56d52590f6ab34b
SSDEEP 96:KREWELEaE2EQE4E4EeWEIEdEFgEWEeK4ErgEEEecE+EWE1E0EmE/HEmE7EKEmEgj:CEWELEaE2EQE4E4E5EIEdEGEWEWErgEo
TLSH
T13B916684717F128038BD790885A8981BC2C374AA726C74AF7FA84157CF6AE135DFD6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f8bb9732-b24a-4ec0-b027-977ce0608433.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f8bb9732-b24a-4ec0-b027-977ce0608433.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9b51674-b0f1-4133-892c-29633e72ad1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f9b51674-b0f1-4133-892c-29633e72ad1e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 21ab8a3d51bd37227c658becb47dd3f05eaede99ca8e799c5ce2dc8e6d9a3bf5
MD5 4e9cc38b7122621552e75d529e205efd
SHA1 43c8d3cbbf6b3b28528459e6ab7f554b4a03ad37
SHA512 5411e1f1b1fe79081bd6ab36a2928fee1d0026d0333eeb8a6411bdf167a773d37f234c257319a269486f6622f7279f5788a3f57273282362edad4b5ef781aad9
SSDEEP 768:xrv+4UNbdO3whAjgZi0TrEnjN3Gac1FbeVH1SCAB:xbsbg3wCYTQnjMaIEH1w
TLSH
T14613BF3669B89EB34CEBD385B04776037FB4525386C40BA4C9DD6B0D069B9EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 742da571c67dbf3857d97cc69b24aaa8bcaf8edbb13213f147bc70be262861d8
MD5 1364c6805218d1eb06161137aca46fdb
SHA1 e5fdaab7d76656653daf7186548fc64df7ef576a
SHA512 7971ef52e60d4c40414a363cdecce0df6bc2a824beb20586eddd31e9f915a5497094ee425cd4bb5f9bda805eecd940d6a1d620badf742c38c76b0ac087610c55
SSDEEP 768:dF1j+9i3YwgGAjgZi0BrEnjN3Gac1FbMjBa:09i3wYBQnjMaI+a
TLSH
T147039E376994CDB78DEA87C5B6473612AFE042A3C5C54AA4DBCCAA0C12C75EC430BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c440cdd4608e7446c559593436914164caf408d4c06e4ca1d1a5c2663670565e
MD5 d1f6f7124a031f72b087a3be0be31391
SHA1 2a81b70dfa7319f99ccca730386904380162f1a7
SHA512 f112e287c8e9ecb73a841a44c0ad89f13ab4ec8657647f8998177794fde6b2a307b2e7c21d3a37a6afdf92c45c95e5ce11cdea1fc2295337112a681d418e499d
SSDEEP 768:Urv+4UNbdO3nhngZi0TrEnjN3Gac1FbeVH1SCx:Ubsbg3nCTQnjMaIEH1X
TLSH
T16413BE3669B89EB38CEBD385B0477A037FB4525386C40BA4C9DD6B0D069B5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7ada390d6bce6cc568d1a02de4018e1146178dee244e3f2e33d0494c683939e1
MD5 07152aae1fe70c3d8af322e1a0e9b01c
SHA1 cf51ad1b26eb8e46b9319e77fad8fbd8006255eb
SHA512 f237e92ac57663e8bac06725870af0db2755698afee2c19ee0da5f6c24e807b481571e3497facb62ff728f02e238fbef9f51174dc48f63741b5eeba9eceae54d
SSDEEP 768:rrv+4UNbdS3fmi09rEnjN3Gac1ZaseVH1SCz:rbsbg3M9QnjMaIEH1V
TLSH
T1C803CF3669A89EB38CEB9385718776037FF4125386840BE4C6DD6B0D129B5EC130BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 212518fa2fc25f1becb1a6c6a16b7fda999f68938cfc9bd845bb9e3961d25445
MD5 a3ae8060ed2218d8dc0bb4539c82dfda
SHA1 905093ef535cad5949c99b6a41cb7d7488906e5b
SHA512 f7b7d6ba64833ceed79173bd201d65c17e6b7a8d8bf2c37d9909f6001a127c1fce2d48f0b01b73f1249ecd5c05e2c8a12012acad5059ff5b40ba78cffcdc0aa0
SSDEEP 384:qtNn/s3n9Sj38NlBnGpn3QJhg4WZlf8hyEGSO1RwOiFAy2rEoajo4cdR8eHhVOD+:qj+9s3VAjgZi0TrEnjN3Gac1FbMjBa
TLSH
T138F2BE3669659DB34CDAD3C9B5077713AFA046A385C40EA4CADCBB0D16C76EC530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e5dff3b-c51e-4ca1-bf62-870b328193f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3e5dff3b-c51e-4ca1-bf62-870b328193f4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download