1d71018a17ac888f05beee68320823d4a65e14483b59d27350f192d7624e23dd

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 23:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 287KB
Sample260802-28ca3shb77
SHA256 1d71018a17ac888f05beee68320823d4a65e14483b59d27350f192d7624e23dd
MD5 3f73933cbcd8e78b40d4086c9a87db1e
SHA1 dfdb96aa9d0a114da8b9a6e88baf0703eadf726a
SHA512 8d5cbf7f3e4388f7af5c879fd8ade4df9d23d4f186d181b5f7283d5163d7381e0646791916c8a67f0570a04e8713a40246590b27bf21edb6b8eff62fcc2508bc
SSDEEP 3072:WQwDcyzq3tkPbIQf0jQ3lzrXH5Yj52hbQQhTHIlWXFhy59eA:WQwDcyzq3aDIQf3rXH5J0+HI6qeA
TLSH
T1F3545B366300B43BB813DDA0A6BE6F4D3C25E12BDC0A46F8B591E930DFE2EB1151566D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4348	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301861273359552"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{96118BD7-D981-44AB-896A-B0A53DDD28F7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3192	msedge.exe
3192	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1180 wrote to memory of 4368	1180	msedge.exe	90
PID 1180 wrote to memory of 4444	1180	msedge.exe	91
PID 1180 wrote to memory of 4348	1180	msedge.exe	92
PID 1180 wrote to memory of 4444	1180	msedge.exe	91
PID 1180 wrote to memory of 4444	1180	msedge.exe	91
PID 1180 wrote to memory of 3380	1180	msedge.exe	93
PID 1180 wrote to memory of 3380	1180	msedge.exe	93
PID 1180 wrote to memory of 1292	1180	msedge.exe	95
PID 1180 wrote to memory of 1292	1180	msedge.exe	95
PID 1180 wrote to memory of 1292	1180	msedge.exe	95
PID 1180 wrote to memory of 4184	1180	msedge.exe	96
PID 1180 wrote to memory of 4184	1180	msedge.exe	96
PID 1180 wrote to memory of 4184	1180	msedge.exe	96
PID 1180 wrote to memory of 2392	1180	msedge.exe	97
PID 1180 wrote to memory of 2392	1180	msedge.exe	97
PID 1180 wrote to memory of 2392	1180	msedge.exe	97
PID 1180 wrote to memory of 4764	1180	msedge.exe	98
PID 1180 wrote to memory of 4764	1180	msedge.exe	98
PID 1180 wrote to memory of 4764	1180	msedge.exe	98
PID 1180 wrote to memory of 3160	1180	msedge.exe	100
PID 1180 wrote to memory of 5804	1180	msedge.exe	101
PID 1180 wrote to memory of 3160	1180	msedge.exe	100
PID 1180 wrote to memory of 5804	1180	msedge.exe	101
PID 1180 wrote to memory of 4268	1180	msedge.exe	103
PID 1180 wrote to memory of 2024	1180	msedge.exe	107
PID 1180 wrote to memory of 6012	1180	msedge.exe	108
PID 1180 wrote to memory of 5748	1180	msedge.exe	109
PID 1180 wrote to memory of 3820	1180	msedge.exe	110
PID 1180 wrote to memory of 3820	1180	msedge.exe	110
PID 1180 wrote to memory of 3192	1180	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd415cc188,0x7ffd415cc194,0x7ffd415cc1a0
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,11435856285058563937,18222687724841909950,262144 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,9103012854914645146,12303826842690013640,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,12457106487424724433,4488957748898100790,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,15933733647305801307,13504856198496334875,2097152 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,7927632042727833095,14336389506668756066,2097152 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,4164927797499652952,6629329764043637407,2097152 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,8783335283829460934,12095764887912496009,2097152 