eb6cb0b1c83704a52b7b759ba32e07a78be2290284ea7bdef2f683886694f97e

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 12:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 847B
Sample260723-pq2rsscn3w
SHA256 eb6cb0b1c83704a52b7b759ba32e07a78be2290284ea7bdef2f683886694f97e
MD5 b2a7d343abc20d04813f0785bb6d60b7
SHA1 ac2cd6de650ef6a29e58005e66a4b8b9d6f982e1
SHA512 e33bf36af37b812805764f96cdf3fea7a8af750b994c4b70239f6fab48244edd18fd73fbc2e34b38c4dc6e32e69645c5dec6656c8de84cf76289bb5239970a27
TLSH
T19D011E4381B0EC09231486288ED2F4008E0AC697CB495E8978DE607D8FC2EC0CAEB179
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
448	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292837104827453"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{529FD6B7-BD66-48D0-A2FF-342995E778EB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3048	msedge.exe
3048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 5052	4444	msedge.exe	89
PID 4444 wrote to memory of 448	4444	msedge.exe	90
PID 4444 wrote to memory of 4496	4444	msedge.exe	91
PID 4444 wrote to memory of 4496	4444	msedge.exe	91
PID 4444 wrote to memory of 4980	4444	msedge.exe	92
PID 4444 wrote to memory of 4980	4444	msedge.exe	92
PID 4444 wrote to memory of 4980	4444	msedge.exe	92
PID 4444 wrote to memory of 4824	4444	msedge.exe	94
PID 4444 wrote to memory of 5832	4444	msedge.exe	93
PID 4444 wrote to memory of 4824	4444	msedge.exe	94
PID 4444 wrote to memory of 4824	4444	msedge.exe	94
PID 4444 wrote to memory of 5832	4444	msedge.exe	93
PID 4444 wrote to memory of 5832	4444	msedge.exe	93
PID 4444 wrote to memory of 5672	4444	msedge.exe	96
PID 4444 wrote to memory of 3732	4444	msedge.exe	97
PID 4444 wrote to memory of 5672	4444	msedge.exe	96
PID 4444 wrote to memory of 5672	4444	msedge.exe	96
PID 4444 wrote to memory of 3732	4444	msedge.exe	97
PID 4444 wrote to memory of 3732	4444	msedge.exe	97
PID 4444 wrote to memory of 5948	4444	msedge.exe	99
PID 4444 wrote to memory of 5948	4444	msedge.exe	99
PID 4444 wrote to memory of 4528	4444	msedge.exe	100
PID 4444 wrote to memory of 4528	4444	msedge.exe	100
PID 4444 wrote to memory of 2588	4444	msedge.exe	102
PID 4444 wrote to memory of 2748	4444	msedge.exe	106
PID 4444 wrote to memory of 3516	4444	msedge.exe	107
PID 4444 wrote to memory of 5040	4444	msedge.exe	108
PID 4444 wrote to memory of 5936	4444	msedge.exe	109
PID 4444 wrote to memory of 5936	4444	msedge.exe	109
PID 4444 wrote to memory of 3048	4444	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x2a4,0x7ffe096ec188,0x7ffe096ec194,0x7ffe096ec1a0
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,6206101241080972216,3936186948561980021,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:11
  2⤵
  - System Time Discovery
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,8996331242677672505,17490086256944554591,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:13
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,16062214191882306409,4848253038298061911,262144 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,7883832084079201361,4870586859920557190,2097152 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,6326381132853371705,310608877670790045,2097152 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,10849121619281919583,212347460602700940,2097152 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,10914964938707954313,15939073583142038753,2097152 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:9
