272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
canvas-bean-bag-toss-game-party-supplies.html
Size 703B
Sample260805-wzerysdp21
SHA256 272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df
MD5 1df59c9d8ac185ac48974b4af5925181
SHA1 1944a18af1a584a6e917f9f60880f574200cdb84
SHA512 bc57ed159eeda7e6d7e0b4ee471cfa69a078b75316899bdf193de6b0ef10b4dee46cea86a9d535c899dcdc99ba8253f342c880eb9ab3473face7d460d5298a57
TLSH
T12C01F4DE8F16D3037533D538E7AC7654A33B219F9244D04AC1290D9F52782A3A1979DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2624	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304277022680986"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{33E72638-E676-4146-8BA1-C3AB9A5AA94C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3432	msedge.exe
3432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3456 wrote to memory of 3356	3456	msedge.exe	89
PID 3456 wrote to memory of 2624	3456	msedge.exe	90
PID 3456 wrote to memory of 300	3456	msedge.exe	91
PID 3456 wrote to memory of 300	3456	msedge.exe	91
PID 3456 wrote to memory of 5816	3456	msedge.exe	92
PID 3456 wrote to memory of 5816	3456	msedge.exe	92
PID 3456 wrote to memory of 5816	3456	msedge.exe	92
PID 3456 wrote to memory of 4268	3456	msedge.exe	93
PID 3456 wrote to memory of 4268	3456	msedge.exe	93
PID 3456 wrote to memory of 4268	3456	msedge.exe	93
PID 3456 wrote to memory of 4900	3456	msedge.exe	94
PID 3456 wrote to memory of 4900	3456	msedge.exe	94
PID 3456 wrote to memory of 4900	3456	msedge.exe	94
PID 3456 wrote to memory of 5012	3456	msedge.exe	96
PID 3456 wrote to memory of 5012	3456	msedge.exe	96
PID 3456 wrote to memory of 5012	3456	msedge.exe	96
PID 3456 wrote to memory of 4880	3456	msedge.exe	97
PID 3456 wrote to memory of 4880	3456	msedge.exe	97
PID 3456 wrote to memory of 4880	3456	msedge.exe	97
PID 3456 wrote to memory of 2876	3456	msedge.exe	99
PID 3456 wrote to memory of 2876	3456	msedge.exe	99
PID 3456 wrote to memory of 2520	3456	msedge.exe	100
PID 3456 wrote to memory of 2520	3456	msedge.exe	100
PID 3456 wrote to memory of 4092	3456	msedge.exe	102
PID 3456 wrote to memory of 704	3456	msedge.exe	107
PID 3456 wrote to memory of 3084	3456	msedge.exe	108
PID 3456 wrote to memory of 2428	3456	msedge.exe	109
PID 3456 wrote to memory of 2132	3456	msedge.exe	110
PID 3456 wrote to memory of 2132	3456	msedge.exe	110
PID 3456 wrote to memory of 3432	3456	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\canvas-bean-bag-toss-game-party-supplies.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7fff02f9c188,0x7fff02f9c194,0x7fff02f9c1a0
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,15902960010503274046,2923098852663761282,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,16052914092137623623,17614661364831363926,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:13
  2⤵
  PID:300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16409760831052452748,11047441982407368443,262144 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:2
