897ea67e1c02a76902047778215d1ebf28676d7b949e431f40149408e8add5d3

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260729-anpbcszfpc
SHA256 897ea67e1c02a76902047778215d1ebf28676d7b949e431f40149408e8add5d3
MD5 14debb1d56b5c6cc8168a3860f4b671c
SHA1 3ec9fb733de02ffb4de5ef594986e6a38f366e9d
SHA512 5852d1af5b4b5352f5cdd1599e88d3598ad529164812d010db04dd8c6646c755ad85c05759944f568c99071215119d0e4813d88c88f852b2a0b9acfffe383dbc
TLSH
T14D61506B86E38E59E853547D1BEFA204B1E4D007C90ACE5079CDB525CFD068A2EA33CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4784	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297581453332968"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{4F048847-56CD-451F-A91C-A3D728C49607}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2052	msedge.exe
2052	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5516 wrote to memory of 5332	5516	msedge.exe	89
PID 5516 wrote to memory of 52	5516	msedge.exe	91
PID 5516 wrote to memory of 4784	5516	msedge.exe	92
PID 5516 wrote to memory of 52	5516	msedge.exe	91
PID 5516 wrote to memory of 52	5516	msedge.exe	91
PID 5516 wrote to memory of 1724	5516	msedge.exe	93
PID 5516 wrote to memory of 1724	5516	msedge.exe	93
PID 5516 wrote to memory of 4584	5516	msedge.exe	94
PID 5516 wrote to memory of 4584	5516	msedge.exe	94
PID 5516 wrote to memory of 4584	5516	msedge.exe	94
PID 5516 wrote to memory of 3084	5516	msedge.exe	95
PID 5516 wrote to memory of 3084	5516	msedge.exe	95
PID 5516 wrote to memory of 3084	5516	msedge.exe	95
PID 5516 wrote to memory of 5764	5516	msedge.exe	96
PID 5516 wrote to memory of 5764	5516	msedge.exe	96
PID 5516 wrote to memory of 5764	5516	msedge.exe	96
PID 5516 wrote to memory of 4920	5516	msedge.exe	97
PID 5516 wrote to memory of 4920	5516	msedge.exe	97
PID 5516 wrote to memory of 4920	5516	msedge.exe	97
PID 5516 wrote to memory of 3404	5516	msedge.exe	99
PID 5516 wrote to memory of 2000	5516	msedge.exe	100
PID 5516 wrote to memory of 3404	5516	msedge.exe	99
PID 5516 wrote to memory of 2000	5516	msedge.exe	100
PID 5516 wrote to memory of 4340	5516	msedge.exe	102
PID 5516 wrote to memory of 1428	5516	msedge.exe	106
PID 5516 wrote to memory of 4200	5516	msedge.exe	107
PID 5516 wrote to memory of 4308	5516	msedge.exe	108
PID 5516 wrote to memory of 2960	5516	msedge.exe	109
PID 5516 wrote to memory of 2960	5516	msedge.exe	109
PID 5516 wrote to memory of 2052	5516	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff9358ec188,0x7ff9358ec194,0x7ff9358ec1a0
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1840,i,13050830517530909486,8701223659864270097,262144 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:2
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,11149783089733844271,8757496060954132127,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,9592696041806729011,5960075397528639406,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:13
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,2837338980076166847,13298784252457464589,2097152 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,5863194522288076387,3771855605572242903,2097152 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,14066697964058705879,15255726764832583658,2097152 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,3368637000963545485,1849363879502013633,2097152 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:9
