efb01bbb5d701f5a22222235170d37d307f93e1efb0c3e8dd831ce945c0f62ee

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 23:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 176KB
Sample260730-26311sha69
SHA256 efb01bbb5d701f5a22222235170d37d307f93e1efb0c3e8dd831ce945c0f62ee
MD5 bd101b17215d4621d996b4e3db0ca39e
SHA1 2f0a4e44ba919014b25460f1d2b26127f0a19648
SHA512 ce330776c8ec82e31954d90181f46701d89146147c5af27a013627b6669a048073061584b3405167bfd8416572a0b1235571f85085d963aead494f4679bfb1d9
SSDEEP 3072:EJOaAIbYpcy6jT73snwNIJrbuTe5zgvPVctE0i5FeApPT5vz4fGN0sLHwVvkGRs+:iKarWWT5vzeYG
TLSH
T1C904A4A23D4B683A210F11CFA05B264C61C7CEE9EA1AE5E0F5FE902857F4D9137E3156
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5880	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299267739314371"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{10AF85E2-86B4-45C0-9FFB-CEDD924DA4B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 3408	4228	msedge.exe	89
PID 4228 wrote to memory of 5880	4228	msedge.exe	90
PID 4228 wrote to memory of 2328	4228	msedge.exe	91
PID 4228 wrote to memory of 2328	4228	msedge.exe	91
PID 4228 wrote to memory of 2328	4228	msedge.exe	91
PID 4228 wrote to memory of 4908	4228	msedge.exe	92
PID 4228 wrote to memory of 4908	4228	msedge.exe	92
PID 4228 wrote to memory of 356	4228	msedge.exe	94
PID 4228 wrote to memory of 244	4228	msedge.exe	95
PID 4228 wrote to memory of 356	4228	msedge.exe	94
PID 4228 wrote to memory of 356	4228	msedge.exe	94
PID 4228 wrote to memory of 244	4228	msedge.exe	95
PID 4228 wrote to memory of 244	4228	msedge.exe	95
PID 4228 wrote to memory of 2236	4228	msedge.exe	96
PID 4228 wrote to memory of 3296	4228	msedge.exe	97
PID 4228 wrote to memory of 2236	4228	msedge.exe	96
PID 4228 wrote to memory of 2236	4228	msedge.exe	96
PID 4228 wrote to memory of 3296	4228	msedge.exe	97
PID 4228 wrote to memory of 3296	4228	msedge.exe	97
PID 4228 wrote to memory of 3252	4228	msedge.exe	99
PID 4228 wrote to memory of 3152	4228	msedge.exe	100
PID 4228 wrote to memory of 3252	4228	msedge.exe	99
PID 4228 wrote to memory of 3152	4228	msedge.exe	100
PID 4228 wrote to memory of 2456	4228	msedge.exe	102
PID 4228 wrote to memory of 5912	4228	msedge.exe	106
PID 4228 wrote to memory of 2472	4228	msedge.exe	107
PID 4228 wrote to memory of 2664	4228	msedge.exe	108
PID 4228 wrote to memory of 556	4228	msedge.exe	109
PID 4228 wrote to memory of 556	4228	msedge.exe	109
PID 4228 wrote to memory of 4812	4228	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffacc52c188,0x7ffacc52c194,0x7ffacc52c1a0
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1664,i,1411512642342613958,18106455392439672505,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,9994002453070709171,6423702275849038886,262144 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,10024957671562525708,13132649993699971104,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:13
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,803370725828441562,17025869214336365827,2097152 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,12088865207069435763,13192064527831499577,2097152 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,14402707139523206433,14109586695005986992,2097152 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,7158528135136565271,15469156307433879839,2097152 