39d06f8ac30ad0baa4f14d349b945ba674ad835c24023405a7f5c5b0c31c1675

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 288KB
Sample260731-plbd2sae96
SHA256 39d06f8ac30ad0baa4f14d349b945ba674ad835c24023405a7f5c5b0c31c1675
MD5 f64e897e079b00deec0b978f6610e242
SHA1 374ab73ef9f3fb4d223cd9ae928cc04e62b25db6
SHA512 628c3993f871d30d7c5460c8a916130e38f07a4d7f859f1aa45b578729fe3e50f2c791e5ccc06c67346c6cc04e08092ead37ed3846b31eab00b5aef08f062052
SSDEEP 1536:qzyp6rdbb9R4kowaVTeD0MCPN1v7EjRA0Jq/yCuw1Nac8E:qeqbxR4kowaVTU0MCl1yA0Jq/ya1NacF
TLSH
T1DF546499A36D20E47703CB42AE59F725CAE89663CE095C62B41F190CCFE3B5312B671D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2588	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299746001971078"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{D7F89CB4-AE4C-4243-A168-81F30EF0A476}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3264	msedge.exe
3264	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1248 wrote to memory of 4252	1248	msedge.exe	89
PID 1248 wrote to memory of 1420	1248	msedge.exe	90
PID 1248 wrote to memory of 2588	1248	msedge.exe	92
PID 1248 wrote to memory of 1420	1248	msedge.exe	90
PID 1248 wrote to memory of 1420	1248	msedge.exe	90
PID 1248 wrote to memory of 1620	1248	msedge.exe	93
PID 1248 wrote to memory of 1620	1248	msedge.exe	93
PID 1248 wrote to memory of 5260	1248	msedge.exe	94
PID 1248 wrote to memory of 5260	1248	msedge.exe	94
PID 1248 wrote to memory of 5260	1248	msedge.exe	94
PID 1248 wrote to memory of 3472	1248	msedge.exe	95
PID 1248 wrote to memory of 3472	1248	msedge.exe	95
PID 1248 wrote to memory of 3472	1248	msedge.exe	95
PID 1248 wrote to memory of 1556	1248	msedge.exe	97
PID 1248 wrote to memory of 5256	1248	msedge.exe	96
PID 1248 wrote to memory of 1556	1248	msedge.exe	97
PID 1248 wrote to memory of 1556	1248	msedge.exe	97
PID 1248 wrote to memory of 5256	1248	msedge.exe	96
PID 1248 wrote to memory of 5256	1248	msedge.exe	96
PID 1248 wrote to memory of 2692	1248	msedge.exe	99
PID 1248 wrote to memory of 4268	1248	msedge.exe	100
PID 1248 wrote to memory of 2692	1248	msedge.exe	99
PID 1248 wrote to memory of 4268	1248	msedge.exe	100
PID 1248 wrote to memory of 5640	1248	msedge.exe	102
PID 1248 wrote to memory of 5816	1248	msedge.exe	106
PID 1248 wrote to memory of 6092	1248	msedge.exe	107
PID 1248 wrote to memory of 3000	1248	msedge.exe	108
PID 1248 wrote to memory of 2428	1248	msedge.exe	109
PID 1248 wrote to memory of 2428	1248	msedge.exe	109
PID 1248 wrote to memory of 3264	1248	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffc97c0c188,0x7ffc97c0c194,0x7ffc97c0c1a0
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,17979630056523865609,11563264137044962266,262144 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:2
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,3357658161911997140,10027663496261389826,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,18389730395986556459,11879471123459104515,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:13
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,17675857159482743399,2319372487136927626,2097152 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,17734900684960328659,15194631693015379206,2097152 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,14529113366181532046,17832233246308975337,2097152 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=1516 /prefetch:9
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,6387393030113870515,14903419125392889641,2097152 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,12336629213884957895,10098808839601288762,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,6469359595190520438,8545948441593978449,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,5918115326574687320,8853640102648028685,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,5918115326574687320,8853640102648028685,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,2968940764268603001,10662601817089000630,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:14
