c3a8f99da612354660f571149709329031a293afc394e41c4a322030ddab57ef

Resubmissions

27/07/2026, 15:42

260727-s5pybswyex3

27/07/2026, 15:41

260727-s45mdshm2v3

Analysis

geolocation tags

cacanadananorth-americatoronto
max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 15:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 25KB
Sample260727-s5pybswyex
SHA256 c3a8f99da612354660f571149709329031a293afc394e41c4a322030ddab57ef
MD5 451c17451033264b07044acb61d60186
SHA1 7f04202062766306c777611636dcf61ba015132c
SHA512 c131953846bc274ac360737b3e7a5990893cacd5ca5dcd65689747a4f0b07bcabfbe6ab997f11cc2f590fb5444cc48516c6e92605817b082849412b6d6e8f0c1
SSDEEP 384:sV310YNt9dCTMOvUotu2yru/KThPrazLqONzrU4gvaENSrvmGPBH/Lxf2+L/SxuI:sV310YNt4MWWuyvaEYDmsSyXA
TLSH
T1F8B24222D2F6449A519201C93779082F7F35EF0783292E15792DCAC6DF42BC78BA3B59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1912	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296405824493968"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{45CF9A37-DF27-46EE-95E7-031537E3C4C3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe
4648	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 4408	4648	msedge.exe	89
PID 4648 wrote to memory of 2136	4648	msedge.exe	90
PID 4648 wrote to memory of 1912	4648	msedge.exe	91
PID 4648 wrote to memory of 2136	4648	msedge.exe	90
PID 4648 wrote to memory of 2136	4648	msedge.exe	90
PID 4648 wrote to memory of 2468	4648	msedge.exe	92
PID 4648 wrote to memory of 2468	4648	msedge.exe	92
PID 4648 wrote to memory of 3976	4648	msedge.exe	93
PID 4648 wrote to memory of 3976	4648	msedge.exe	93
PID 4648 wrote to memory of 3976	4648	msedge.exe	93
PID 4648 wrote to memory of 5796	4648	msedge.exe	94
PID 4648 wrote to memory of 5796	4648	msedge.exe	94
PID 4648 wrote to memory of 5796	4648	msedge.exe	94
PID 4648 wrote to memory of 5996	4648	msedge.exe	96
PID 4648 wrote to memory of 3964	4648	msedge.exe	97
PID 4648 wrote to memory of 5996	4648	msedge.exe	96
PID 4648 wrote to memory of 5996	4648	msedge.exe	96
PID 4648 wrote to memory of 3964	4648	msedge.exe	97
PID 4648 wrote to memory of 3964	4648	msedge.exe	97
PID 4648 wrote to memory of 3120	4648	msedge.exe	99
PID 4648 wrote to memory of 3120	4648	msedge.exe	99
PID 4648 wrote to memory of 2500	4648	msedge.exe	100
PID 4648 wrote to memory of 2500	4648	msedge.exe	100
PID 4648 wrote to memory of 3308	4648	msedge.exe	102
PID 4648 wrote to memory of 2124	4648	msedge.exe	106
PID 4648 wrote to memory of 1284	4648	msedge.exe	107
PID 4648 wrote to memory of 4836	4648	msedge.exe	108
PID 4648 wrote to memory of 4364	4648	msedge.exe	109
PID 4648 wrote to memory of 4364	4648	msedge.exe	109
PID 4648 wrote to memory of 4980	4648	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe9f71c188,0x7ffe9f71c194,0x7ffe9f71c1a0
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4250428016820541197,6584266288872766877,262144 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,3936480002782582510,1633117602803281414,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,11424581324317328363,13228733438418999124,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:13
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,16117024811058370942,4401754134361115179,2097152 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,13289503789839414452,8104037713724406210,2097152 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,1139369403722875290,15117543120295691811,2097152 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,187137848998978016,18315389768256684176,2097152 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:9
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,8214718813755903792,4679187606591023999,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,9814468394977013410,3561107982723442795,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,15232921537397831195,7118213444824982044,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,15232921537397831195,7118213444824982044,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,115836931613743266,9440359383914074630,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:14
