322d5b2ced888fd4a716c11b5a8b78bfc1abda7ec1a058a67980369a4e1a32d8

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 56KB
Sample260723-anqjesec82
SHA256 322d5b2ced888fd4a716c11b5a8b78bfc1abda7ec1a058a67980369a4e1a32d8
MD5 bcc1065e141bff1341f7028f2f0b889f
SHA1 7175fe5c0ebb5c562d68305abc6652f3dd430da7
SHA512 081dbb9dcf33be7144ede56cba5b99705061a040b781124168b4b96a0a6868e63424456904cca7d0098b25e18163c9431ee3ad1f75595390f7539696a0559a57
SSDEEP 1536:3nypmRBWDtMeaLy3a+q8wVRbtaj/l+naUMOItKF:3ycRBWD08wVF8GMOItKF
TLSH
T19343C672D5B52C53623E8598A276337AAE57A00BC6011E6D72FCB6548BC3C6B047F6CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6536	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292399957447215"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{75A53319-E755-4851-9BF0-70533FA521A9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4092	msedge.exe
4092	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe
5552	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 5552 wrote to memory of 1424	5552	msedge.exe	90
PID 5552 wrote to memory of 6536	5552	msedge.exe	91
PID 5552 wrote to memory of 6200	5552	msedge.exe	92
PID 5552 wrote to memory of 6200	5552	msedge.exe	92
PID 5552 wrote to memory of 6200	5552	msedge.exe	92
PID 5552 wrote to memory of 6892	5552	msedge.exe	93
PID 5552 wrote to memory of 6892	5552	msedge.exe	93
PID 5552 wrote to memory of 2480	5552	msedge.exe	94
PID 5552 wrote to memory of 2480	5552	msedge.exe	94
PID 5552 wrote to memory of 2480	5552	msedge.exe	94
PID 5552 wrote to memory of 5948	5552	msedge.exe	95
PID 5552 wrote to memory of 5948	5552	msedge.exe	95
PID 5552 wrote to memory of 5948	5552	msedge.exe	95
PID 5552 wrote to memory of 1964	5552	msedge.exe	98
PID 5552 wrote to memory of 6304	5552	msedge.exe	99
PID 5552 wrote to memory of 5156	5552	msedge.exe	100
PID 5552 wrote to memory of 7068	5552	msedge.exe	101
PID 5552 wrote to memory of 7068	5552	msedge.exe	101
PID 5552 wrote to memory of 4584	5552	msedge.exe	102
PID 5552 wrote to memory of 4584	5552	msedge.exe	102
PID 5552 wrote to memory of 5704	5552	msedge.exe	104
PID 5552 wrote to memory of 6608	5552	msedge.exe	107
PID 5552 wrote to memory of 6608	5552	msedge.exe	107
PID 5552 wrote to memory of 4092	5552	msedge.exe	109
PID 5552 wrote to memory of 3284	5552	msedge.exe	110
PID 5552 wrote to memory of 3284	5552	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff8ebaec188,0x7ff8ebaec194,0x7ff8ebaec1a0
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,7818075902331388560,11326371754842446276,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,988403498125718350,17258714198337627907,262144 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,8257668594914678708,15670097644800322166,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:13
  2⤵
  PID:6892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,9290463317419689536,1440025627233778172,2097152 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,6241735755989392405,1181780370415237493,2097152 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,13715385927729928801,1307084294971805940,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,1523572134504993229,14360844674316822378,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:6304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,16931953170124965974,8735820089528525285,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,10265194873107295709,9294917316652556806,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:7068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,9330290293570246920,7499470319872462984,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10302353280593410272,9156790360866220652,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10302353280593410272,9156790360866220652,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,14731745469367169897,16381079184727312697,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5176,i,16149249441807482990,1406037152516216127,262144 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,7884757311270656539,10693482901447664030,524288 --field-trial-handle=2580,i,13586205740349803399,11527938992195238979,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