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,17399528284618142120,627968841754919903,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2149422919350639535,12340910593705280886,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,870450350884741067,914378639508864748,524288 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6244,i,17059386325977896824,2247413603022389256,262144 --field-trial-handle=2488,i,12606194558223873224,3409013726595620286,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f0386fedd967a333be28405bc1ad0d94cf96e144daabe0d4bf2ca79a74c2312b
MD5 5cd2422f896c6e561d302d79e383e7f1
SHA1 508c5116c1b2f169d0a460547a91ebd132a18171
SHA512 e3f07db3002aca9fdd25a3cff74953ec809f64bd233dd3add4b3e750ddf206d24a784801d5185afa96d1260687489426563c9e5b0529bf2a0d4c11d9d7c8d4ca
TLSH
T140612BA55325D9C1CB20797313E9A89832F884FA03271E36F981AD7654C6F68FCC3227
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c544263f-e9af-4ef2-b276-161de30efc66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c544263f-e9af-4ef2-b276-161de30efc66.tmp
Size 2KB
SHA256 e3328aa676eeba6a5124fd8bf5495781fc54b33094f3ed4955c2fb506b36477f
MD5 9b502ac9939375e1caf29369992334b3
SHA1 f379d005aae0da6a7c4443a47c95e9514a85b066
SHA512 1ed6f35d24debd55fc6d0c947f5d7e6c4cfbed931433cfb615dad813b7c5b3728b340fd60b983613c657ebd3dc1a296cb4a906ba1efb16975bd27c09afaa1c9b
TLSH
T1FD51BDF3C3E4866D890156F0AB147E2BCE2D0915822C3C6AC8E4AF5B93F2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b524a754e5595578de0344d291db0c3e52154ea2cc5897f995ea5e4a0024f22f
MD5 7f8588a301f5f35dc4c7bb14f346ef80
SHA1 cc3ee7ee92a5fe592fe10e34b17036f7512d81e1
SHA512 f3df2a45dfce177e8c74872cd17c1f21d406cdd8b333072519ac737682576e4da29f2884c3ceda2fea87ab915d8856d77f209fac2eb0dcb87f3906e5daec911f
SSDEEP 192:sxR0oRvbw/fMszX5aY8bNcXzoA8p4e/g6+WNIYlM74G9IgDtJ:sxRTRw/fMszXh8c+7/5IVdL
TLSH
T11542B756A9689D3B9CC7E20DFB55BF53E2F95033A1941E48B6FC860C05EB6CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2835b9b278ec8984429eec66174f8c967530d828170087734246d27df87a3d9b
MD5 42eaad3a54afde284f5abcff5180b40b
SHA1 d12f1b06fd72474ee475a6099d4141ffccc4346f
SHA512 70cc81012cfcb3859ba2a6d5ebb02f391805cfab0ec16d73ebe374cd9fa374e19431dfa70b4c0b8edf8b425dcd01a8d72ffb3fbf57141eca04ed2f0d423590f8
SSDEEP 192:sxR0TRvbw/fMsvX5vY8bNcXzoA8p4e/g6+WNIYlB74G9IgIJ:sxRoRw/fMsvXm8c+7/5IIds
TLSH
T19232B7566A68AD3B8CC7E21DFB55BF53E2F95033A1941E48B6FC860C05EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0467def790b782fbf20d485e181507acfb563009cd67555864e08fceb8233255
MD5 aa1cb777a4b1acb6a1a9d869653d62f1
SHA1 fc01b7b048f28ec8dd1973f2486d02509000eaee
SHA512 cb3a2d1d6a64537eb077dbc99132b8f160e5344c7e57d7e818c57dc31d7e766ac5cb3c63d12c604cdcf9f9342edb12e388553df41b8fc90a6d9d42b29f8f1317
SSDEEP 192:sxR0oRvbw/fMszX5vY8bNcXzoA8p4e/g6+WNIYlB74G9IgDbJ:sxRTRw/fMszXm8c+7/5IIdh
TLSH
T10C32B856AA68AD3B4CC7D21DFB55BF53E2F95033A1941E48B6FC860C05EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 97a4a5720bbfb582c14073b8a43865062c62b7a57e23cab665d5688dc97bba33
MD5 5c9adb6b56ba01bae63d9876329b80d0
SHA1 9f9305de847a512582059cda5aff97e93052e991
SHA512 babf9b7813eba8ac4e7b68369e228f35ae8f1b356d9d4fce01ef18b80a65cbb1dc66d099d4043b20dc06cc32678fd841e28f5e9ebfc091c8c822162105c25546
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRR3roKMH:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0Vr
TLSH
T1A8B2D93B600DCB7E8FC04A9DEC19AF977D9802C796948D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 84f890ccbc9a860ad3372ba19ab978cf0f891f294fdf702fb1e60a833ef548a5