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,622415123480510810,3089205416792812989,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,8202394649651861936,5725221812049822928,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12780740227642117979,11343591849762946210,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12780740227642117979,11343591849762946210,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,11438614932112558930,5872486685591843779,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,3337912580454941183,8217143735515298293,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,13314522822982303957,10778224084728396013,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,2854051676789015198,4250351621724775290,524288 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5804,i,18356872507189682437,1263527623671173220,262144 --field-trial-handle=2212,i,6415642259376503224,6204442182195428653,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 779d6b9216607e3922636d3b9f40ecd6fe94291a72668ebbab744833dea9e82e
MD5 279706a840abf1b7415f3fbeea5733ea
SHA1 d270a78a5d35d256a27234a6ccaf4c622164deec
SHA512 4f16e5f1c04a88993f80934499464713ff9b45c313fa4dc1aa787ac44b615b9dd30c59c5e5372ffb0121bb204e965450bbd08c2fc479c53329a24abcff4da64f
TLSH
T15251606623260BC1D7A645BB50F25CA83EF48677D1831E183F835E7A480EF7820E2263
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598505.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598505.TMP
Size 3KB
SHA256 c9e9e6507b990f4b3fa60265b5eafaeb0deb6b2a3f855bc90d41c0a343a88e5c
MD5 5f370528d0dc4950da4f23e37808e63f
SHA1 1b475240d2d824023618dab2967eb2d925fe1ce5
SHA512 c06c9c64231d7e3abe788d4fd007248124ec3b987d5a47ce9207c44cd352ba73495b6ff3d16faf54fe4b8a6e1f5637f068e13479b6fa880177b2f0fb53f435f8
TLSH
T1BE51615623270BC1D7A644BB50F25CA83EF48677D1831E083F835E7A480EF7820D2253
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 53a1fbf051d8ff83d6ecfd0bb2c0de5fd446e7dc81206089185019177da01be3
MD5 85f52ae0e16a45414d8a220f96048742
SHA1 bf1a8b1de98baf93e8fdee2f5d3ece6fdb95974e
SHA512 b0dee429547dad91497b2724f53fc4cb8fcef57f0b0c13109a628845737d74756cfe925582b528b73a9bb3c46a889d8e106f1de2cb479f460841306c46850f06
TLSH
T17271AEB7C2E8877DC91556F4AB286E2BCE2D0516422C3C66C8E4AE5FA3E2471D20165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 097f3296614097776f704dc0d0c25f79988709990ac807243efc07366f0873c5
MD5 7849e17b6a19a3a55caf9eb74705171f
SHA1 8838d74a6393286fddcb1f626bd4a93c58b140e9
SHA512 046521f0c383c95d0d71d57a182dbfbd6530e9d0db6ee54879e8a33dd5b322f3c9d2de7f97d4e414faeafe25aa372e91522d4ae1bf4a136a7bba39718d428ce0
TLSH
T187219DF3C2E8567D8D5542F467243F1BCE2D0C54431C3D5AC9D4AB5B93E5471E28095E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c8964e89f17ed75c62ec291f692091a6459d4e84455830d152698205eb393b47
MD5 e0b0143a6fd634223a4a211d4d6f0695
SHA1 3941411f0a97be85fe3adc89ab8b9f789e28dcc8
SHA512 c1f6c203e8841392fff1af1a6f21b26d1a0546222cf9b625520234fe78e09e9d3e4c097107d6a9739884c9ca18b7b9354863d09eafddad8adc88f238d28e9de1
SSDEEP 192:sxRhRTbX/fcsUCepq1zKVzoD8p41/g6+WNIYGlkkaGqIgIJ:sxRh9X/fcsUP4WBI/5ItEs
TLSH
T19332A716AA68993B8CCBE21DFB557F53D6FD5032A1952E18B7FC860C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fbe6792a11f2ff92c31cd320ae4f07d15b203082b7ceb60ee1bece4219d85082
MD5 95ddf66c47a7fb2886bb69a6e4e6bc7d
SHA1 437e0607946e5a9dbaf2d657059857072c8f3595
SHA512 dee8b920658310cbcf34b8480d4001d66571b2cab78be2e85f1ef5a4ce7585dfe6694adb38546078ed8307b900d9a1e0ea515dd9df624459b717cd45afc59649
SSDEEP 192:sxRKRTbX/fcsNCEpq1z7VzoD8p41/g6+WNIYGWkaGqIgDXJ:sxRK9X/fcsNx4XBI/5IFE9
TLSH
T10342C91AA928993B9CCBE21DFB557F53D6FD5032A1952E08B7FC860C04EB6DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9295c496366a676d8c8dcfbed66b4429c3414ca5d2c8e5bc95b86fb1a9dadbe0
MD5 efc4e46381c4391cd09c29125169a8ff