282ed15d-e1e6-4b72-91de-b25e26deb118.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\282ed15d-e1e6-4b72-91de-b25e26deb118.tmp
Size 14KB
SHA256 ff4a0b729a4d1f5f91356fa28ca34c423561564d1eda445835e9821899650c36
MD5 6e1914c664833d8af11ec07cf2db67f5
SHA1 10fc3e537c37710b207b7966a50dcd24a0f9867a
SHA512 003f988e9bf300658078b9f37c180c23cb7805add06e9404f85c318423a7473ca4dfbc330873c7a623b210cfae3686ba7676015cfa5fa73016b9cb196f6ec5e1
SSDEEP 192:sxR3RSyMqZjK1Ml8wbP/fZsp2XNRZYyzoD8pey/g6+WNIYcC4ClsGQvGJIgjRJ:sxR3NlP/fZsEXN/Yux/5IW4gsGQCjb
TLSH
T17A62EA1AAA749D7BCCDBD219FA557F93D6F81133A1505E44AAFC8B0C00E66DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 448bf70cc0ea5fa18e18e6e9332064a5c9456773232e611882240f6cb3633e04
MD5 e55e83041f92379c53e9db5b9d0c0d6d
SHA1 e2dee3ef28f21453d746b6cf16699a374b47920f
SHA512 4b45ef7e7ff3b732d4600b1a945bebdb13a61e0ce07c31f4ce14ac269fa43c3618566c93546b214c476b3edfc48e101cb1ff15cbcede383d1e74720293de3107
TLSH
T19AF0F9AAC921BC372DFC1B1870980A47FB50132B3B41984B3B3C820C4FB063B474682C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6bf386a1fc0a516d4c5cc3f6607749dcf71200ed113653cf7b743962ec31e7b6
MD5 02b26cdba8eb1e69693158cc9dad6ae8
SHA1 17bf561cf86ccd9b1944854d8e8463e0510b9987
SHA512 45b036f79f79d7d5282a4fe0053cb1f8b880b0c79c8c76e0dc9bfd51cf6bea00dd251578a16e5f5cd56d002b05442fcffbd63bd22ed0ab0d925dacd3841c08f4
TLSH
T1B051CCF7C3E8866DC90196F0AA147E2BCE1D0955832C3C5A89E4EF1BA3E2471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 99863501ec6039a08e0b6ff0e45053a6c788345d5a4dcd624dcd26cd6dc2b9bd
MD5 4e5be2d8ed1eb08052b25263bf65ab2d
SHA1 00396c3669887b50688e549484c834fd182cfeb7
SHA512 1c96bce284de30954751c4234e352733cd66f56570645779b219b72fb9b9a731014afa89370f53fc43574c6b0d2aea725c2751fc60aa41d7e2cca4a6af214fef
TLSH
T1F551CFF7C3E4866DC91195F0AA147E2BCE1D0555432C3C5A89E0AE1BA3E2471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ef3d42f3957ece5898efd234522b1b8fc4778505a29edbd5b281d3c4d0b205b9
MD5 a2cf0179ed88812ce96d9d10ab3f2c68
SHA1 da4191ba7a94af09d5f0e9ae6f6aa4b142952f3c
SHA512 c1580abc11ca577138fea9f8b7ae05c0b02ab84b899345b44aeb64d6648da582253b066ee963575893eb301fc4dfb3c47bf1e4c85ba4ca8f9e376c76ee1e21c8
SSDEEP 192:sxRgRSyMqZjK1Ml8wbP/fZsW2iNRZdyzoD8pey/g6+WNIYcC4jlsGQvGJIgDLRJ:sxRgNlP/fZsliN/dux/5IW4hsGQCXb
TLSH
T1F162D91AA9749D7BCCDBD219FA957F53D6F81133A1505E44AAFC8B0C00D66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2e786f2ee5c878ef58d630096741e6aff83fb889760be34c112dabe66731bd77
MD5 1667894221b1a9a657ca2182c8a40ef7
SHA1 5490b13581b816b2eef509ecb0dea2b5051055a6
SHA512 7b58419791f6db8da295eac4f8302591961666018d182a4d49318fd0127a4c95d84daebfe495cdf0947ad2a75f24fc60535f574c1bfff743fd03be335240d60c
SSDEEP 192:sxRgRSyMqZjK1Ml8UQAbP/fZsW2iNRZdyzoD8pey/g6+WNIYcC4jlsGQvGHIgD1b:sxRgvquP/fZsliN/dux/5IW4hsGQ6Rb
TLSH
T1AB62D91AA9748D7B8DDBD219F6957F93D6F81173A1501E44AAFC8B0C00E66DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 091647d5b8d66598fb040aa5f229abea4dc91e3f19e611c5a2d937f7d7d402ef
MD5 f427c6687d98a0a56ab573478ade824a
SHA1 c6934927126d71e77ba01e83c837fccfbf58ee22
SHA512 0ca02bb81f71da1f08218e2254a66d245e9373b4eddb6750fb34135fe63240de2bcb15b741eedd58756e8f03130051a1b5a4c61f47619826b1c0b1aede779338
SSDEEP 192:sxRgRSyMqZjK1Ml8wbP/fZsW2iNRZdyzoD8pey/g6+WNIYcC4jlsGQvGHIgD1RJ:sxRgvlP/fZsliN/dux/5IW4hsGQ6Rb