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,3637287955133011530,12299828842155013115,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,11433419364982743877,3388798020675261135,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2088,i,319822341300119071,12524368745522803450,524288 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6568,i,4302200076337838413,2779757134200890210,262144 --field-trial-handle=2216,i,758145208888880398,3876883352621731847,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 635716eeeac97e9b877cee21edfd7522f42e3d813fca7e44142d54f380010d16
MD5 d7d92b31f20b795d0ee661e43fa11cb1
SHA1 71776df7d8162537a0cc39ee4b78dff36ac31f3d
SHA512 c00884f0bf419166801716f87cf674fcb0ee2f20c0836650a175a7b2be50d334e6bafff9c6b98550fec1fe5f4b9afc9d22c45bf83b53996b3c4542eee49217bd
TLSH
T1E2514191A36E1ED2C7EBB9B2F9E104DA72F988558A434E16FD906EF46902F0470D1127
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593f51.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593f51.TMP
Size 2KB
SHA256 9c2d548934edfad250d03160da1656a634a267e1825fecc879736b6ccef44b0b
MD5 7080b8ec5d2910643bdfd6b7483da201
SHA1 7532515449f8665e0ec91d0f75e94e4c0f9efb2c
SHA512 e90fedb7c09685a90453981d74ba9fa4b1db0ba86f65307e73dac9d87ea1887ac60529f87bf37e3e13099e0e0c3bfc290d7ddc137c66d1df8efe269edab32c8b
TLSH
T1E9514290A36E1ED2C7EBB9B2F9E104DA72F988558E474E16FC906EF46902F1470D1127
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9a2521bd0c24d787d2e4b16d4ac21d7522870672a9dbd2c33300c0c3ee1abf90
MD5 b5f48e5e0d958ebfbe1e2d2ea8a0b148
SHA1 47f7eaba2955962cc391245fef2e242e3b425afa
SHA512 7a279ae5474df4f119d2c96d821a26580cc66e93bddcc7d44ec585be935bd1d7e629046ec3bff8325ce8b49afba19f797f63b7b33f65f46f0eba2a1f491ff39d
TLSH
T12051DFF7C3E8866DC90156F0AB147E2BDE1D0956832C3C56C8E4AF1BA3E2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c9ca98a34751b12adac3a7709bdbac2e1a7db240ef2bcd0e90e45544be530aaa
MD5 4a2aecb549f4707ff0ce9d5bc6df0339
SHA1 5b5a6eff8446d6f88df9476d5086b47669df7204
SHA512 6c870a906a290277acfc5dc94d9f34307381457278dd502e0fff1c9cf98ad16778132fa3ce05c6b311feba4d05861b46c5c9162b1df65f58e161a68c50da6998
SSDEEP 192:sxRvRdbD/fSs5Oe3AtfzoA8p4h/g6+WNIYZFLKGGKIgIJ:sxRvHD/fSs5vXQ/5ISPs
TLSH
T1E832B7166928A93B8CCBD21DBB657F53D6F95032A1D41E48B6FC870C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bb295463cb1e2b6d896f4b7524679cd34d3805c2a8c2a5d47a5d62d6a2a7644c
MD5 ef714e7b71727619ad174918617f385b
SHA1 596e4e0052e4d66f8c2869f80421ed45accdf24c
SHA512 f4bf51f4a5cf98da88a1c165891cfb15af5360da84ca3eeeaf97aedcacf479591fc864d7857efaca8b96cba0192f46f45deae77df6cd7c529e1829db159d32c5
SSDEEP 192:sxRURdbD/fSscOe3AtfzoA8p4h/g6+WNIYZFLKGGKIgD1J:sxRUHD/fSscvXQ/5ISPb
TLSH
T1D932B7166A28A93B8CCBD21DBB557F53D6FD5032A1941F48A6FC870C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2b122f2b76b326d909196b37937a0bd46eb6e1d732046da28dd4a87fac1b46d5
MD5 f4b5c972a33ec91e101e1ced240291e3
SHA1 65c72512ace41e6c350b2b018518b80a2ce34172
SHA512 013e5f9556cae800f93b65419e0de4c22ff907bd1f7cfdee620b1c72ff5fd8be7f4ade14437a2fd8484c513587a0c12c9c8b4496a3fc495b6d59a5e61e495df9
SSDEEP 192:sxRURdbD/fSscO2S3AtfzoA8p4h/g6+WNIYZFL4GGKIgD7J:sxRUHD/fSscNSXQ/5IS9J
TLSH
T15142B7166928A93B9CCBE21DBB55BF53E6F95032A1941F48A6FC870C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8aaa3b847efc4c90c4826f4d12d03da64a414a09872d0f14fc4f4df937046d2e
MD5 158cd9f8a639d8097a299243fa5cf3a0
SHA1 7cbd2181f8b182bc2e7fc82498e6ce9c3e4b14e3
SHA512 eb4811d2494511eff3ff927a3ce53ea38eee453cb4fe8be020feee551f2b22217845f98ddfd9d0d2208e4546d8d796e6cd792c480c2b65404720d4b631128a3a
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGUrocmH:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vt
TLSH
T19CB2B93B640DCB7E5F800A9DAC196F977DA802C796988D4047FE994C02C77EA92194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