MD5 8350cae334b8b8a43225458164c0089f
SHA1 073dc194a50fa0eb6398b826125859fd2969cd3a
SHA512 14f1d28c7e32a6bc12c5febf3e26993e0935ced466ad67a77c19ab2a0902c8276b8834a21e4edb30468049202b225bb8ff3658676c97bed25441a9281f0b5c50
SSDEEP 96:KRpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHc9oMmqesWa33gUsK45gesc8M32TlWK2Yo:Cpm3zBj3CH0j7JKg1A5xMv3wHc9oMmqA
TLSH
T149910F45753A0790383D7E0895EAD82FD6C2B8A27059A42F3FAA41A54F66E034CFCCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 86ad481e5fb9b382d94124087f33506e0972fabaa5eeeda0086a86754d61d160
MD5 193ec218cfe375250c7d6392f6cc4f17
SHA1 595e3ac75dacc15eda4cb97980d3b021d6171e0e
SHA512 ff7eb4fe177d39ecac15168ec8a39fce520325b6caf8b922853a40e8784e431c5be69001ec787f7a6208227514fc2077450938e1b5f534df5f2ffe33e4dd6b6e
TLSH
T1E581E255753A0790383D7E0895EAD81FD6C2B8A27059E42F3BEA41654F66E038CFCCD9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

83e0cbdb-bca6-4583-bfb6-a83eea4bfc66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\83e0cbdb-bca6-4583-bfb6-a83eea4bfc66.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c1d46cd8c52f8b11679311a07c53190d429cd2081d8db824852a0333f5e75f8e
MD5 65b6a97a6e3f813c6aed505d86dd38a4
SHA1 3b02041b6114fbfb636b32005175e1707f1a8f21
SHA512 d044a1d9d127ce5c0f83a6b57a2d02a630648b09fc345e527a9b1da437bcd462746c5c0226563d9c51538e8a7e977022efa19d38be5a7d24644f768e6c399090
SSDEEP 768:vrv+4UNbdI3hzwniJVDXNHXmTWTbc+HTAO:vbsbe3hkuheWn1zAO
TLSH
T1E203C071DCA99E379CF696C8B54B7A437EF810B384C81688C9D9AB4D018B89D131FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 671dbd33640531dfd2bf87ace01ce0df7db78e7b616ffaa422ef1d4d30bf4553
MD5 b846fceae8811e6d545eba3488ece6c9
SHA1 1e748d55e2a3fa84b8d78831590095385555df4d
SHA512 b4e05c7e8717ad6eff05ae333197da1730680ab389d493f8e244873ec4b57c426579bf2f5a42c77df2d3e63ea6dca0d58b7a2b48411126cb4a2cb2a2811bdc7b
SSDEEP 384:aZcIr38NDQJO6OllxJzRfY9bYacQDDYQPlLJQXmIkdP9IimIMWEfMbc+HThObjIK:Yr3HzMniJVDXNHXmTWTbc+HTb9Md
TLSH
T16DF2CF70DCAA9E379CE69A98B54A3B517DF84173C5CC2A48D9DDFB0E018785C071B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bfc669e13de455b1ff0a984470bcb2ea1d36c009a137b93410515c42b56cec3d
MD5 fc93671c168b295e46a17025e0b19863
SHA1 693eb9ed7b5282cd08bd2c734de5b505e4ea9bb9
SHA512 3cd6bf64962f990ee7d3f088ee140be457b28090004a32f2bc853c106505dbe4f4d41249f16fcd24302d3bf06047ea89a597af51f6f6b66e657aa18e32c7218b
SSDEEP 384:dZcIr38NDZJO6OllxJzRfY9bYacQDDYQPlLJQXmIkdP9IimIMWEfMbc+HThObjIK:Fr3+zMniJVDXNHXmTWTbc+HTb9Md
TLSH
T13FF2DF70DCAA9E379CE69A98B54A3B517EF44173C5CC2A48D9DDFB0E018785C071B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6e1f4d01a53a0174273f8159d150bced8689bead4f203cc34eda952fc03340bb
MD5 316c4b158410b9fbe36ab184f6098775
SHA1 cf61bfd00f7fa61f9077d5af4ae6be213fc6cc54
SHA512 6cc4efe007d1938d0aeee26ff5242ef7eb932799ac1409d0a0e82911477b35487e246280cc6010e1fdc5302100fca4111feeb442ea0aa595d52b0144545a74c5
SSDEEP 768:mFQW3iwg2zMniJVDDNHXmTWTbc+HTb9Md:tW3BouleWn1zb+d
TLSH
T15403AF72CC95CA3BADF69B98B64A3B51ADF401B3C5D86648E6D9EB0D019745C030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b1ba2fad9b083c1ac0d3448fec0171a7b09937268c27a3f682e51d32677dd9a4
MD5 464c1ec3b765a9820e657b9ab2aa0b22
SHA1 d055fe9d6adbbbc9e224e527eb58ff4d25070189
SHA512 b475ffafe575ac8e9c0c40000df2a6a027678c88d7da12b0236d3a53a65d3c95816ac63ccf2a307683a1b79a2425816922c64db42803e5d877dd3b2256be1d7c
SSDEEP 768:arv+4UNbdM3203iJNNHXmTWTbc+/beVH1SvyZ:absb+3XUeWn1DEH1dZ
TLSH
T17203CF31DCB99E37ADF69688718BBA533EB8117385C40784C9D96B4E428B58D031BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aef788e4-9571-467b-b467-5793a07dd067.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aef788e4-9571-467b-b467-5793a07dd067.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download