SHA1 78a1dc01ef8915638d0b691f229063ebaa1f8b62
SHA512 e8277fed1f204bc278a348951d1f860399be12e6f978963d859b3b741b4fc75e4796a297100407b5267a897e3fc9fa7714ea44685a369fe539368a2783682ffd
SSDEEP 192:sxRKRTbX/fcsNCepq1zKVzoD8p41/g6+WNIYGlkkaGqIgDBJ:sxRK9X/fcsNP4WBI/5ItEP
TLSH
T1CE32C816AA68993B8CCBE21DFB557F53D6FD5032A1912E18B7FC860C04EB6DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 302b1966ad9bded93017510c14f4b6a98e0e52ed3a9fd0aed3fcf9c321cd4064
MD5 e565af6743c37630d78ce1790e632953
SHA1 3f32989a98e556a292b2b4616d4cee200adccada
SHA512 457551d6919640bffab24c39d5e866bed69a6a9bd8dca1b55ea90b7620712d28ffca4191517dc642f5a1e3e9718b49a863ec0901aabd24e99ce9d708988168bd
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRI9rowU:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0V8
TLSH
T11AB2EB3B600DCB7E9F800AADAC197FDB6D9802C796589D4047FE994C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eb5a36879feb6961bc798d8b54f61aef3d9c664d4fa43a18123fa421d7efd9b2
MD5 7493c5a1e8a8d629847ca8c336c5a9cc
SHA1 ef4a252ddd6c7d584768dca1ca70503b969e673b
SHA512 1ddb807787bd978c5ff876783b0a60e0bd3b11de929e7fa965c99c87d66180af5b8e8f98d48930bd98f7f9f0dc69d7bae236a64311931799a588bae33895a5c0
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkv4dZvtNhW528gBhK4Igvhc3f+BtiuVWK+ASl:Cm7KmgIIJ4tWGm7g09OGlkv4dZvtNs5t
TLSH
T130914F41B67A1241387EA94885B5882F83D2B4A23418E42F7FAC55A61F67E034FFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3082de68ce9b445bcd11f01deb60144684ccd1fbc98a840c6c43dae77702c086
MD5 e71120c43f7c1d391f89790b46225e8e
SHA1 8bf29096f7979255198b934a1cfb8248824f46f8
SHA512 bb44ec6aaca291b6d3f285dd8c9d28cead10be6d5ab9061862a34c5e70b79995700b9c84aee837709d3e8f2756ebc2b74868c1370226fabd4d82aebcebb23b4b
SSDEEP 768:so03xMlYyGSI7Hucys6BRvi82oP4/z6himo6Fb9MT:so03Z23imOz6Imo+b+T
TLSH
T146F2C035E8558E73DCAB8296B5967A536EF05333D2CC1984E4EEEF0D06CB9AD4306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 318541f62a878fc908cd8bb1aa03b23aa900f98360046fb272c24c4267cb99fc
MD5 297fb75e47b994e6f48747148ed650dd
SHA1 ce5f79c48ba9b82d8dd6a765c571847f2cd92553
SHA512 02393495a16dad1e5274ec1cd0a9ee2d61fc72e6e13fc7c537d527205694b1011450166277887da272f2956778ba3dba0ebd8b17918ffdc46b0e9cda8be78636
SSDEEP 768:aAK39MlYyGSq7Hucys6BRvi82oP4/z6himo6Fb9MT:aAK39i3imOz6Imo+b+T
TLSH
T18BF2C034E8558E73DCAB8299B4967A536EF05333D6CC1984F5EEEF0D06C79AD4306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f96bffb52ce5baabb1bb191a7111c68d06c53f71b927576faa80ffab0446fbc6
MD5 dc7cdfe484a64a9ea2502c027078ac75
SHA1 4e1f8a1a6fb115408731f4e613d06699b75ef447
SHA512 5ebd06e82c560b6eaa73883cd8151f702396967993a7144bb80a5ab56082df7e808d62badf54097f26136469eeffdf4cb5372bcbcbee4407ed55ef50e50cfa99
SSDEEP 768:UAK3xMlYyGSq7Hucys6BRvi82oP4/z6himo6Fb9MT:UAK3Zi3imOz6Imo+b+T
TLSH
T1FAF2CF34E8558E73DCAB8299B4967A536EF05233D6CC1984F5EEEF0D06CB9AD4306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 555c1107be7eab86d46f5be6a3d77b258f20ec1cec8237177e22a6f2c460bafd
MD5 9d4ed59cdc3ecaa900f4ac5824842b64
SHA1 1699e8bbd6bcd442d7fa8b1a2fe13321bd158bed
SHA512 703e5c5e6fa4215a2b92cbb51be2da1db4ae59e507f32117ad3021ecacbc307034416b00b1d388d5a57c97ef164d44ce78e54553fd56e9df0fc74807df8a2991
SSDEEP 768:xGrv+4UNbdS3dTelYyGSx7Hucys6BRvi82oP4/z6himo+g2bwn+h:xGbsbw3dF33imOz6Imob0w+
TLSH
T14703C035E4588D72ECE7C288B44ABA537FF4522395C81AC0E5DE6F4E029B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03ddec11-e43e-4b48-9891-0dfc5fe37b74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\03ddec11-e43e-4b48-9891-0dfc5fe37b74.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download