12e0e7492de81f3252f843d53c9b9d5c74f5911c0b3c7b26a6e4f43072101f8b

Analysis

max time kernel
149s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 23:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 95KB
Sample260727-3artjstaqa
SHA256 12e0e7492de81f3252f843d53c9b9d5c74f5911c0b3c7b26a6e4f43072101f8b
MD5 c02b8eb45033c1a93fdd76d6e578f91a
SHA1 1925666e81af0f9cde8c203edef565a3906ad1c2
SHA512 fedaaa756dcc00467aa70bdd8534306ff96f0b9ecf8971d163b62f650b3a383379f14037b6c598617da2b564597e7a5c8139f44db5c62b2f5f798d2a57e42a1b
SSDEEP 1536:pkv5F5zxAfkDED6OHlAmKCsL1JOLHMI3+gfp/45R5ZT8xceMdzENuN1rbmexe+6G:pkGNuN1XahNxQypN+tLWTLFs
TLSH
T18F93616167D18173023786E08A75BB8EFED75107E782929078BC27877FFAD92991314C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2032	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296679462014520"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{37932E97-29BE-449A-A76E-E401A69CBB95}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3468 wrote to memory of 4100	3468	msedge.exe	89
PID 3468 wrote to memory of 5704	3468	msedge.exe	90
PID 3468 wrote to memory of 2032	3468	msedge.exe	91
PID 3468 wrote to memory of 5704	3468	msedge.exe	90
PID 3468 wrote to memory of 5704	3468	msedge.exe	90
PID 3468 wrote to memory of 2164	3468	msedge.exe	92
PID 3468 wrote to memory of 2164	3468	msedge.exe	92
PID 3468 wrote to memory of 2848	3468	msedge.exe	94
PID 3468 wrote to memory of 2848	3468	msedge.exe	94
PID 3468 wrote to memory of 2848	3468	msedge.exe	94
PID 3468 wrote to memory of 776	3468	msedge.exe	95
PID 3468 wrote to memory of 776	3468	msedge.exe	95
PID 3468 wrote to memory of 776	3468	msedge.exe	95
PID 3468 wrote to memory of 5636	3468	msedge.exe	96
PID 3468 wrote to memory of 5636	3468	msedge.exe	96
PID 3468 wrote to memory of 5636	3468	msedge.exe	96
PID 3468 wrote to memory of 5360	3468	msedge.exe	97
PID 3468 wrote to memory of 5360	3468	msedge.exe	97
PID 3468 wrote to memory of 5360	3468	msedge.exe	97
PID 3468 wrote to memory of 1348	3468	msedge.exe	99
PID 3468 wrote to memory of 2408	3468	msedge.exe	100
PID 3468 wrote to memory of 1348	3468	msedge.exe	99
PID 3468 wrote to memory of 2408	3468	msedge.exe	100
PID 3468 wrote to memory of 4308	3468	msedge.exe	102
PID 3468 wrote to memory of 2120	3468	msedge.exe	106
PID 3468 wrote to memory of 3352	3468	msedge.exe	107
PID 3468 wrote to memory of 1836	3468	msedge.exe	108
PID 3468 wrote to memory of 4204	3468	msedge.exe	109
PID 3468 wrote to memory of 4204	3468	msedge.exe	109
PID 3468 wrote to memory of 1852	3468	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffee931c188,0x7ffee931c194,0x7ffee931c1a0
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,4580931367899269820,12589711419903133777,262144 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,12347653690951141079,600486145229081145,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,17295412332644028927,7226666996838964368,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:13
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3668,i,8540342117786874574,7808576285759355918,2097152 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3688,i,15711175294341015227,4982212983358504759,2097152 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4376,i,4382346411604057111,9419288913435617232,2097152 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1564,i,17817258599659528380,14099409613328183069,2097152 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,9149141305353215413,5336125061373346196,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,14962695086241785779,6931204631876884286,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,5532971739064876272,16586839298475337944,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,5532971739064876272,16586839298475337944,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,11263651886601395953,14273261868773427827,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,8806805135447425957,5164397394475801977,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,15145070682573251301,7961538620241878519,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:14
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1272,i,3448924344192632868,2757403287202262674,524288 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6388,i,676350937888604185,17873771402216518987,262144 --field-trial-handle=2160,i,385355039373491134,4344838218195025907,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 719f844e62c5a3916fba05dc2f32d02dadec54c424efb41ba161d1fca59227ae
MD5 e633a9ff8da83df3b4dca0ad6f30e5d9
SHA1 610df135117504b2857ee3cc03a5ac9797b10333
SHA512 56404607616c88e3d1268893aa0c748db1db04fe698a8f5d214c6a2a533823ff606c3f2a3f007d08bc16bd8838597597f9fdcfe0f631495c1928104ff11d002f
TLSH
T16BD0C0303948E188C9832172DCA033117310007020B147054031F42CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 11fb1bb9aaa7cf613371a1c9d68279f2843e0dd4aca4d3b5968d12efc4c7067c
MD5 c690db9d4181e62c6983936fc3b4c677
SHA1 ad9e2229875494012b00d24549c99de712008cb9
SHA512 040638fdeb6d481c3bfc9af0bcc2b310f264598c11547f03dfbc3bcee2eeaf4fc13535f4f910f1b63882146aded3763f05d9744b2da1188e0a7887ae79a2dc2a
TLSH