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,17342412564554296084,16902152452799400350,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,10890006388201226850,13662004654353901387,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,15831782758719175411,10090494473368711526,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,15831782758719175411,10090494473368711526,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,12260372910528011025,2918560329119852692,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1080,i,5982327374655067912,17528854505246646184,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=1320 /prefetch:14
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1216,i,14483223734221268562,1707040044463035978,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1352,i,5174141947997383549,5241968550572684765,524288 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=1416 /prefetch:14
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5828,i,16881684574267428986,172275779069403801,262144 --field-trial-handle=2728,i,3893957468668016129,10763501430237037970,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d03946e34bf909b310d9e22a50cf2687b69ffc28ed239752956a05869d1b8812
MD5 dcae2d67d55a1025ebdea3f476941f1e
SHA1 ca06871ec8f412a40c679854276f9885798c7ae9
SHA512 7c1c2dcfc90717a8e3ef6d8507f56a7b652141ccd7c37b7c8acda72277579bf3a0b79246ec4d8aa58f55eeee45b4d2a8a428c62eca30c2a00df4ba583ec5d183
TLSH
T169613A64236B0BA2D73B49B150E3669F3FB98E46858FAF828F547778570A3D0291107E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1a6bb3008941ea1334f74c5c64c9297b39091a20c4811dbb2df0d718e3408794
MD5 2532f7ef2ea4304f509e072ac6947d62
SHA1 e39172f299bc38e07efa53fd44eb8c851cee29ab
SHA512 b96afd66b1b0b07bed78e4d3cf3ce0036581fd780073ce7901f2c5c0adb519ae353b69f288d9bdae1f6a64ba2d79ac641d987280334db6ce28c31737fb00f6de
TLSH
T1E041CCF7C7E4856E890156F0AA186E1BCE2D0915832C3C5AC9E4AF1B93F3871E14295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cc2866ed9af738520812c1be595cf1dccdbd936466b2b2921663f3859a159ac4
MD5 c2f151f584ee90d5ccd253625fc29faa
SHA1 0cc3b364bdd990ed0cf49080111ffd876eba139a
SHA512 10bc5a34ceed085d666bc16d76f084794e083fe7b5b1942735890a1f65ebff680d02f81ebd552958d7ec625f59dad9331ebf8415847bbb63efd18451090e32e6
SSDEEP 192:sxRTRhbz/fMsKlVYCb7zoA8p49/g6+WNIYE9MOGYhIgIJ:sxRTDz/fMsYVPa8/5Iy8s
TLSH
T18032C7166E28A97B4CCBD21DBB557F53D6F95032A1906E48FAFC8B0C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 19fb5196d380f6e4f537afa0a20b92deb688d41726cf1e8b974e185316a1dc2c
MD5 d7b6642ab5d47c0a48025ecc76b05ce1
SHA1 d7dcee831c5e1da3753a28a81fea06991637af64
SHA512 6c80356ccd6608f94beaf6ed90d3ec1c349bdf1764c2e707268186d7ae41813eefe763b0972fb561cc5c0abc890b1ed00ca00b28abed5fbd36a7f1fe347949c8
SSDEEP 192:sxRERhbz/fMszlAYCb7zoA8p49/g6+WNIYEQMOGYhIgDpJ:sxREDz/fMshAPa8/5I58H
TLSH
T1DC42D716A928AD7B9CCBE21DBB557F53D6F95032A1905E48FAFC8B0C00E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a76b441f501b942bafad51de37dac76eddbc8ea5cb704d166b10b00dceb333b9
MD5 94f5485f59d18eee5dcc801bb72bcbc2
SHA1 547edac7579ee13cfada919be070b28b13d27fe8
SHA512 0f17f052a9d8ee98aa0e262626a8da629e5d43405862cb2bbbcb22a3ae05a24ed8426b2ab5ac2edbfb0b661a4ce1196d7958d20c12be3502d9cccbb625427220
SSDEEP 192:sxRERhbz/fMszlVYCb7zoA8p49/g6+WNIYE9MOGYhIgDXJ:sxREDz/fMshVPa8/5Iy89
TLSH
T11532C716AE28A97B4CCBD21DBB557F53D6F95032A1906E48FAFC8B0C04E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9b9430d5d36af4cff27f6562106ebb5d0038c1eaca7f1c5b6330b4cc793028af
MD5 e18632ade47a11dd0e179ef839ab0ff9
SHA1 81db7b47fe0d92d753714bcc9323f606ab98db64