db576d7e-73ae-417b-848a-5969df34940f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\db576d7e-73ae-417b-848a-5969df34940f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ecbb19701f8e499376b60ffd198d7055ce6984bc185dfb0d6f764338dd7ac4bc
MD5 d976d37f3391d76fb2c4888bc2178140
SHA1 cc1cfc339399c4eb9a2eb050b04b151075404f7f
SHA512 35bc76cab0eca03c0126575049597023118517342f923856ef5e5e5041443162f6f35a0bd592d544867e4013c58604975283fa60715ee7d9b943cc647571a82e
SSDEEP 768:d3Izh63fMi/Q+LeSFOUI+GX4fouOToPvB2thtA9VAgaOg:d3Io3msnnwthttvOg
TLSH
T176F2BFB2A9A45D53DDA9E2D9720B7283AFF09113D5C80FD44EED1B0D068B6EE470BC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f7c2fe7229da07620804f059a503104dd6fd491041c0d64f688034a3b56b9344
MD5 1b2b3284263a18d9964aade0380a50d4
SHA1 f8f194e23e2262619ebee13ea8710ebe54d6bd7b
SHA512 08ae678733adea4ce255ffcad047c9991322b8474c091a8a1d26f9130bca1995b9ee4ce90eee5d13428b8acffdd7f2a51fa4c08c170a54e40298b26e8a3fb32c
SSDEEP 768:G3Izh63EMi/Q+LeSFOUI+GX4fouOToPvB2thtA9VAgaOg:G3Io3bsnnwthttvOg
TLSH
T136F2BFB2A9A49D53DDA9E2D9720B7283AFF09113D5C40FD44EED1B0D068B6EE470BC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cdd1565a9761d2a067b9e98212ab17bbcc610690fd3d83c30a1dd21918062c86
MD5 4046e1c1de775f96545d1d875a67c633
SHA1 0ae0e66e22be47f0e8d8c92d3632988250154cb9
SHA512 0982b40afb851905ac89c171e09ce8b806e7fea21404af9a5455a8d392a8c99469d37b6832c6ae1cd86ad885c93affe9a8fab232d72be469fb6fd78af49a1c32
SSDEEP 768:lrv+4UNbdC3ZMilQ+LeSFOUI+TX4fouOToPvB2thtA9VAgayyZ:lbsbs31snnwthttvyW
TLSH
T1B803BE72A8AC9D63DEEAD698720B72433FF4515395C40FD48EDA1B9D068B5ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 027685842cc416b75fafdc0547fa3910e9fd98ae2aa56efb60027286a13ff990
MD5 c840d69b7ae561d28bf33d5693f3b6cb
SHA1 5ac8b754698f7340db2715f41300aa3a1c4c40e4
SHA512 95d53d87f00cc99d32504e038f6db921216cbe6585ebf2036ecf9bd85bed9c818e5efad6007839901df0c4f358b86d495bd22147be72f4f7b04f0b3c7111c212
SSDEEP 768:QFZ3IzhV39wgRMi/Q+LeSFOUI+6X4fouOToPvB2thtA9VAgaOg:u3ID30snnwthttvOg
TLSH
T17703AEB3A9988967EEA9D7D9B30B7243AFF04163C5D45BD49BDD1A0D068B1ED030BC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 78c11619edfc7c1724bf80cfa79c312dc1e861037f3c68a0082da6bdf9e18772
MD5 9024d92d1aa96a1c4cd0f55e5512796e
SHA1 b0a24806bd1e8c72f0ce07e250b6bd4f8cb8c5f8
SHA512 9befaa8598209bd48b1f521891c29a2184c2b584f845867512e840c25d43e041a23f773b48d2e2ea40cd6d718f5c520337d814bd60abfed5ea58fa4a91a0558b
SSDEEP 768:grv+4UNbdH3l4+LeSFOUIfX4fouOToPvB2thtA9VAwWeVH1SlX:gbsbh3GsnnwthttHEH1Y
TLSH
T18603CF32A8AC8A33DDE6D798720B72572FF4916396900FC499DE1B4D079B9DD030BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

540e2755-b531-4de1-ba27-199b6681cb40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\540e2755-b531-4de1-ba27-199b6681cb40.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download