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,15404308359946496483,8879082054362470991,2097152 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,4492906803035132256,1093609063225461736,2097152 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,18176908132092492579,5778084516958923451,2097152 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,7025641876210911556,17530340091290348668,2097152 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,3804365800319136341,5952713902167321114,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,14458730601899686187,2461103390108508035,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,5140665425574970820,16689778695849904737,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,5140665425574970820,16689778695849904737,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,135133050968822081,11888315496588187117,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:14
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,2034458854174451251,508618058684879750,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:14
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,5454983227615257721,11101110247608386468,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8814024195338464466,2295822922764442545,524288 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2104,i,11925473163531878794,16743641085938975057,262144 --field-trial-handle=2896,i,13054538951633230875,3752198996552590535,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2816

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ca42cf17e9350c2606d8e3d1d4202850fdea7bcb74e81962648bd665023b468f
MD5 56a5eeba2827d01fc20c1c9959107232
SHA1 5225b63321f20415835d8d4796cabf73ada153e3
SHA512 f4c9531d4629cf9903f2f551b3aaa679fa5859e518c2ec42ba41ff5b791e0559b4b455635475893c61c572772e7f30bfdf83f43cf78d5bc85b3dc96d09b3fdcc
TLSH
T1FD612F540BED39EBC76863B851ECC8DD39B27C5909572E1316B76674848F30860CC938
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b349.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b349.TMP
Size 3KB
SHA256 adf29e6b8c14ea9c67dfca031ef3a118337bac109453fd824b5b84db406b32fc
MD5 6bb5d0121f6aa9789c8af8e5adc3d3f3
SHA1 57db35eb0822b08cccc162fa5f58492c1a1577e5
SHA512 a71dfbaa750dcf6e16ca1821eebac1c6d4028c1f85568c7490d408f8785453094cb23217122f857e853f92e36e27fb06c0ebf72556b0ecac8f634d5d7f304f59
TLSH
T1006130540BEE39EBC76863B851ECCCDD39B6BC5909572E1316B76638888F30860CC938
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e58d50e-a791-4f22-b78f-8bac2b42edb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e58d50e-a791-4f22-b78f-8bac2b42edb5.tmp
Size 949B
SHA256 c89d2e8a02264f2b59913e70247c9e39b0ce87e51862f2a916a3a923ede295f7
MD5 d10979984ea3efc3465a961017b4ba77
SHA1 cee064f61e2adddf7e33ab0be7259420bac8622e
SHA512 a5d0e031124e50e32df68c9d4ad9722525fa7390a2af9ce5f0a6bfec35a2ad3bb6a986c7bf5a3f53be64db0bca30c7ba055d19f7210b94a31444f3c6268ded49
TLSH
T123119BF3C3D585AE894556F05A28EE2BCE2D0606421C3C5585E4EF6B83E3075D10155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8e52206087a6116a00dfa31605a7e2651f1c72d1498e66694b4a52771e0fbbe9
MD5 e693174030e662a46387673b8d147b0a
SHA1 a8268956e5cc8fbe694fe900e3326fe597fb6e41
SHA512 273ed439a363b0c7eac76a56954b601d7d375a4661ea44cb389389347419ddf4316991e4b6ffbf85059edb5e652e9a5471c39a6ec17e8a8ee13de18a63ea5604
SSDEEP 192:sxRMR3bX/f7sjjsmZMzoA8p4Y/g6+WNIYxzJPGtIgIJ:sxRMNX/f7sjjHt/5IuQs
TLSH
T1C832D8166928A97B8CCBD21DBB15BF63E7F91132A0D01E54B6FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2bbc443a5134484abf020ac8d661ac8b5ce514203adb5231e58adb43f02020b1
MD5 97b0e3662af5ae0cf0ca18956a608c0f
SHA1 d8be8e70cb459f0dce4f883a8002f2bd47d71a1a
SHA512 84a6b23a55ceaa425d56ed8686b30cb3ff0975457ef8df3b970bb881b4e84ca1c71e23e76a5ad626e89c318f62a2a6de66c77139c5ead062ab6bd56c3f2e049b