SHA512 314a7fd1d6f5eba5487aad3a41b75da1875d1ad7c73f15bc92a6867693dae6221390b7672e28c27fba5149e4a8b91e99ea5d9f98708fe9eb8450d5a988c539d3
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVR:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoY
TLSH
T1C2B2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fac69428c1ec6bc4465a66c755746f5c9bc3d345c998b2e52f85e730f6ce39f1
MD5 91dd9c544654f20deacd5bd51675c9cd
SHA1 5d959b5c183227dd0267c30d8eed1d0b65703832
SHA512 460b42fe0da85f73f3bdee1a313ff9a5093ef29ae3524c54b0455fb1187a4462cb6fa06e458e239052535df95edfddec16187dd679ff3842d9ce39c43c05fed5
SSDEEP 96:KRpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHyX+SkE0SWcJhgCSK4Xg4ScCqRwNCwKL67:Cpm3zBj3CH0j7JKg1A5xMv3wHyX+SkE5
TLSH
T19791CD1075BB2640387EA654837C946B82D2B4773058A96B3FAC51F28F26E434DFE5DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

0fe29d38-5d46-49cd-8230-d894cc3a02f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0fe29d38-5d46-49cd-8230-d894cc3a02f7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 326d1206f366ac806409b390fb99e3e5aa66273b671726777d2defb21df7ca56
MD5 c6ccdc5cd5ceebec60e8ea5d5f364959
SHA1 6e18c98fc0ac66e08b6c05fded701f2e0b07ec2b
SHA512 77f6d50b8e1d14d1d1ffef499628206c55b87f278cca919ad051cf320df479726dc6e12baf3550b66b21c6c493eb5ddf6b0b033b34c086ffe7be31716acc7b7c
SSDEEP 768:ExaR3G24/DTd+Zc0UXTtXeX6+qTko0u229a4vsTJMjW:su3G6dUcvVTVKa4g9
TLSH
T15FF2BE72EC658CB789E6D685B10736439EB412B3CBC81B84D9EDBA0D019B5AC170BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3fa5cc9adb87a37aa28b538b69debd3574f3a227aa0545dc72e9edbb37678ecf
MD5 ab60fd1929cddc0d183f7e335c63bf13
SHA1 f046c34c794c06cfb352434223a867d2306a7888
SHA512 6826f17df6fb8f6a17f26ba2e9fb03ea6196538e86d20662fbbb12066451ded987b79aaa27c5dabe6c83ba176957ff55e0ee11d9769bab50ab31a73f23f430ab
SSDEEP 768:Jrv+4UNbd3R3l2Ax/DTd+Zc0UXTtXeX6+qTko0u229a4vsTJy:Jbsbr3lZSdUcvVTVKa4gy
TLSH
T1DE03AE32F8688DB78DE6D685B10B75436FB811A3CAC81A54D9DE7B4D018F4AC270B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d62cc5c36da10f248c47e1e6d00ed547e6c017b0c19c222360f8fdd210f97313
MD5 bdd5182b311c402ac1a8cbb6142f22fc
SHA1 2f1d1899c970c52458ffb81d89062d8bc2fb0f52
SHA512 0cabb268b3b5bf9f18f96d56650feb4d7fb2b5ddb8ffe020b8354b4d01e60053821ac4863da1d25d75efb9f6cc34c12ddcd977fd06712801f71c8c3ee101bc9e
SSDEEP 768:/aR3l24/DTd+Zc0UXTtXeX6+qTko0u229a4vsTJMjW:/u3l6dUcvVTVKa4g9
TLSH
T15CF2BE72EC758C7789E6D685B10736439EB452B3CBC81B8499EDBA0D019B5AC170BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d69197166331a1fa10915d260dea4188bce7b10d527da5b0a69af0875ae8738f
MD5 12cadb9e164fef2f6a7baaee0a356662
SHA1 d80590c914ddbff9fbc24b047e04b49f4f02c2bb
SHA512 8d449320cc250f5002f9114c0f441aa10203dd0f8bd824dd8342f7bf07c2f23d9a96ebb513ca943a75b80741c4302ea322358684079384bb1eae76a359383c5d
SSDEEP 768:8AFQJR3gwgn24/DTd+Zc0UXTt/eX6+qTko0u229a4vsTJMjW:IX3Y6dU8vVTVKa4g9
TLSH
T14B03AF73EC64897BCDF6CB85B20A36438EB411B3CAC45A44EADDBD0D119B5AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 af0c0fbfb48c417f8d40defc9f2c7de4fdadce4a062992a9c00eea6fe3e6f977
MD5 c14466942d2c785778f4d6ae19c466bf
SHA1 ae29005c6a420ca8208cb94cb24a85c71210d249
SHA512 ffe4397cc44da1329bed678f4fdc18d1340c0f1751786726d85be7dbbb67ec5d1a2f1ee18e659a30ed30f870a606e7e0b5bb097b6d13ebf998a84b57e3055ebb
SSDEEP 768:prv+4UNbdG3hYtDTd+Zc0U8eX6+qTko0u229a4vsDZeVH1SdW:pbsbU3RdULvVTVKa40EH1h
TLSH
T12403CF32E8A989778DF79784724B75472EB91173C7C80B94D8ED6B4D028B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download