0d2215a4390d239de480a53410ac187ea3ce37ba34fab9770506cea28a6d3f2f

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample260803-ncwsysvhpd
SHA256 0d2215a4390d239de480a53410ac187ea3ce37ba34fab9770506cea28a6d3f2f
MD5 4af4fd94ec42489fbaf2306806efb57c
SHA1 e0b21db05cb0593c70f2da545f40c22351f61f19
SHA512 c2e6d16cde2f4823088c2748d271416647a075847d1e9650c4b1af0a9312f04df8716a2f1dfe5ca5913c195f4ebd41e087c01705216d38ee3acb94cafd6c56ac
SSDEEP 96:x2Q7vqu52qwqVm62HkmNdtnN+oHhMWHgkAhm52o:j+26GGV2+Um5X
TLSH
T11591231250426D6FA5572036BEE26EED213781E8D70F5F080A297AF1E3CE6ED55336D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3900	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302293506454541"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{958A43FE-6EEF-48D5-8FAE-619EEFABA5AC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5424	msedge.exe
5424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe
5496	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5496 wrote to memory of 4740	5496	msedge.exe	89
PID 5496 wrote to memory of 2852	5496	msedge.exe	90
PID 5496 wrote to memory of 3900	5496	msedge.exe	91
PID 5496 wrote to memory of 2852	5496	msedge.exe	90
PID 5496 wrote to memory of 2852	5496	msedge.exe	90
PID 5496 wrote to memory of 2088	5496	msedge.exe	92
PID 5496 wrote to memory of 2088	5496	msedge.exe	92
PID 5496 wrote to memory of 5488	5496	msedge.exe	94
PID 5496 wrote to memory of 4320	5496	msedge.exe	95
PID 5496 wrote to memory of 5488	5496	msedge.exe	94
PID 5496 wrote to memory of 5488	5496	msedge.exe	94
PID 5496 wrote to memory of 4320	5496	msedge.exe	95
PID 5496 wrote to memory of 4320	5496	msedge.exe	95
PID 5496 wrote to memory of 3348	5496	msedge.exe	96
PID 5496 wrote to memory of 3348	5496	msedge.exe	96
PID 5496 wrote to memory of 3348	5496	msedge.exe	96
PID 5496 wrote to memory of 2664	5496	msedge.exe	97
PID 5496 wrote to memory of 2664	5496	msedge.exe	97
PID 5496 wrote to memory of 2664	5496	msedge.exe	97
PID 5496 wrote to memory of 3296	5496	msedge.exe	99
PID 5496 wrote to memory of 3296	5496	msedge.exe	99
PID 5496 wrote to memory of 5760	5496	msedge.exe	100
PID 5496 wrote to memory of 5760	5496	msedge.exe	100
PID 5496 wrote to memory of 5344	5496	msedge.exe	102
PID 5496 wrote to memory of 1820	5496	msedge.exe	106
PID 5496 wrote to memory of 1892	5496	msedge.exe	107
PID 5496 wrote to memory of 4632	5496	msedge.exe	108
PID 5496 wrote to memory of 3628	5496	msedge.exe	109
PID 5496 wrote to memory of 3628	5496	msedge.exe	109
PID 5496 wrote to memory of 5424	5496	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ffbd0fec188,0x7ffbd0fec194,0x7ffbd0fec1a0
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,12049535729562578392,17590823528590529709,262144 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,17248756171403473705,14172832072228939520,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,8192624698483416407,17997379155702509632,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:13
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,11012293160850255380,13897487602754500468,2097152 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,14470412370981861324,14120771746165757364,2097152 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,4104292991191545856,13555811344898005149,2097152 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:9