T105514E4A032CDAD5CF21867661E8E4F9BFF08859F10FEF3778705D705902B2862E19A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bde7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bde7.TMP
Size 3KB
SHA256 fea4eb2785ec6fbeda42ffea9edecc745f8d43d24eec7169a7709af785aac81f
MD5 697d2b7e54b380d01ed74f12b2de71e0
SHA1 22edc9d7f27dca2fecebd05fe90ae5aa0c3c16c7
SHA512 43956d6e3a850b2368f71d58859c934c20a83cce7a4b6e8a5d58038e0ed819923d20548fbc5ee724de0db0d5464543667849f1cccd1120e749898a25d362295e
TLSH
T13A514E4A072CDAD5CF2186B261E8E4F9BFF08849F10FEF3778705D705902B2862E19A1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 571063739f8343ed896fdd28e9b1028d5eb55b70678c2ed24b3afd908ed29ce1
MD5 de00f612195c1faa6b0182b269ee4340
SHA1 06f64dc316a2b6694680442971789cd6e0c30919
SHA512 755cd20b349133b7a5222f0a1d6232d6141f953d3e72b0801521fa272cb763f871fff07b6a1d45dad623cad4372c385c283f2494ec82414c382a47566170f5f9
TLSH
T16C41C0F7C3E8856E890156F4AB186E1BCE2D0915832C3D56C9D4AF1BA3F3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3166fcb39bb42cd3d83c2956e5dee8e7ac853db72826b4ecb13e9fedec13e38d
MD5 6d0c0b12fba4852fc397ae010854a250
SHA1 6867ed47dd3c1b94d27cafe8a87c505ff2b981f9
SHA512 ab6c09aa7604c1bef51abf0ca46d760f82c8724cfdde2260ff80904ddb0f8b4d0e93dd5e65e1c38d0c19c4d0be46ec6d6c1077ffce5b2a884d15bab5a2e92069
SSDEEP 192:sxRmHRtbu/fNs3ES/13zoA8p4R/g6+WNIYZ7PKsKGpIgIJ:sxRmHLu/fNs3EStec/5I6Xs
TLSH
T15832C8166928993B9CCBD21DFB56BF53E6F96032A1D01E58AAFC870C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d0b3fbe7273e8673e98a1bf55f381889c185c63e82702f43a0e356b9ce4b9d22
MD5 331dae7a025eb726812b5b4c4cecb031
SHA1 249d307fdc582840759ed99b32c6c851c1ce9d4b
SHA512 15f0c13c3b148a1e717ac12d8da640215be8aad5c255a239e5cb70c837a9532e8ab71e7b2052acf0bfd80dc41fccb2439052d89d122bc75b609575d395e17001
SSDEEP 192:sxRmgRtbu/fNsbOS/13zoA8p4R/g6+WNIYZ7PSzsKGpIgDcJ:sxRmgLu/fNsbOStec/5I/wX0
TLSH
T15242B8166968993B9CCBD21DFB56BF53E6F96032A1D41E58AAFCC70C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a458c98ddb9550fc3df58657d44de9629f48fc397c888b524c0659c33becf75c
MD5 a52d4ac5ac11a902163d56b9df4370d4
SHA1 ae63a39d8817c2fb69cdd3a8fa81888015f936b2
SHA512 a43718083b27dc5902be6ac9aa8922a2d85870adb978dd0c8d75abf40c1220550fa898b87c8902eaebdbe6cdde4bacbcba92dc14f82aad68d71940c43779a4c0
SSDEEP 192:sxRmgRtbu/fNsbES/13zoA8p4R/g6+WNIYZ7PKsKGpIgDGJ:sxRmgLu/fNsbEStec/5I6Xm
TLSH
T18432C8166968993B9CCBD21DFB56BF53E6F96032A1D01E58AAFC870C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 1bc5fbc3d49ae339d28d3a4074eafefdc01b55f214fd3d61a5cdc2b2d103d0eb
MD5 79d689e75856fa54753b97e7223bbd17
SHA1 3a6eb15023d433f2c82e4050456eafc2b96bbc83
SHA512 9ccb41018721cedb3a45e015f3a46cf07743f15028517580e959343411dea107d5530ca637375efee5aa2a1e1c9186e250f8f9fb762da8fa0f5362e7ccffdcbc
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR6proOp/:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0Vh
TLSH
T1FBB2DA2B604DCB7F9F801A9DAC196FD67D9802C797988D4047FE990C03C77EE912A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e79bb5a7-6015-41f4-883d-729d40366b1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e79bb5a7-6015-41f4-883d-729d40366b1c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 afc69901875f8e8129d1acfa898141e3f803038d7d9b6cf70546f71b62f39bfb
MD5 14a6b21141ab99ff7aecf38a754c1a50
SHA1 dea01a239ae1957070096f553e503cd970d321ab
SHA512 953344ca1c4f5bc3a72da2c239ad629ef5c1c80931fc1f1a891df14e9fade399646514f9ec77233adbf962838c4b559d24f243f7142900f3b2786e60eccefcc3
SSDEEP 768:vn3VCjqyLBLDvAam6aQMGdjWca4Ghf9Bj+3:vn3VW5maME6pBj4
TLSH
T112E29E326C6898379CA6A695B71B3643BEF09173D5CC5E84D8ECAB0D079719E2307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 b8975e912ca9ffcd77b5d577c4318a8275644db76a8355862bdba57b8c66c0fe
MD5 59837626f459e74b6cd67f89eee4ccf2
SHA1 2660cf934cc3af1d9ca42b466d3f6d2c960a66c3
SHA512 09a87c9596715cb60fd91a91dec3d349973e27b04adbfcdda35a4d1831ce3a5f919513eb9dc9fd0cb026ca08f0dfb81c585a2cbcab4f8c43904026065875eb25
SSDEEP 768:tn3yijqyLBLD5Aam6aQMGdjWca4Ghf9Bj+3:tn3y2rmaME6pBj4
TLSH
T1C5E29E325C6898379CA6A695B61B3743BEF09273D5CC5E84D8ECAB0D079719E130BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ab3fe875304dfd8857d946a0c080744ada51d4a4a2e4a32030c1dc8f239047cd
MD5 d12ba7b4d41d9bfeb8774b3975a63edb
SHA1 1d7174c6d470f06e79b53436c888414469b1980f
SHA512 fea89f1cfcae835d28b074a070fc5be017c0ad9be846e0fbcf78b760f799a83887f61e8014623af0b025b715dea9d7c1d45ece18b74e09dfd919bee59e67763b
SSDEEP 768:kFQY39wg/CjqyLBLoAam6aQMGdjWca4Ghf9Bj+3:HY3TbmaME6pBj4
TLSH
T14CE29E335C98C97B9CA69B95F71B3643EEF051B3C9C89D90D6DCAA0D029719E130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 2c5e1278fb8732000049cb659c53f9fa6b0130919ce533cc1eecdba132cdcc6b
MD5 2f682dff8fc8e96b2e16c017e6362e36
SHA1 465270a2b6c1f48f5d0ec97b8762764c03fec99a
SHA512 16d6f310cab6d9039491e066d56eee9ebeb5028a6bbd76096aeac59cc91ca30fbb9a9e75dfd09990c105de1bc8cde441bba574a7e6fda3235c09b3da670af543
SSDEEP 768:/rv+4UNbdq3ZuqyL8AAam6aQMGdjWca4GhfBRPeU/:/bsbc3ZKmaME6pJH
TLSH
T14BF2AE31A86C9973DDB79A99F21B6787BEF021A384D40E84C9D96B0D439718E2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42bc8cdf-cf59-403e-897f-071acb06d02e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\42bc8cdf-cf59-403e-897f-071acb06d02e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/4308-188-0x00007FFEEE7B0000-0x00007FFEEECFB000-memory.dmp

