5f3c408573e440217aba8d332b38ecb59a7310aae642bfb5e76694f26523181a

Analysis

max time kernel
149s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 8KB
Sample260730-g6fkhavybx
SHA256 5f3c408573e440217aba8d332b38ecb59a7310aae642bfb5e76694f26523181a
MD5 dafd276cdcd12c397c91bf00c3b16ae9
SHA1 866b1a09358d3a948fe482c15888abee3b6acd55
SHA512 bdb4eb2f6b2d331a2b7a0f1a9c4c1d973fe8e4710be0ecfa1ef0e626a927929c7c2b236e367fa289324d57e71a4254ef8d6dca6400fb1d3c40e1ba0d5eadeaac
SSDEEP 96:xoPcjmajTJolgGlM2ZV3l2otLRJEk2HhPbGss4emR6Vu/qx0awMUaDFNDR:SPImYGS2TTExhskRR8/DFNDR
TLSH
T19A024FB154F8AA77415782C235AE4B2B7ED4D607DAAA5190BBBD0BD00FD7C82DD4700B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4164	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298663003185378"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{3F3D964A-301D-4ED5-B239-38CB4B742D70}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4696	msedge.exe
4696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe
4024	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4024 wrote to memory of 5356	4024	msedge.exe	88
PID 4024 wrote to memory of 3132	4024	msedge.exe	89
PID 4024 wrote to memory of 4164	4024	msedge.exe	90
PID 4024 wrote to memory of 3132	4024	msedge.exe	89
PID 4024 wrote to memory of 3132	4024	msedge.exe	89
PID 4024 wrote to memory of 4440	4024	msedge.exe	91
PID 4024 wrote to memory of 4440	4024	msedge.exe	91
PID 4024 wrote to memory of 3356	4024	msedge.exe	93
PID 4024 wrote to memory of 3356	4024	msedge.exe	93
PID 4024 wrote to memory of 3356	4024	msedge.exe	93
PID 4024 wrote to memory of 872	4024	msedge.exe	94
PID 4024 wrote to memory of 872	4024	msedge.exe	94
PID 4024 wrote to memory of 872	4024	msedge.exe	94
PID 4024 wrote to memory of 3552	4024	msedge.exe	96
PID 4024 wrote to memory of 5596	4024	msedge.exe	95
PID 4024 wrote to memory of 3552	4024	msedge.exe	96
PID 4024 wrote to memory of 3552	4024	msedge.exe	96
PID 4024 wrote to memory of 5596	4024	msedge.exe	95
PID 4024 wrote to memory of 5596	4024	msedge.exe	95
PID 4024 wrote to memory of 868	4024	msedge.exe	99
PID 4024 wrote to memory of 5068	4024	msedge.exe	98
PID 4024 wrote to memory of 868	4024	msedge.exe	99
PID 4024 wrote to memory of 5068	4024	msedge.exe	98
PID 4024 wrote to memory of 1428	4024	msedge.exe	101
PID 4024 wrote to memory of 1916	4024	msedge.exe	106
PID 4024 wrote to memory of 2944	4024	msedge.exe	107
PID 4024 wrote to memory of 3336	4024	msedge.exe	108
PID 4024 wrote to memory of 2396	4024	msedge.exe	109
PID 4024 wrote to memory of 2396	4024	msedge.exe	109
PID 4024 wrote to memory of 5724	4024	msedge.exe	111
PID 4024 wrote to memory of 5724	4024	msedge.exe	111
PID 4024 wrote to memory of 2008	4024	msedge.exe	112
PID 4024 wrote to memory of 2008	4024	msedge.exe	112
PID 4024 wrote to memory of 4696	4024	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffe3064c188,0x7ffe3064c194,0x7ffe3064c1a0
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,1160486696707817782,15613706118569383281,262144 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:2
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,4050139923818565271,3795916638731837865,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,14922162361990694092,13445413785981650995,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:13
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,3581549080889622997,11184891263328279384,2097152 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3744,i,11399050330340956973,8303003962047667152,2097152 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,3954424727586406781,452524360896462783,2097152 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,16389214787631055131,8601023930137217748,2097152 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:9