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,4352193560142060161,17905090526950912394,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,125167221561751582,15383682047333436100,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,4124850729615581479,6227527650819166806,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,4124850729615581479,6227527650819166806,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,17045879874791229254,3052706572679390581,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,7113582710050370374,5740276643781163234,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,13578882429679968830,4775400923096509447,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,15493903519514472296,12081704257090456744,524288 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6412,i,364275924522819122,2278694579976359638,262144 --field-trial-handle=2388,i,6134290895451864761,7820974979833202859,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7ddebdbbd061248a6dae7c955d336950fd99ab5263dd924b67efedcf6578fbd0
MD5 a40f5eafe5c86b041a1ebcf586bb30ca
SHA1 76736f7b2dcb379613e0e6931d71d45da062b632
SHA512 dacff028f79db4e1254a7a17e23e81c9d6d5879044a1225e54c2236b1e588d7b4a97a90bb3a8c213a5de64769d33b8ac3c57a719f43d9be0ef1f14f10672cb0d
TLSH
T1D06183D203A505F2E72845F210E1648B72FA84B515032E21F07CEDBA5855F341CF871F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5960a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5960a4.TMP
Size 3KB
SHA256 25547914dd82da3a805c41a192a266f65d0b71f89ffd75a45fd6537ebb8c9a01
MD5 aa00ae6c2faec3c5a2b1d4be9bc5b28c
SHA1 17bac39cb006efef08e2f3237f6e35a569624ae2
SHA512 345854cd4743b6d29e6bf9a98195d224970c1f4ff4d1351ec77b84ec5b4d14e216976df54d8b64e340e4a23cb4bb3c1598023596ea1b1c69cf3aa55172decae9
TLSH
T13B6170D203A509F2E72845F250E1688B32FA84E615432E21F07CEDBA5846F381CF872F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 7ecefc21cfc64e2c92eb3e615d987c15bee7e26808e08fa1bbc15b25b39f746e
MD5 12e2275b3c3c22a1a5f7c8a9b1323215
SHA1 3a093a8519810a0916f63bb30a408324157913cb
SHA512 d95ebd6fcdcbd37c60b51458e8598b6753450da378318cf54866775aefc31d2c751db7415fde3ad10f3d444766881d03ed857e58203ef6df8b458b704e74ad7c
TLSH
T14C61BEF7C3D4867D891156F4AB246E2BCE2D091A422C3D1AC8E4AF5BA3F2471E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 12987113be083ee363e6fd8021753c0407d579cb498255afc0eb1b76346a71a7
MD5 bb86292f00aca91602862536e586f457
SHA1 5513170f307b2ff8102f7df36552ae3febc83a30
SHA512 4d347bb62d0010b4eb2650a70a4b01ae32f8208868b62b81e6de1a407280736fe6548d2c8eafac56c77f643ec16d2e94f9680b41b641aa86a9d270d7ae3c87ba
SSDEEP 192:sxRvRQbA5/f4sOYHFSawzoA8p4N/g6+WNIYbtZ67GVIgIJ:sxRv4A5/f4sOYlSapI/5IK60s
TLSH
T13A32C7556A28A93B5CCBD21DFB567F53E6F91032A0902E58B7FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7441694d79e9ac68e3746fecb9e2be40d037534ce6675ab920bc25531cf3c1a6
MD5 48a2138eb9a558bae130e33e512fcdc0
SHA1 9a04cd76273f214d7794d7c332118d981e2d75b4
SHA512 bd14379f17f8bc14a2e25ecbc0e53d918d966198c5119e8d297f9c787c97b4914c2dec1330b9a7e68a261116f91ae01b29a26ff74a19c2ed007f86b16ede4998
SSDEEP 192:sxRIRQbA5/f4sRUHFSawzoA8p4N/g6+WNIYb4Z67GVIgDiJ:sxRI4A5/f4sRUlSapI/5Ip60y
TLSH
T19A32D7556A28AD3B5CCBD21DBB56BF53E2F9503260902E58B7FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7d3f24a5a9bf47aea1837e22a2d286ae316ad114767e1a776188bc5c500d3a0b
