3a615c75723dbe0263fa180765c5e2a3b5fbba7ce746eaa14e358beff39692a3

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 22:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260727-2ck84ssdrh
SHA256 3a615c75723dbe0263fa180765c5e2a3b5fbba7ce746eaa14e358beff39692a3
MD5 ce45b45fe04e2b562ef3ff3d57c80197
SHA1 fd0d4c869fc5c49961f54510a380047e255fc234
SHA512 e0df17b1ee2dd4170a51a4c3b831819d075adcc4860e1f56c94bbe404e81161a876f86c379292d79323ee968e7c62959309169efc5584e04d579525f687b886e
SSDEEP 192:ea7dj/+6ymQ/rR577zlLWigT4M2IU5vtzufiL3X:/Rr+6yH/rRtlL8v2IU5v54iLH
TLSH
T16DF1D997117D0C5A82DB4C6818772B8F371AE04E765D888DF7E0D4E88C689CF9C19BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5608	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296647865395862"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{46035770-B00D-462C-81B0-ECC142104FA0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5756	msedge.exe
5756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6080 wrote to memory of 3676	6080	msedge.exe	87
PID 6080 wrote to memory of 3832	6080	msedge.exe	90
PID 6080 wrote to memory of 5608	6080	msedge.exe	89
PID 6080 wrote to memory of 3832	6080	msedge.exe	90
PID 6080 wrote to memory of 3832	6080	msedge.exe	90
PID 6080 wrote to memory of 4048	6080	msedge.exe	91
PID 6080 wrote to memory of 4048	6080	msedge.exe	91
PID 6080 wrote to memory of 4612	6080	msedge.exe	93
PID 6080 wrote to memory of 1116	6080	msedge.exe	94
PID 6080 wrote to memory of 4612	6080	msedge.exe	93
PID 6080 wrote to memory of 4612	6080	msedge.exe	93
PID 6080 wrote to memory of 1116	6080	msedge.exe	94
PID 6080 wrote to memory of 1116	6080	msedge.exe	94
PID 6080 wrote to memory of 2696	6080	msedge.exe	95
PID 6080 wrote to memory of 2696	6080	msedge.exe	95
PID 6080 wrote to memory of 2696	6080	msedge.exe	95
PID 6080 wrote to memory of 2676	6080	msedge.exe	96
PID 6080 wrote to memory of 2676	6080	msedge.exe	96
PID 6080 wrote to memory of 2676	6080	msedge.exe	96
PID 6080 wrote to memory of 2604	6080	msedge.exe	98
PID 6080 wrote to memory of 2604	6080	msedge.exe	98
PID 6080 wrote to memory of 5896	6080	msedge.exe	99
PID 6080 wrote to memory of 5896	6080	msedge.exe	99
PID 6080 wrote to memory of 5144	6080	msedge.exe	101
PID 6080 wrote to memory of 1580	6080	msedge.exe	105
PID 6080 wrote to memory of 4756	6080	msedge.exe	106
PID 6080 wrote to memory of 1348	6080	msedge.exe	107
PID 6080 wrote to memory of 5056	6080	msedge.exe	108
PID 6080 wrote to memory of 5056	6080	msedge.exe	108
PID 6080 wrote to memory of 5756	6080	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff902fdc188,0x7ff902fdc194,0x7ff902fdc1a0
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,10371058166944196353,17457563709817611784,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,4616509142415364266,15037927995997864874,262144 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,11292310864897405112,17380864468470196308,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,6111626220024838458,11870155146231002918,2097152 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,3431792257720075898,851577179137322082,2097152 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,4067668254026472225,16113707768985610438,2097152 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=2264,i,3254669096087762049,4850005717086372655,2097152 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:9
