449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 06:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260728-g648vsff65
SHA256 449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11
MD5 47393f0fa8f5a068af1e3f7336f71911
SHA1 cb662e9893f2961bdbb97a15ca095768babc299a
SHA512 0f494afa814cfa729736d45e9f38b976c072c3aa306d4bee49ee358bd92eec555d8d977f6733899a7d3c407e433cec90202fc8ea5a4cc36d4c942371f74263fd
SSDEEP 192:z1agA++iMZ8avzKuz1tHmzXc1i/X31BBMYSfo5:3Lu53mzXc1Y1TMYSfo5
TLSH
T1AAE17EF7661A26189DAE9180AF75F319C878E901D2274C48454F6B3F02DFF56C2B2D4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4808	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296936243106084"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{9AD08143-09C3-4E6D-95BF-F348C5B30043}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5092	msedge.exe
5092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 4104	4584	msedge.exe	87
PID 4584 wrote to memory of 1432	4584	msedge.exe	89
PID 4584 wrote to memory of 4808	4584	msedge.exe	90
PID 4584 wrote to memory of 1432	4584	msedge.exe	89
PID 4584 wrote to memory of 1432	4584	msedge.exe	89
PID 4584 wrote to memory of 2572	4584	msedge.exe	91
PID 4584 wrote to memory of 2572	4584	msedge.exe	91
PID 4584 wrote to memory of 1480	4584	msedge.exe	93
PID 4584 wrote to memory of 1480	4584	msedge.exe	93
PID 4584 wrote to memory of 1480	4584	msedge.exe	93
PID 4584 wrote to memory of 6004	4584	msedge.exe	94
PID 4584 wrote to memory of 6004	4584	msedge.exe	94
PID 4584 wrote to memory of 6004	4584	msedge.exe	94
PID 4584 wrote to memory of 4092	4584	msedge.exe	95
PID 4584 wrote to memory of 4092	4584	msedge.exe	95
PID 4584 wrote to memory of 4092	4584	msedge.exe	95
PID 4584 wrote to memory of 2384	4584	msedge.exe	96
PID 4584 wrote to memory of 2384	4584	msedge.exe	96
PID 4584 wrote to memory of 2384	4584	msedge.exe	96
PID 4584 wrote to memory of 3128	4584	msedge.exe	98
PID 4584 wrote to memory of 3392	4584	msedge.exe	99
PID 4584 wrote to memory of 3128	4584	msedge.exe	98
PID 4584 wrote to memory of 3392	4584	msedge.exe	99
PID 4584 wrote to memory of 4904	4584	msedge.exe	101
PID 4584 wrote to memory of 424	4584	msedge.exe	105
PID 4584 wrote to memory of 2940	4584	msedge.exe	106
PID 4584 wrote to memory of 892	4584	msedge.exe	107
PID 4584 wrote to memory of 1100	4584	msedge.exe	108
PID 4584 wrote to memory of 1100	4584	msedge.exe	108
PID 4584 wrote to memory of 5092	4584	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff917d3c188,0x7ff917d3c194,0x7ff917d3c1a0
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,15530921557390771513,5030697966967618111,262144 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:2
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,14973131173169459790,13299551756287249917,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,8038415096216609490,14402210450642402369,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,16120947722454800247,7435385459068920413,2097152 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,4432273807486539558,4305482977089681507,2097152 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4008,i,5193635653426986421,5428716388989913230,2097152 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4076,i,15144624650513056786,2014631697359521294,2097152 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:9