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,482881378997392238,16324594768255277265,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,2313945366713668173,7674130830663202235,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,7115590713872665354,17062599302515537906,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,7115590713872665354,17062599302515537906,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,5350051304507780843,3548284960037924932,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,6723955618541599440,2272398323611391645,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,9145299404953419876,4679773667034632651,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,10259853720931243019,13642658814462774048,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,2531333541473049318,4267796784197632959,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,14680847302487627027,2769170376781885099,524288 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5560,i,7700655215653527348,7611175662384701443,262144 --field-trial-handle=2740,i,8537482164330534208,14967189005433594557,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5320

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 eb496b0a62a3e94c0e30591831887dd42549f3b33028bb0e5ba4711e3e945a7f
MD5 7ce32da50b916c0585e69ececa925476
SHA1 0f39656831f360cedcd12ca2656b90a1e8484f43
SHA512 9454f5fe8e9e830cd2e3dca17f808f602e3a2726657d1c098088e5c23ccd8c20ff46c71dbaabd3306c86b7a107a43d2ac910dee83da31b526f20638f9444b989
TLSH
T180E020B484C5C23DD2186647426C934CC190361AD2CCAD67970589887401040E3D97D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1e2dcff5c0ae209bbbfd980e25bbd8dd7a42f22534d6c41c6e8919e7b551f29f
MD5 885e8994d83f19609d5372a70ec62644
SHA1 522d92e0265489ff09af8640d8b1fede98a9a341
SHA512 c04b39bed598b0254a0a6740d8c06bad82756ea4ba737bc5d0af849c0d65f93f20b8372080ce28199c79692199ade4839ae102e0071b879a6a999bd1056fff82
TLSH
T1A0E026F494CAC22EE20DA4DB426C538CC2A1760ED3CA699B57008D8DF042044E3E27D6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 59e4ba281f1c48cccddddd8f59c06e00e54bb7f7c342ab522f990ac560f0d1b0
MD5 17c48fc7b06077016fab2c74a321e6ea
SHA1 682ac2783b0be6b7eac937184495b577443d583a
SHA512 0a58c61a286e2a3f7336eb2a29644d0e1a8b94e0d023bc553ff41320e4ea826649f5800175148022017ed0b69616e5b60faefb5c116644ed09f0cbef87e51da1
TLSH
T19751E64D43E70BF1F32945B595EE536CB2F4845A810B6EF14F266E380AC7F0090E2853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a29b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a29b1.TMP
Size 2KB
SHA256 685eb95dd34bfac4b237aab4962b4e8ad7f18573ec8d63fec4bfaeab6b1c1ed7
MD5 43ad30e14ba142c82a912216fe2f1334
SHA1 41d8c48f945dd27b99ed6acd1c1873bee2b44083
SHA512 f217b555e9b972db9194923ad7b501b4e2aedf7c264db3e9e7fbb7dd6ffcf434839b1684073cc86ecc630e78428f8d6191df4d2ac547c707e28f259f23894ed9
TLSH
T1A051E64D43E70BF1F329457595EE576CB2F5849A810B6EF14B2A6E380AC7F0090E3853
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 30bdcce316a53e294dd09fcb222b697328544bdd81a4648c446d2a4dd706baf1
MD5 0adc2114c4f02a40664880967eb1ae4e
SHA1 d90c66c936559e60faec433a98102e125b0a0040
SHA512 33e81948f170c10ed05118a852f0c5a00d6c11f97fe03fa535dd5ead0abe2157407f825a18f318ff891666b0e82f07b536e544f34cd6e438a2259e0d385fb247
TLSH
T140419EF3C7E8866D890156F4AB147E2BCE2D0915832C3C5AC8D4AF1B97E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e94818b1d4f41fcdebb9acd44a96843e23ad4437030e2e7f6b826fb33a8b0697
MD5 90807472e081bdfc651a55aea8d8e293
SHA1 e35e05a53e9b2ca31f53aece37b8f41deeed49bd
SHA512 d98e15ae0121c5ac67f4c54c39daa4308fd766b0fa2b7e024c80d5b262cf74fff71f9a81e8f9cd4a38c2df1b95d83b0e342bb3d4ade1edc28a606fa10eb65564
SSDEEP 192:sxRRR3bc/fMseYK3At6KzoA8p4P/g6+WNIYZFLKcG/IgD0J:sxRRhc/fMspKrHa/5IS4U
TLSH
T13432B5166A28997B4CCBD21DBB55BF53E6F95032A1D05E58A6FC8B0C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6e9dba8a4571eef5661a20de79b7af465134c4cfeca3385314714ef78f9416ff
MD5 0e97f3d9ba51fce7ef911696a1fc176d
SHA1 46dc2746026216cb07a386238961dfe6c52a0abc
SHA512 728f85ffd5eec9c3dfc0751e4c1e2feaab89bb5d841188ec47929abed7b0716ee02495abe9d8f7c5b85986f2db7e4c4f5f21872526f8b1dcef98e58c2bdeb424