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,9550517028297153778,15859174591320480510,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,3904632982175067501,7678861138256172737,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,6648449360728200306,8535178805028878034,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,6648449360728200306,8535178805028878034,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,7655045258844388052,4792800589983383245,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,102644785315802671,10413518636542860840,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,2043478445686468816,17444666405782560736,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,12295127692067526259,2043604664834742825,524288 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6576,i,10474837653404573408,15391816465972199064,262144 --field-trial-handle=2652,i,8078698868357128836,5108019858034942603,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 51817c73ba818f7d8402c06bd8c484530c2bcc45aefd1b5a720bf19d7c861255
MD5 2ff5bb64fbf2497e6f230586f1c89816
SHA1 79bf2ed148e81364a3dc102611b183effae7328d
SHA512 400f6d5a665a7121478ec5975e3a9eb5db8ba46650b8da726baa0d8d437c59c0bd86e1fd90155a8a8674569a55caa505008831c858add37048d81e658c08b76f
TLSH
T10351940F2B2589D3E771557260E6076932F9A669DBC3AE10C8001E32EA06F71C1EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f41a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f41a.TMP
Size 2KB
SHA256 f8798d1ac5b48d36536592d3e5fb67166c8e1705add58b2aa6e244b01f2af50e
MD5 59516363b1924a8fdeac63914b83c05a
SHA1 e5b6480c28f135d6c3c6c4a08fa15dfb3bdb4094
SHA512 1765353f40d0323e73f3e3f5a4b62c9f797ac1dcbe4aa6e52d86e4024a0d822a23ad7d8a89a7d5a9cb4c9310b027c07f82c2127a242303f163d042b0e54e318a
TLSH
T1BB51934F2B2589D3E771957260E6076932F9A669DBC7AE10C8001E32EA06F3181EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7d197348cf5503a5d55d657caa328366ac40feeceb6a2a26e7dfd2b5cbf9748b
MD5 3abd898b373bc78400c4a0cde0ad1921
SHA1 f4d67206647a33f764dd51a7228715a0559366da
SHA512 742330ea7982f72402550b86cd8a54135165b1c6f619de2e6bc7f92017b35bac0137c18dd667c8d8dba2413bb9d0636b1c782bdd9f1e14f2a998fe60467af041
TLSH
T166419BF7C7E4866E990156F0AA186E1BCE1C0915832C3D6AC9E4AF2B93F3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fff1aa0b82439b3f92dec3b99a2d82de06bb28ba1ee7dae4bd8c7393fb186b45
MD5 442f0f90f1ef5218532b2a763b9e49be
SHA1 9bffebd88b6ed078d874031df7bbd00ee2bbf8d6
SHA512 fd2c72c993cb391cfa7c20478e7fa77a984728eace0fdd8232771843103a36fbba817079a2039f3393a41d15641547358a1d4c003367b380db1b2a5959655eae
SSDEEP 192:sxRKRGbB/fTsSAwG0zoA8p4o/g6+WNIYoKCYWGMIgDSPJ:sxRKiB/fTsSApVJ/5IJ9WR
TLSH
T1CC3295166928993B9CC7E21DBB65BF53E6F95032A1E41E48B7FCC70C14E6ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b58d69ebe94102a0775d81bd6d5ff01229334bdf11d5f7608e44d7837b2d5788
MD5 6588419d78e1c070be1e21e4ad61dec3
SHA1 d511801688ae1ee3c7b4656dabdf5e41e2a2a8b1
SHA512 c61e33165869b100e5d5c6f8e1e6aafcd904d7131e9df4d1471727cf4bc34a6b95f4742277781334c2a50d681cf7a7d56b62229238a2dc89349d039068ca1d5e
SSDEEP 192:sxRlRGbB/fTsy9wG0zoA8p4o/g6+WNIYoXCYWGMIgIJ:sxRliB/fTsy9pVJ/5Iy9s