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,18033498117571247689,17649223158687793066,2097152 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,13512376165630670400,2279178321109451937,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3940,i,430494856043210001,16554044480890042835,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7302563496376394499,17141903599936537720,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7302563496376394499,17141903599936537720,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,6151785544268129792,3431081770833219289,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,247720003788909145,9367582675050020955,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,289294009536522825,11574697306974818438,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,7257738878423428065,15706923901084375656,524288 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:14
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2868,i,15800024526582024765,11443386230911435948,262144 --field-trial-handle=1992,i,1994080246354754884,8075710384826483459,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 13aba2fd767fcf0fcc8eedb47becafe2a98f8bdcbdfb0efd1d6e40e87801aa91
MD5 0aeb0950ec63cf4e7e637b37dd6326b1
SHA1 81f6d678844a0a17e6453df520075e9829fe7ff4
SHA512 f8f74412a52b984f33abc4b3150a7cbf8f78f4a4ea0a28a73270129ccb80ce19b9c8107d265b12c03a2dece25d221fc5777a3d13b49c4a496dc28bde8a5d53f6
TLSH
T173512C5CA37605DAE32047B2BCE384553FF58CAB09035E172080AE7859C6F075EC2E97
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b81c28ea32befd9f0d966d322e6c36f041780fa27809afe0bfd04990d0239077
MD5 f65b92a58dc3a8b82b76d4e157c84ee2
SHA1 5b38975c82f5831d61afe4ec1df02075bca0fa8a
SHA512 7d6268bb3f3cdbe1f9096bfa6b92bcafe2f25c39815602ff6ca185939785505f15bc327b6be7e77b8e2d8fd1c9a8ccf0a0444772590a8fab3369c61db986ae81
TLSH
T1EE41CFF7C3E4967E890196F0AA146E1BCE1D0915832C7C66C9E4AF2B93E3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 579b8547268627c0ec9656ef5a14a439b0057a043cebbb0a57124ef17a665329
MD5 ef43330f70601e2bde254035005d78d2
SHA1 10448c78a333a877f416fb8855717f22478d24bb
SHA512 60d1a77507f87d160b9c1336e20b31a7be0379874355c6cac16823d42480c4708adce3b59a8e3f8562102ec8a289041f297d0a3ef7d6c1da833050c934661793
SSDEEP 192:sxRyRVba/fXs7O2rprQ5szoA8p49/g6+WNIYn83JzGk1IgDzJ:sxRy7a/fXsi2rEk/5ITZph
TLSH
T14732C6166A68A83B4CCBD21EFB55BF53D2F9103261D02F58A6FC9A1C04E66CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 70cd1b4b7b2b7bd7db72d8497db4cbda85e0d0b1bba8c4bac848ba5583fde461
MD5 4001af9316ba170867951c6be54020cf
SHA1 1e4fbf397243ef993ef27ed01189efa63c9b796b
SHA512 0c11d016d6a4ba473aa5b0c4dff43c2534e3fb0f4a9a078117952b74a4026b1570807b2debe88e30b7d03261c6880e4ea3ce8eafcd45fe020f18a9b260b07d55
SSDEEP 192:sxRyRVba/fXs7OJrprQ5szoA8p49/g6+WNIYn8GJzGk1IgD1J:sxRy7a/fXsiJrEk/5ITmpL
TLSH
T1A142D8156A68A93B4CCBE21EFB55BF53D2F9503260D02F58B6FC9A0C04E76CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 93ccf340ff7f220dcc2a4db2a378fac90f2bdf0230f101646460d7f5aa719c39
MD5 01662045e4371a60213cc29bb49db0b8
SHA1 d4797907fec5ac4b3227251f02ec17d90221d9b2
SHA512 54ef0415d7c5b4344425861828c22b72a55f4e8aa0b4dcf44e8033de3f1c71c7dac56ca6c4e273a7c92cdd1e7c1809c83b47e1250006255e78834ada06c92c95
SSDEEP 192:sxRNRVba/fXsEO2rprQ5szoA8p49/g6+WNIYn83JzGk1IgIJ:sxRN7a/fXs92rEk/5ITZps
TLSH
T1A732C6166A68A83B4CCBD21DFB55BF53D2F9503261D06F58B6FC9A1C04E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 19ad9fba35951dc880ef16b5ed8d980aab61b5c2c89325d8a6a46bbadc817f49
MD5 ffa1854e5020bf0fe31c4e43af34472b
SHA1 8a2706154b8df8240d418e2a784f975e0f2dc95a
SHA512 0e51b30ea0cd9769daf61548a4eba708043bac7d1eff90b9367a4f81ee04153be7111a04aae49da6d45f58b196d88016453faf60de6dc5e8aafe37bcc10e071e