Download

memory/4308-195-0x00007FFEEB330000-0x00007FFEEB33C000-memory.dmp

Download

memory/4308-193-0x00007FFF05120000-0x00007FFF0517D000-memory.dmp

Download

memory/4308-186-0x00007FFEE95D0000-0x00007FFEE96AB000-memory.dmp

Download

memory/4308-185-0x00007FFEF25D0000-0x00007FFEF2694000-memory.dmp

Download

memory/4308-190-0x00007FFF01A90000-0x00007FFF01ABB000-memory.dmp

Download

memory/4308-189-0x00007FFEF5CF0000-0x00007FFEF61E3000-memory.dmp

Download

memory/4308-196-0x00007FFEEB310000-0x00007FFEEB32B000-memory.dmp

Download

memory/4308-192-0x00007FFEEA050000-0x00007FFEEA305000-memory.dmp

Download

memory/4308-197-0x00007FFEFF320000-0x00007FFEFF32D000-memory.dmp

Download

memory/4308-194-0x00007FFEEB340000-0x00007FFEEB3CD000-memory.dmp

Download

memory/4308-199-0x00007FFF01790000-0x00007FFF017D8000-memory.dmp

Download

memory/4308-198-0x00007FFF00F80000-0x00007FFF00FB2000-memory.dmp

Download

memory/4308-191-0x00007FFF00E90000-0x00007FFF00ED5000-memory.dmp

Download

memory/4308-187-0x00007FFEF7320000-0x00007FFEF7340000-memory.dmp

Download