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,17442037098768878082,2856849880742089998,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,11722408420683920215,5981530330873559803,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,7663505574616004517,12605620407005506154,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,7663505574616004517,12605620407005506154,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,6299053713103959975,7105730466623582166,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,1924403056475826277,4671709325765549889,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,4562864596835393433,8367802092804166306,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,1441888219549442780,9839474955830865382,524288 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:14
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,2740559728024354799,3279813962913334587,262144 --field-trial-handle=2604,i,15970127568200195151,18165985895045115902,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b01c7406847a6bd84152a0b8f93f38a4a216ff314a23dfc2d5e591f8f5742a48
MD5 d3e566b47b266ad9747442fe3ff00e01
SHA1 e872e4473973ebb83cfb54fe8ff91a212d7c6e68
SHA512 64ce1f003dd2b983c5f39ee94d5682af4fb7c7f0bbc406f92a416eb6ba97e1be718790135f3a5e9cc942d3ec616484a8fc19b1b1c10f4c4a7e63a432e2acd02d
TLSH
T121611C53C7324991D76845B66D9240FC3FF4B6B344473E7090909E7D7C82F6414E64A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d7c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d7c8.TMP
Size 3KB
SHA256 be0f72b1c11f3f38b91039784530e96ed9bba1236d4cd535c8aadda1f7c3f8eb
MD5 c6a257d3c9da2c59af4ea0ff50013b5f
SHA1 ac52c820ace15c2b2f5c730c4346222abb6ba3d9
SHA512 9124ea724753485c52cf59a8d538db4a36712bc305d16053d722f6db25779ae46acfe0476158a3ce635493b2cd3111e707916b7baabdb320dad90e1caf856a6a
TLSH
T125611A53C73249A1D72845B2ADA240FC3FE4B6B7444B3E7094A59E7DBC82F2424E64A7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bfffc28a509dfb7142d67ac79a8c9716034b14560be2555ee103b5a5f67dab80
MD5 bdecaaa84b47e3f79ea6d60c61136d4c
SHA1 5dd7dac26aa5bf62f4146f84e42c7b2a669b64cb
SHA512 4420424bed76349dc7a545b2971484d7cb252e0d7c6b7444378a587f0ec572368acca10d8921e46ee8505b5e2de1f90d7efa4bbe4b167fa4915503ab8ccc3504
TLSH
T12041ACF7C7E8856E890156F0AB14AE1BCE2D0955832C3C5AC9E4AF1B93E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

be050f69-40e7-443b-bc8d-08d0bb52f410.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\be050f69-40e7-443b-bc8d-08d0bb52f410.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 13234a66158067514ff9b74b22597ac68f768b09d9afc534446c91bb0e4ccf71
MD5 696b67011ea1a55f4fbede26e4caf68c
SHA1 1b30898e2f279a2a47159b27c032d2e4efcf57c3
SHA512 a04d31a0563e8727a9d4b482e73ba01706133b67b1f1ad23ef19d8b5875f8e0a9d02f6acb4aeeb6574a3e9b96ba2d8acde4711331b4932d24e2c5099ec8cd6e3
SSDEEP 192:sxRfkRnbz/f3sWmmYCbyzoA8p48/g6+WNIYEa3xG4lIgDoJJ:sxR8Vz/f3sWmmP/Z/5ImJsz
TLSH
T17442B71A6A28997B5CC7E21DBB65BF53D6F95033A1901E48B6FC870C04E77DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e71b93154af59008c7c7675ffccc367f74de26aca942480412a54af43840815c
MD5 dd57b061ef3f9676bebe3fc045a62024
SHA1 0f75c4528dbe24c31360b7300b87cce53a2a0796
SHA512 20151b14246ed2379083f66e1e1ff02ad238b9fdab3ca1cc078821a6bd89a9c75538032d359e0ac39bddccdf38fb8c7f9836e2dcaf767a25161ceb15f2c5a838
SSDEEP 192:sxRkkRnbz/f3sxBmYCbyzoA8p48/g6+WNIYE93xG4lIgIJ:sxRPVz/f3sxBmP/Z/5INJs
TLSH
T11532A5166A28A93B5CCBE21DBB65BF53D6F95032A1941E48B6FC870C04EB7DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3dfa164aa9433bfead6377c56eb59977bcf13e34e26cdcca4f210cf4ecbbc4b0