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPErohM6:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VA
TLSH
T11AB2EB3B604DCB7E5F800AADEC19AFDB7D9802C79A948D4447FE990C02C77EA91194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5390c1fc08e065b3543b9b9622e0168934c0de49efde7c11fc205bb42f21cdcd
MD5 75b037cf8cb158a0461a0d26c3dc148a
SHA1 049d29bf7cc4da0741259c21dcec92966b3ade2b
SHA512 af2fb4c7fb6571d1857c8e8acc1b70669d7d6903a9ebe4b83b970ad46c7ec09226e2680a1ef8a21759b2b52b60c978a4d58a00a71446888c6fcacdbbde379a23
SSDEEP 96:KRoZs4q26gWeDzgggK41gCgcwgziItHCHuC0UECWMZxgyCK4ngoCcSaBgtQAKNKR:CoZs4q26neDsgU1gC/wgziItHCHuC0Uz
TLSH
T154918291307F02443C7E6A4D95748C5AB28170F2316DB5AB77B801A64FA7E124EFECD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9abdc15e-f6a7-4f81-ae6e-f6f14ca633c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9abdc15e-f6a7-4f81-ae6e-f6f14ca633c5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4585e2f32e677c48eaadb1760a66e493c0bd6024ceb32ec0fac1755bee9b70ce
MD5 324b473d6c198893032949b8d8150516
SHA1 f5fc1bad9f483850310d36a76c1c8dddcc9e40dc
SHA512 45b89dc5f7ec6f5bb8a00f2f4328d5d4f1f1ab218a3421313f9658738826329e90a6fb41ccecba5db5cae505fd1d32efad4956c3b344aaa0a7c8f748d23ad0c5
SSDEEP 768:/rv+4UNbd633pDZIO0nBJXNzc4ReyIsP3hy6Dqe:/bsbo34BJXtc44bsfTh
TLSH
T1A813CF32E8689A73ACFAA286F40739037EF4155782C81ED8D6DD6F5C498B1ED130F912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9a70ed3ce9f53e6e7b32eac46cb4352805882478585c25f377f042eb59766fc6
MD5 dd7d65ede50202d2028de492c3929b81
SHA1 d45d9df7fae33add2cee10e41b54fbeae243f9fd
SHA512 9dd3f980d9de47e3f56120d608f6e584b0a7ed52d22315336e1c4d9084bcfd5413596b332223f2be824d8026bcfacf88bea0c1792580bd745ce589e254c8453c
SSDEEP 384:NZcIp38NL3BeMrEJGGJDZNfNoXOVSUUWaI/AJoETRzcoXfK86sfxEZxxsIj4lB3H:Vp3PpDZIO0nBJXNzc4ReyIsP3hy6Dqk
TLSH
T1E4F2BF31E8648977ACFEA286F5463613BDF55227C2D82ED896EDAF1C09871ED034F412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 15b99cbdac574e0100dc993708ff4ac3f3ac8496e36cdbb4528b7a20b25433f1
MD5 282cf333e18feb8df94af86717ec5836
SHA1 357d2ff7e069ad73b4bcb89d6f2e48e29b8be839
SHA512 26144c880507e3898536da89a4dab98f772daa2f42b642c51fb8681862d45b61d067c37e25aa10d82260215d3a2e97ef054241d9e779e7fd37e956b00a41ecf2
SSDEEP 768:5FQL3mwgApDZIO0nBJYNzc4ReyIsP3hy6Dqk:4L3CBJYtc44bsfT7
TLSH
T18403BF3298A4C97BECFE9B86F9063603ADF14167C1D86AD8E6DDAE1C15471ED034F812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 70bd437bf2df4d1cd286741ac7c5cd9ec6b8914e29f6d897a164702b2056ad02
MD5 31b1f587dd9b6c17ef27bde673d89253
SHA1 bef7c3d828350fafd31b93e4220a30862a49b4e6
SHA512 c5c7c326d7d251abebb0a7bc024ce405febe824be649f9c406aee5e5f9954d926da38a89156c4c40f0f753e34b4da2ea2b516945133bd820e6aa1da002c486d8
SSDEEP 384:qZcIp38NLtBeMrEJGGJDZNfNoXOVSUUWaI/AJoETRzcoXfK86sfxEZxxsIj4lB3H:Ip3npDZIO0nBJXNzc4ReyIsP3hy6Dqk
TLSH
T138F2BF31E8648977ACFEA286F5463603BDF55127C2DC2ED896EDAF1C09875AD034F412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0086af5ad4f7a59328a93e911a7ae8ebe591bca7e43d0030dd3c8bfd368652ae
MD5 b1f8b91ff00581e897f6c4472a9c37ce
SHA1 b1c9b11b0dc7ea9bf06ae722b49f3ff3a3f31567
SHA512 9d6e91902cad05233b6d8714fcd8981c76313cc0005165dbb8cf476926a37f9f88003b1d8bc45592306c1eabda47a5ef7b2ea6ccb19bb5b603ff2113d718108a
SSDEEP 768:6rv+4UNbds35fDZIO0bNzc4ReyIsXAeVH1S5D:6bsbS3Ctc44bsQEH1Y
TLSH
T16803CF32A8788937ACF69686B50775137EF8512B82C81BD0C5DE5F4C4A4B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df0a1234-83a1-4ec9-bca3-948b49287154.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df0a1234-83a1-4ec9-bca3-948b49287154.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download