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,13218234623501154386,6484029504403310203,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,2052753234525524727,9178923057042201180,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4649508862094021998,5285644083177662323,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4649508862094021998,5285644083177662323,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,9045236751405447115,18164019697510239208,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,16791159602084310371,7921384913865226881,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,10915488581250987826,3671663604687978893,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3168,i,4876249619626138226,4643228752845534818,524288 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5464,i,14382284319980128389,4196323920490074656,262144 --field-trial-handle=2620,i,465853714230311601,15711291408419189112,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 23345d4a7f4c43a8f6e12ad3a961daada65e942062a1dc84d6754e7a270bbb31
MD5 50cfa319d0fc9e7af49f1e1bb50a3530
SHA1 c579b96b686aca07c5a04cf86f09a252939e4ccf
SHA512 cfd68b89acca52f7e2adc3ffad1f903a40dbf94b0cde4a71bce105ee190ea275c514cb91635471026e16b70deedcd007269df18e95871b0266fcb66b90c29ec5
TLSH
T14A5181A8477B89C2DB2B97B20BF3818A32F6C5D64A0B6FDE4C4860F4F04EF5CA042155
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3847.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3847.TMP
Size 2KB
SHA256 b6b2c68eaa0878838bb6fa85e3c363805c0a6511f70566f193ff0b9a22e0f06b
MD5 1829f5b9529093a632c8ea8878126cea
SHA1 a49be37ac93acaf72715e03982464abdcd0be46d
SHA512 64095a500a6542bb5a7b5db7e3de9b0336e9f2fc74f0d2c8fc1aa9dbea3e53d67c1f77e7b0a1274c66529ef6c3f337b6c4b12007159fdfcd2773b6643b4abc89
TLSH
T1875181A8477B89C2DB2B97B20BF3818A32F6C5D64A0B5FEE4C4820F4F04EF5CA042151
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8b551f4869d975f78a3ba6b42ecbe8106ef9b7c0f7e047a4ccc97bf87ed46024
MD5 e076dcd9a2ca4200b9a6f04f4ebb82e2
SHA1 3340faaa878c69f0782a5f648abf02d4840255ff
SHA512 04bb091299217ee2217f811dc6ed1efaacf9687d90103e98c5f50c6331d41dd076bc6eb43b7daa0b58614713f0ffab5fa860cd2c33685c601748440987e2a555
TLSH
T17C419BF7C3E8856E890156F0AB186E1FCE1D0915832C3D6AC9E4AE1B97F2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 77704079a061bdc9fa3cbefb2e2d5643957438ca9c8d487d64bdfed5cb57ae4b
MD5 5ab4e3e2e86fa5078d3340af5a35d7ec
SHA1 d7c3a77abd9cd476f725e21ac1352e67c9bc744b
SHA512 9611912b11150362bb4455992b4d452dd4623c42c76d5ccb8c61f7cc22a9fc1ec6af6af1a665529278dace8faa703f94b31b1733da833cad44028ba3ae72e658
SSDEEP 192:sxRBRMGbW/fYs/gwG9zoA8p4m/g6+WNIYoXCYQG8IgIJ:sxRBjW/fYs/gpwH/5Iyns
TLSH
T13732A7166928993B9CC7D21DBB65BF53D6F95032A1D42E48E7FC860C04EA6DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eb03af548fbfaaeeaab982ff6e4ada3162b30e41f7d2de023cd1d9203aa03bc3
MD5 76389bdd6b6c5fda8d1ff89161abc9a1
SHA1 6d325e4cb37af37bdb01b27c59c73cfa075cf736
SHA512 ba59b1d2950ac0e873c672a32f6cf6fad5cae7039482d942f87e43705b3ef1f3d93f48f0b0734983a75859860a0dbf9d6bf374706cc0d6cdc04d9911368a4531
SSDEEP 192:sxRiRMGbW/fYsXewG9zoA8p4m/g6+WNIYoyCYQG8IgD3J:sxRijW/fYsXepwH/5Ihn1
TLSH
T11C32A6166928593B9CCBE219BB65BF53D6F96032A1D42E48E7FC870C04E76DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0cf22ab1579f27d48a232508029e47cae6e2ac9ff35a5a3ca95b69e905941f69
MD5 76a8c006e86112ed85fe82e88f8c3446
SHA1 1d285e8970f9e4686dc82cf8e5a27b7ddfe4f28a
SHA512 56f5ffb8948dfb3be9ba1e84b8b6f9dbd8ca78080092876dedeb3abe57007f9b0b6526809a9ebfcebd5f4b5785ff488b11447bb182cd051373d3db783a6aa04a