MD5 34b94ee637807f4bf3f4181b4ffe3f8e
SHA1 751170d081c96296495b5b9fee4fa4248cb7d454
SHA512 5341d8bd11b83fcf5eec213517e83ce9cab3e075897998605245402ea733f0cba7c9ad9979a3d4fd2b5cf365bc96ac9cf7baac9de0ef4aae82a6c664b000ebbe
SSDEEP 192:sxRfkRnbz/f3sWBmYCbyzoA8p48/g6+WNIYE93xG4lIgDo3J:sxR8Vz/f3sWBmP/Z/5INJsZ
TLSH
T14332B61A6A28993B5CCBE21DFB65BF53D6F95032A1901E48B6FC870C04EB7DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c1ab9071b58c486e35fa9ebcf43b35e3952ee92df929ad491315a11fd11d36a2
MD5 2485fd5ff2fb0ac05b81beb8ed3921f9
SHA1 da72d2bc2252f12e83a873c4a1a06ad358859351
SHA512 c4270bcbecf4b9a78462124533aa7782a6814dc02f2823e8af7a387abadaeb0979c9b23c08e8c40af7cded917ce0840f93f8c10d0f7fcab756952a14ae50d096
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVk:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo9
TLSH
T107B2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3f0257fb685f542c4493c81825d7efc778fa43f836250e97b7e72f2711e5ba82
MD5 d25dc78ecc05c2f12be367427a987c06
SHA1 a1f35692fc99aba7edb721bec1e7ae82d70c9635
SHA512 fe1d13dfd1ca8bd2af1b304c5b3b44f4cb25458028a0aa0c3c9a92353df4d57858a47eceeec95fcce60217e6725649571d51a3c803b240b98683a3930797d185
SSDEEP 768:3rv+4UNbd23JNqadDTd+Z6KmfpeX6+qTko0u229a4vsTvVUE:3bsbg3/yNNvVTVKa4eVUE
TLSH
T17303BE32F86999734DB6C284B21B35436F7911A3C6C81B9499DD7B8C028F5AC270FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c7dcb26fc2a081929d1abd7f02ae6b5f0b9b46d8d6f0957b89f8c83b92c787b7
MD5 9883cf5c8e7adbb6901164a13726037b
SHA1 04d57b25e7ff10f0844fd2083a7089e44793ed8b
SHA512 80d7a34037a3f0e4b951d44089de798f1cb12e1a68786c9d675c2798effad183be42db43a47863e5733ec939309e9bd9e1ae9740cd9258017eb3aaa4d7ac9dec
SSDEEP 768:Np3uNfadDTd+Z6KmfLeX6+qTko0u229a4vsTvVb9Ma:Np3byNNvVTVKa4eVb+a
TLSH
T162F2CF32F8618D7388A6C681B21736575EB65273C7C81F88A9EDBB0C055B66C170BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e1d7864e9eeaa3cd37e5809a23bcfd50f9d9718a386756425744adea6ae1114a
MD5 0bc995fc62c2f60b0c1314e11a8a135d
SHA1 4e55b5b4053f15bceaa18945ba0d9522c6e81d74
SHA512 5000d0422c62ba0c5907076d921625d770e21b5d39a52e29fff363e898e9110d173215553d72e846d7b2e61299396fc64ca0fb4537630bba9348f74ab4896832
SSDEEP 768:Np3JNfadDTd+Z6KmfLeX6+qTko0u229a4vsTvVb9Ma:Np3eyNNvVTVKa4eVb+a
TLSH
T1B7F2CF32F8618D738DA6C681B21736575EB65273C7C81B88A9EDBB0C055B66C170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 8752076ef940799b1fd808b1f319a75e663b2f0004753c6c5bbc29cb8266776f
MD5 f49d17d320418d2bc24c7d8dd7ee4d52
SHA1 2a48d55653b38dafb9f06ffbea706c0ef92cc1f5
SHA512 3e3dc3e5a9bfa99d919b71b392e992d3ba43120269b64a68d9f9cc319c2b6f9c1d747eeb704135bb4b7c9d67bf29a5cf33005870f4f2a1db27e5eddca13e6228
SSDEEP 768:ct3uNfadDTd+Z6Kmf3eX6+qTko0u229a4vsTvVb9Ma:ct3byN1vVTVKa4eVb+a
TLSH
T1E2F2BE32F8618D7388A6C685B21B36575EB65273C7C81F84A5EDBB0C055B66C170BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c28fca5308d5d2eaccc6e984f86f2daa3f855ba1fb40248c28679d9a41f54b1d
MD5 78dab8f71e9cab97a458bfc08d5a74be
SHA1 10b8295b0e02270cc27655b83162d684877c6109
SHA512 de2e0a08fcae020ecfe7f505b7c926819016c5d358a2c47ee6c9f739b8351da4a6e8cb604682c40fa60f5e7bb55cc33c97a03e3d3cbb3120fff1b8e3a3fa6e4f
SSDEEP 768:prv+4UNbdG3re3XDTd+Z6KVeX6+qTko0u229a4vsDteVH1SdW:pbsbU3i8N0vVTVKa4QEH1h
TLSH
T18203CF32E8A589778DE79784724B71472EB91173C7C80B90D8ED6B4D025B5AC230FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5fc0bbb-d23f-444a-b9ba-864a0bc5f288.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a5fc0bbb-d23f-444a-b9ba-864a0bc5f288.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download