TLSH
T19A62D91AA9748D7BCDDBD219FA557F93D6F81133A1501E44AAFC8B0C00E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 d53c40f0759868fd150667ac1c8aa27d25491ea8577da93c40579410b8931599
MD5 70d6c8419eeb86ce10dab8dd89755003
SHA1 92562dc70c0bbb2b0d784e1765801e4081b066b7
SHA512 ca8f4f72af1ea9c905b71bd161a806eb851cfbab39990508e31a3f99f44c263ce4065506adbf608d2d7954b963857e64d116fc9bdb29fafe47f3453bc2dcf2c5
SSDEEP 768:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9fFzw:yv+RpPYDDRPbIhJ9fFzw
TLSH
T1F0B25C51713F5680383EA90C91B8D81E96C2B4A37119F52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 2f8cf180d373cdfb4a50a9e3e1e01780ec445cf17163bb139588420585e962c0
MD5 8f884727c30c57bc85e43bbc3c20b2a8
SHA1 ab5c97f14f3280b94f41f2633fb571dbc82e2e49
SHA512 519d68597e9f8b7cdae7e1c7b152bae20d0a52b0a983bd0b596c22436b232ea842f143e8605dd88b670f69b283cd5a3dea57ab2e41c92543d2dbf36c6a00bb85
SSDEEP 384:nkiF1tNn/s3n9Sa8NLc8TUNTUlIRjPvuTwRXEqfbzG3+3YEi3r5vuXDci8LEEIzJ:/F1j+97QcwgpuQtG3yYEMduXj
TLSH
T1A2B23B36E855CAB7ECE74ED9B70A3646EEE4416384CC5AD8D6D86E4D00CB1ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 b5e0ad880b018b327c906fd648c5aabb24a4826e8e3671f7601a0a0b49ebba7f
MD5 9a018116f2fc267f26d487933b384d71
SHA1 ced56fc440df82d80cad8f2335d6058a416b7106
SHA512 84c4093917919c3630ff84a04b2d0b5265684f27dbe976d2ff3671b98b9bea906ef5a9ec2cbdf1009076b7f0c972d43899da04707db25481822668b5eac13d10
SSDEEP 384:n+iFEtNn/s3n9Sa8NLc8TUNTUlIRjPvuTwRXEqfbzG3+3YEi3r5vuXDci8LEEIzJ:VFEj+97QcwgpuQtG3yYEMduXj
TLSH
T169B22A36E895CAB7ECE74ED9B70A3646EEE4416384CC5AD8D6D86E4D00CB1ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 36f106d8095f9b9916a2f9300060040abf1b14610783fbe7d3a20f21593704ba
MD5 d1614db7e1ffffb644d0ec15973eeb43
SHA1 e6c7c93ea6408ec072c8f7d6fbaca4556f990389
SHA512 96061d42a6d4e2764cc78f09da120b6459479890e972ea39f1c0b326bc81a44e7de5a62ab3f4767f3655be32cccf919bd2d50cc385aa570fac6305ef5b2181f8
SSDEEP 384:nJiFVZcIn8NLc8TUNTUlIRHPvuTwRXEqfbzG3+3YEi3rgbuXOObjI9G6w7mZs8LX:gFtnQcwg5uQtG3yYEMguX29Ms
TLSH
T1FBD24B36ECA4CAB7ECE78ED5B64A7506EEE05163C59C4AD8D6D85E0D00DB0ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 988a054af1c06eb778e81801365a6ebf2fcca716ac454ec408c5959afd5c963f
MD5 ed7fdd4733de732d8d9ed14316c87126
SHA1 a5ff6440e00c8f86a091eb541493384ac98485ab
SHA512 09d35a1211daaba833c9975d6a616e683de3e12089372a122825154a62fdfcf761edbaf6e5915e45d623056f52f3b5c81f845606af7c5c1dfa76fa5f1489fca1
SSDEEP 384:nkiFEtNn/s3n9Sa8NLc8TUNTUlIRjPvuTwRXEqfbzG3+3YEi3r5vuXDci8LEEIzJ:/FEj+97QcwgpuQtG3yYEMduXj
TLSH
T197B22A36E895CAB7ECE74ED9B70A3646EEE4416384CC5AD8D6D86E4D00CB1ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 1306d2347fb4d8ea269470a00089ce20c314a56476cd0a8a140057aeb60a04f4
MD5 782a20b4b00fde8ce85be25aee8db185
SHA1 0bab856dad395ef5e51a9928b9818303ced1949c
SHA512 a0131f8f1dc6a31bb338085a9ea969dbbcbf6415099053f9b2e76f1ea1280403446489a75a17798c08855ef8487c44233a30a4d12df6e9a43f0e1fab82285036
SSDEEP 384:n+iFVZcIE8NLc8TUNTUlIRHPvuTwRXEqfbzG3+3YEi3r5vuXOObjI9G6w7mZs8LX:VFtEQcwg5uQtG3yYEMduX29Ms
TLSH
T145D24C36ECA4CAB7ECE78ED5B64A3506EEE09163C59C46D8D6D85E0D00DB1ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6110d9f3635ae8d2051461bd08fc9ee3b6640fef252f99fd94e70a417f3663d9
MD5 d6bdf36be9184eb09fb5379b1a586f08
SHA1 0dc59cace5d29c7d37032aa84d2e70b5103f2385
SHA512 1ae0dfeb5704e9b4e1e25f0c51e9709efa3656a3bf4996d3bf4381f9053c26af7fbbb8e929da56df3e31f5234d0aacfdef182bbbbe763cad11529870474853c9
SSDEEP 384:nmiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTugREqfbzG3+3YEeLulOObjI9G6w7ZVi:NF1j+9SXswgUu3XG3yYE8ul29MW
TLSH
T13CC25B36E859CEB7EDE64FD9B70E7A4AEEE0516384985AD8DAC85E0C00C71DD4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download