SSDEEP 192:sxRiRMGbW/fYsXgwG9zoA8p4m/g6+WNIYoXCYQG8IgDhJ:sxRijW/fYsXgpwH/5Iyn3
TLSH
T15632B6166928993B9CCBD21DBB65BF53D6F96032A1D42E48E7FC870C04EA6DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c52fae84127e781f0e6a10de15f9b4a29c3dbc3db2ad490c87b52b8f619804ae
MD5 3e3fee64591c8cf647b3163505b3925f
SHA1 a0a4c9e69c6fd18c96e84390b2b8a1e295afa58e
SHA512 6e2ad99ad975402a5ebbbf02519692f339709f767ec285e14f73e59df5cf97f49d8c64a8192d2c8dedce324a904e51d589c896be97018e48d373278954469608
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXDro98p:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vw
TLSH
T1F2B2DB2B640DCBBE5F800A9DDC19AFDB6D9802C797588D4047FE994C03C7BFA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3dc0b07e0b8c037116bd7ab23a509fbfbcf46ee63cc9dcbc962b91afb4cd3b40
MD5 5bf7363714a59c82f6135cf1eef5cdd4
SHA1 7865ed9d712303dd1224c3430d65006a27efad16
SHA512 62218fe9235a025c2c5860f983751118258cb28769cd99de7b0a19990c9bc301dcfbe2c5dead011a450812aec0afa5f5f7a09a7a9c269dbf4c63c8b18582866a
SSDEEP 384:/ZcI+38NddMECqqe6uhf3RTpXOVc3V0x7OGrYGgAN8SyrCZr1IR0VhMxAREYNPX3:X+3thI/TBOWSiONXyer1IRCzni9sb9MU
TLSH
T1E5F2C031E8959E378CE6E396B10677437EF46127C6C85780A9EEAF0D05D7A6D030B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4293985bcec94c914f060d5172a2963635ca23f6b4edd893762775c0a2249413
MD5 b7c2176ee5f744b0661ba5e4fc4feeb0
SHA1 1c8a9a26de76ec4b01ba72018a6e232e4553c7ac
SHA512 70011366f65df0bd5ac13e46b49f5c95d2c6419efef227b773288c2d24da39ceb476e06049db418f184b638a733ba13a4df1f206bb39527317c21d80a0035bc3
SSDEEP 768:brv+4UNbdh3GuI/TBOWS9ONXyer1IRCzni9sb9Md:bbsbT3uuSIqnrb+d
TLSH
T1B513C031E4599E378CE2A395B00776437FF8616BC5C40790E9DA6F4D06DB9AE130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fdf0ffd0743b5a240c63038f745f2c44b016be6542d82c4ac072117de9926907
MD5 1d6f6549580b7ad3aa3952985e7df5cd
SHA1 418821810de309ffb648931e9bb44f6a1d3aa8d7
SHA512 11be18eb860d959512aed2643f0e46cffa4e1cb65e75657f886a045a376c0fd77aa3a1745e40896ec34cd7d18f8923efb62865ca8305a0606b7fe15e299081ac
SSDEEP 384:ZZcI+38NdUMECqqe6uhf3RTpXOVc3V0x7OGrYGgAN8SyrCZr1IR0VhMxAREYNPX3:x+3qhI/TBOWSiONXyer1IRCzni9sb9MU
TLSH
T1C2F2CF31E8959E378CE2E396B10677437EF4A127C6C85780A9EEAF0D05D7A6D030B41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 160232621f7512d01f903606c5f4c70bc33799622823bcdba6d002c1e893a423
MD5 cfd040b94800b3b2b173090235fcf2b8
SHA1 722bebe1ce804a25bd660246b0cb149cf12dfda0
SHA512 bc79855b05714f57782e40412b896d0c3ac61b7c4f2ff6959ed474317c0115f83e92eb4568a8013aab4e7ff7fd38e866cec41c1d0a45ecb2ed36ee83e1a72eef
SSDEEP 384:gZcIw38NddMECqqe6uhf3RTpXOVc3V0x7lGrYGgAN8SyrCZr1IR0VhMxAREYNPX3:ew3thI/TBOWSJONXyer1IRCzni9sb9MU
TLSH
T1F9F2C035E8559E378CE6E392B10677437EF46127C6C85B80A9EEAF0D05D7A6D030B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a1ba99875b473270b4e80c6168cc709fbf9ce8805f641a47fa85270eefa2aef3
MD5 731252dfb48a2490bce0920dfe883928
SHA1 781a84492ec956c7dffe7a47410cdf2f29e0c8ec
SHA512 6944c1007f93d3bf3e01d74b04c2eb366ab2e08e82d182f71f5564473bd650031f6549e894adef7abc823ebec4bb29d31d8c334109ceda6dfcba0cae67dfb886
SSDEEP 768:hrv+4UNbdz3bF/TBOWTONXyer1IRCzniBzeVH1SK7:hbsbV3xdSIqnEEH1l
TLSH
T1C603BF32E4989E338CE2A3D5B047B6437FB86057DA840790EDDA2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05b7c45c-a507-4c3d-b882-c2d1f69ae992.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05b7c45c-a507-4c3d-b882-c2d1f69ae992.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download