MD5 1b65d6f556179a4bcf3bcfe74cd34937
SHA1 5d2ec79324a08aec8cc66ede4ef189a20ccf6584
SHA512 1e61cc10c8caf61ef017b98191b830454a3a96556839228a6a5495030983063858071af8d1ef492454b59bbc0a25866ecadfac2be36f8aa49e71a9ef385e4f4a
SSDEEP 192:sxRIRQbA5/f4sRYHFSawzoA8p4N/g6+WNIYbtZ67GVIgDAJ:sxRI4A5/f4sRYlSapI/5IK604
TLSH
T12832C7556A28AD3B5CCBD21DFB56BF53E6F91032A0902E58B7FC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 db5b5a80e754305a59ff94ef16bceb8869a982059aab3c277763103712063eb2
MD5 59809246d3ff858b89837b259d886e52
SHA1 e61b4c7a27167d378b4cfc5d9719e8e54027d2bc
SHA512 35b5a552a186a00d3278f29d7bc4fe949365f5c3cafb9fbd321d6dff3f465a3b89a1d9e0ebe28fba4dc5f6bc7b154bdda9403a0e7b2adee4a2b672460064f1fd
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFHroAoD:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Vh
TLSH
T1ECB2DA3B204DCB7E5F800A9DEC19AFD76D9802C796588D4447FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9de4d856-cb7b-4cb2-b357-94c279306274.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9de4d856-cb7b-4cb2-b357-94c279306274.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5d4bbb586097efa7045b376fb6e99616ce56e84d2a3f8f290a9dddd9ea12c0db
MD5 e9cec0415b4eb45b72988d4a9c0e7838
SHA1 8bd092c2fb519ae3de7a963368846628365933cb
SHA512 0575639de07bbca157b6675c4b4302ef027ad6f655f26245afabc51d4538e2be305996c0189cd308d763bc96f2ef764fd120044bf8d5e0ae7700547391f85dbf
SSDEEP 768:lrv+4UNbdQ3zInV2BqobGQgjQxtZu4aWADIidy8LuXeVH1S1C:lbsbC3KUxtZzaNsuVLYEH1h
TLSH
T15F13BE36BC69DE735CB69284B18B36076EF8916385880AE488DD1F4F45CB4ED131BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 0f953cfc03571906006db0b7005a936d8699d4c8279e3826e06ae08d76994144
MD5 f8814c6369cd5ffe19b4943bd6eca85f
SHA1 4bdfdd5bb4e2c00f7a613ea3c2cc183ec43427b5
SHA512 92232cab6b563e0ea1136265c674d4ceadfecbfb3593c0194af8fbbe35cc09ea9f9410a8187d66542d7d6efb6483bc1dab83b6dc47ae6c83b198472a427c22e7
SSDEEP 768:Xrv+4UNbdQ3BInb2BqobGQgjQhtZu4aWADIidy8LuXCmU7RRxiNG:XbsbC3OUhtZzaNsuVLYCm8RRB
TLSH
T12013AE3AF819DE739CB69180B18B3907BEF4916385C90AE499DD1B4F01DB4AD231BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 ec7343bf6f23f4eb2eb9aa8d56747b030b411f6faa7eb6344e69806a0fbec0b1
MD5 1b6a74ad2a0d78a4154e01b9ab37a2cd
SHA1 ee879c62e8380716621b62cd4c8d79750fe91369
SHA512 628ae6ada2b2f6eb3c9035c2f84da6e0536792086d31e450e74e2373963f3cce0b40ef6a49ca1378c158186c31139c157e885dfa342a91e33b04a797de9f0eb3
SSDEEP 768:/F0rv+4UNbdO3AwguInb2BqobGQgjQXtZu4aWADIidy8LuXCmU7RRxiNG:ubsbo30UXtZzaNsuVLYCm8RRB
TLSH
T1EF23BF37EC48CA77ADB69680F14B3607AEF491A3C4C94AE4DACD1E4E019B0ED131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bc052d0127fcc9a979c4865118a3c0adb11137319577a456f42688517bc58c57
MD5 06ee0c6cfdad7b77e97a03c2c579ba21
SHA1 5bb2faedd6cc6b71f10ed90a2bfb01c3dd7139e6
SHA512 e972f9bfc844ad4609a2616abcc0e8f8f5d77d73141dfdcaf346cbb5863452abfc8c5e604eb82ca816b1b8ca25c66916dd877deb8996b460af8068e21d870dd4
SSDEEP 768:9rv+4UNbdC3L7LBqobGQgupZu4aWADIidy8LqZeVH1S1C:9bsbw34upZzaNsuVLuEH1d
TLSH
T16903BF36E859CE779CF79284B187360B7EF8916386890AE088DD1F4E42DB4AD130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccf0619d-2ac6-42c8-9bc8-d8aebdb8544d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ccf0619d-2ac6-42c8-9bc8-d8aebdb8544d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download