TLSH
T1BC3297166928A97B4CC7E21DFB65BF53D6F95032A1E42E48B7FC870C04E6ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 17ccadde7d0a27ed8896c922d72963b1b7a827169457f5cd369427876aecf653
MD5 8f357507420cb0d23864b15e826e5fb8
SHA1 bc5f6b22cbb985acd48b7d3095a915d10d19bd87
SHA512 e85e2dbc7f3ab20350922fdff5af84b8699a9062bdff494d49d374815e772becd4470c59a9f3f664394db88b1c26cd4ba4028881dbf0e5d1f56c08a018fae29b
SSDEEP 192:sxRKRGbB/fTsS9wG0zoA8p4o/g6+WNIYoXCYWGMIgDSpJ:sxRKiB/fTsS9pVJ/5Iy9WT
TLSH
T13F3297166A28997B4CC7E21DFB65BF53D6F95032A1E42E48B7FC970C04E66DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 92919fbb79b8c6fe85544b5db825a5c3089eb6d5104135cb6fc01ce94f5f27ae
MD5 97a866668aa9dfaf5b95f7ed7abd05c2
SHA1 04975a90a88cb2387b5a314e3d5234b09a36cb6d
SHA512 8699ae68c4618214bec0e057c5df98e3018ee28abdf19f1c53934292bfe55c18b3ee643e2b24ced71c6bb3cf2cdabf2fffb183751da59f0fc59e801c315d9bf2
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXCro98I:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VO
TLSH
T172B2EC2B640DCBBE9F800A9DDC19AFDB6D9802C797588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1aa3c8c2a0c79149b1dacd20926199ed9908e128479519c32aadaa4a78dba68e
MD5 27f71497fef42ae81fec3cf22232345c
SHA1 0031ba2cdad150b30797aefc7e2340a717b3df37
SHA512 6cf670779f3ab4d0121fecb24cfb43f7aad0408dfb282667c1cb7235a1c7ebe5cac3b0d8dbcbc2c66d3acdb0cf6530659a504029d0975323fbd3173a02eb7486
SSDEEP 768:K23uTO/TBOW1r+3ONXyer1IRCzni9fb9MG:K23uqISIqnob+G
TLSH
T19AF2CF31E4A58E738CE2E392B14737437EF95067C2C84A94ADEEAF0E099796D130B416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 998439cb046415f434bf22c5cff1f728b5ca464148c989f46ce6f8ff07a2b985
MD5 30ab240777c276f384a1303e510ef13e
SHA1 e4711f121e7dde69fc51a84061acfd10deb9ef9f
SHA512 672fa7c84ea29e52aabac1c62198863e28445205b92251e09d84e0f229475f744b65fcdff3e24e2d164f963c4ff3b04b287a8ed09709c3d0f78b0d0eecd18d41
SSDEEP 768:xrv+4UNbdl3C9O/TBOW1r+vONXyer1IRCzni9feVH1SK3:xbsbL3CoaSIqnoEH1R
TLSH
T13F13C032E4A49E334DE2A3D5B107B6437FB81057C6840B90EDDA2F4E0A9B5AE130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 553af4bf2351bde9a9f7ec1ffbd109cee98171736d9504ffcb2ab212333b5c1f
MD5 8ec80d32e3cd51b78971cfec5e18ab26
SHA1 28548415ae35814c4c4df1f97122b22aa8730672
SHA512 f5fee576b55a5b01ef9a27bd88c152d3cbea112f9673a91f9c00ab187c00010a194a033dd95a1ea923fc039d7192c572db628f534085b34ebde815f8066db8bc
SSDEEP 768:ba3uTO/TBOW1r+0ONXyer1IRCzni9fb9MG:ba3uq/SIqnob+G
TLSH
T1C6F2C035E4A58E738CE2E392F14677437EF95067C2C84A44ADEEAF0E099796E130B416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 136fbd05e8007cf69335927eca5b4b94c9420bf01e8a1dc35f09551669cece73
MD5 cb1d21f1968fac7d8f6fefaec3f9af64
SHA1 e5b9db02719bc0c04f29a5f2986f11c62753054e
SHA512 3c005c8e6b95a4fb4635c1e00520ae041bd5e684ec052e879cdf89cae8f2ef9e35ffe23b475edb1fdda4fdbe436b1d37b8992040d948240beb82299fb0387c4c
SSDEEP 768:hrv+4UNbdz307/TBOW1PONXyer1IRCzniBSeVH1SK7:hbsbV3Y/SIqnBEH1l
TLSH
T1EF03CF32E4989E338CE2A3D6B147B6437FB86057D6800790DDDE2F4E069B99E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d54ec0a6-7265-4365-822e-f264ae3f2a9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d54ec0a6-7265-4365-822e-f264ae3f2a9f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download