SSDEEP 192:sxRnR3bX/f7s3jsmZMzoA8p4Y/g6+WNIYxzJPGtIgDwJ:sxRnNX/f7s3jHt/5IuQo
TLSH
T13B32E9066928A97B8CCBD21DBB55BF63E7F91032A0D01E54A7FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2bbadba03128a4c51a4b6ec940243f542bc7b088a7aadcd49e425a08b823d0ef
MD5 08c0f92828dd9f9c0f308545c1539fc9
SHA1 2115bd80fc4487fc5b38c1f428e22fb7686e274c
SHA512 c15173b80c17509c1264ee48d2769a2a8f189a362d6e59084cda507058badda1bb285fc8adb5c1322a9c44f34179ec7a9e20165e120985c6c89d134c5b96fa73
SSDEEP 192:sxRnR3bX/f7s3EsmZMzoA8p4Y/g6+WNIYxmJPGtIgDSJ:sxRnNX/f7s3EHt/5IVQi
TLSH
T13A42D8166928A97B8CCBD21DBB567F63E3F91132A0D01E54A7FC961C01E76DE220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 07e8d0e42cbfd3667a35f2ab59831bcf1f9fc4dd1a4b776c570879acf89114c7
MD5 a1e895e99d60ebd7a4b2447c8ec70182
SHA1 66e8c2d3bb79d6cbeb2c6c5b11657ce36d27a6d7
SHA512 136c073ae3b22f7e1a9b55269f07e42eb1956fc6181b709286ea68a1f8f64f6dac83258b0c542a22a2089f78e9acee20da790f43cbadb7fbf597a500e1811d2e
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3RkFroruC:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0Vm
TLSH
T1C8B2DB3B604CCB7E9F800AADAC596FD77D9802C797988D4447FE990C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d6b699f24d0b7969021252909c6cb5639c8076522d5efdb3db2c6e310ae0faab
MD5 572f648d372de01678db0da806378ff5
SHA1 04b432015e4f409a37c23aed4d964326000dc3b6
SHA512 6844c5bc3c93d54102422290c3e7b2fbe44f8f8d1281af8c13b2d2adc1cc5d9e42ca1ab3e55177f10107598fe87080b74dbfea2829f7b539a92cb97d6b009be7
SSDEEP 768:xRT3auOkKL2njF669yrqUjWiIwwxMtUojKgqmUThOGS:xRT3aU/jF66INWZTMefgRUT8GS
TLSH
T13EF2C070A8A45AB7C9F6E781B3523787AFF04163D3D40FD895DCAA0E464B4DD630782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 57b549213dc9d0ba92bd27c3c45abef4834330216493209a16b03a3537009ba4
MD5 c08a8b619061d50692690d15fa3cebca
SHA1 b3c95cb2218d192df2f272b0de36a4cd0ada4d49
SHA512 9da4f030911aa7feb7f573aa3a1474af21754b9d81bc534cb2f098fa08215cdd1c49478f05b835e6e7c68244e0246aca9253c530b4c17e84c007335f4c46ea6c
SSDEEP 768:iRT31dOkKL2njF669yrqUjWiIwwxMtUojKgqmUThOGS:iRT31H/jF66INWZTMefgRUT8GS
TLSH
T17BF2C070A8645AB7C9F6EB81B2523787AFF04163D3D40FD895DCAA0E464B4DD630782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1c964547b88a789ccb1b98bcead3dcbdf755fda97caed63d8ba90fe126be22e5
MD5 59c948af76cc5e2217356ab8bae9ea5d
SHA1 2b90c6ac1b4b965cba50a4b68589805100517193
SHA512 76d60b3b3fa77e3d56f98e7069a44c3522b5ab918b42862e0c4afc7ab7b9e14717cc77db641c0dbffb029f86c3b08d3b4529fa933da5eda7b1b3f4a69f77b622
SSDEEP 768:p113auOkKL2SnF669yrqUjWiIwwxMtUojKgqmUThOGS:p113aU6nF66INWZTMefgRUT8GS
TLSH
T19AF2C070B8A45AB7C9F6EB81B3523787AFF04163D2D40FD895DCAA0D464B4DD630782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c46613c69d107246aa03d6f91da0662eeead558c46d05564f4049d533486c961
MD5 e0e37abab77c042153fb2579aea5e8de
SHA1 15305c02e728cf7551a196c9a2be5db46887e33c
SHA512 66b73228196242e60aba79a4cde9ff720dfe5666965dc61feba654bc9d09c838917cf515bc796df7d138cc5c9479da411ab5d4dbdabd7906bf9978ff3cb8f94d
SSDEEP 768:arv+4UNbdl39PkKL2wjF669yrqUjWiIwwxMRxpUiler:absbX3qIjF66INWZTM5UsQ
TLSH
T19503CF34AC589AB7CDF2D68672533783BFB4119392C50B98CADC670D469B0DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

715d208d-392d-4142-9daa-3988477a12e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\715d208d-392d-4142-9daa-3988477a12e5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download