SSDEEP 192:sxR+R3bc/fMspYK3At6KzoA8p4P/g6+WNIYZFLKcG/IgIJ:sxR+hc/fMsKKrHa/5IS4s
TLSH
T18332B6166A28A93B4CC7D21DBB55BF53E6F95032A1D05E58E6FC870C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88282d04d594d93a7512a1d10bc89f5c95dc96cf4b577b61481112054733ef69
MD5 75d947c14d26c79856e42afa7ae8aa01
SHA1 00e60c72ddcc75018064cea85e1b802efb160385
SHA512 ad5ad69d6499eade1ad8a49bb15393c4012aef06bdb4b43c4185bf67898ac5a641a62a2949f239a6207235891fb6e2986e5094d80e0e99550da1cf98be443379
SSDEEP 192:sxRRR3bc/fMseYa3At6KzoA8p4P/g6+WNIYZFLPcG/IgDmJ:sxRRhc/fMsparHa/5IS/u
TLSH
T1F242B6166A28997B5CC7D21DBB557F53E6F95032A1D05E58A6FC8B0C04EB7CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 42ffe8a8846a93042d862002747c0b0787cef58032531cace63daeffd5544c23
MD5 4c13d4d99b30f61db5f1214000f6f0d2
SHA1 3a726dd020770b701a6286800a303fa0413db95f
SHA512 ac8c861ecba39aaab180bd280ab9e91b1dbb6729d5102762a21c85ff88baf59ab410ed0b8eb26bff803041201a5ddf59de66febb554db6df9c7e0af0fafa6be8
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGMrocmW:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vk
TLSH
T1CBB2B93B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5abe31.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5abe31.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 7170c4a58323d15902f99a22fee610042f1fe628b9f2662a0277a6beb1a2f675
MD5 6541dee1492926da3bb8fb24c0ffa38b
SHA1 65c97371f8fddae7a5ff8740da1b24cc637308bd
SHA512 e98655fa816df2d08abc852ad3a3e88d876fb117f426bbe61b8592dc906fb1733a162ef99ee35ee9ff0d3cba9ed013317df20a1fbf700900444b882162b177e3
SSDEEP 768:/rv+4UNbdQ3qaYH+LeSFOU3SfKX4fouOToPvB2thtA9VAgmb9MI:/bsbi3qaYfQsnnwthtt/b+I
TLSH
T14613D032A86C8A73CDE6C2A4710F355B3FF0515396D40BD49ADD5B4D0A8B9EE830BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 aa45c79ae51bc3b190c1a08952996a98f5eafc999c457aee8daad5543e3276df
MD5 957698f75fe1d1321cccc1e345338dcf
SHA1 fe2cdc1691dbfb90b81c7ec2b62c2b3e8d2d89a7
SHA512 a33ef4226f7d6c5e37d14b76d0bb6c2487bf26922386a731ef575774ae0b66d6539f2e5074c43fd9b5cccdb09c5c7a39c34f1b7fb4f354c62c3e2a30b0c8c7be
SSDEEP 768:vF0rv+4UNbdx34wg6aaH+LeSFOU3SfdX4fouOToPvB2thtA9VAgmb9MI:ebsbT3jaSftsnnwthtt/b+I
TLSH
T10713BE33989CCA77DDA6C7A4B20E32176FF041A3C6D04B94AADD5B4D069B5ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 18e847ea374e710b6a704a4acf9a5787c2429b442bd9888570b5b285d933d8b6
MD5 24eae00d57bb763e04902ecf6459719f
SHA1 0dcf0156144fad6ea2bf9ca6f981c76519052cd6
SHA512 6cc808f3fe876758e53c1853516acaa72dad442d883d69bac593d0ccadea55b40ae530cae13bae438f92f3be5bd216c2b261c44277c5ce998d79f3c92faf3e49
SSDEEP 768:vFQu3fwgKaaH+LeSFOU3SfgX4fouOToPvB2thtA9VAgmb9M2:yu3YaSfWsnnwthtt/b+2
TLSH
T1F603CF739C98C977EDEAC7A4B20E32169FF08163D6D09BC4AADD5B0D054759C430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6d4630d00d52df3f6ec6ad25b7e9f2d45d95231e137a458c651165812bf77ffa
MD5 b201c5220a5989793a3381ecce8bb642
SHA1 78c730c2df5827353127077d16896199d8029fc6
SHA512 29f7b1f0eef542730c8db3b2527e967e616d8a5bd17c5b5f85d2599aeffc3157028023bf5715da766143b1699a48918598b4422af8fdcf4f9e2e1f4bd09fa63b
SSDEEP 768:trv+4UNbdQ3xaaH+LeSFOU3SfKX4fouOToPvB2thtA9VAgmb9MI:tbsbi3xaSfQsnnwthtt/b+I
TLSH
T18213DF32A8AC8A73DDE6D2A4710F36573FF0516396C40F949ADD5B4D0A8B9EE430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5bf649a167cdbb935d3caf7ddc7a10cbd4226780a9d0dfba988fab10b4c3288d
MD5 206f5de53e3065f157cfd0c3eceeef65
SHA1 747ae13f54ff17147c307c2b81546874507c6824
SHA512 853e867f94ccc5f2dc915d90e355e3c9625059af7fad07a0bbb67a5702f90ee522d937fd006595c252f8d5dcb8a2bcdffd56bb9a9bfb26e3a53b7fb76feff085
SSDEEP 768:grv+4UNbdH3/a+LeSFOU3S8X4fouOToPvB2thtA9VAw7eVH1SlX:gbsbh3SCsnnwthtt+EH1Y
TLSH
T10A03CF32A8A88933DDE6D388320B72573FF4816396D00FC499DD2B4D069BA9D430BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39d73061-c39f-4c32-8456-04ea1fee78bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\39d73061-c39f-4c32-8456-04ea1fee78bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download