75daab6a4873fa0049ac2b5dbf750b5bd6d6c74c575371cb4d60ef036623ed1c

Analysis

max time kernel
149s
max time network
168s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bigsale/indexmain.html
Size 17KB
Sample260807-phacksfg47
SHA256 75daab6a4873fa0049ac2b5dbf750b5bd6d6c74c575371cb4d60ef036623ed1c
MD5 596cf053a069c7ce2d519b025b73465d
SHA1 9ac21922774a2ae11a962400b4f18145539b18b5
SHA512 08566eba397cb2930918249d1f44b5784dce15eec8a6377c1b1c3d98aed28b13fd88fc64ab6bfbb3cb9f1f28566a97e10e4562495d12cc7f6479093ab578feff
SSDEEP 192:60fhtH5rbrcmg64mpDiLF0LuAJ07Y5oMn4W2tsYY5H0igelMpuz+cqXL3ONnLs16:HHtc0DuFMDpKt7wAOdyze34DU1Ea
TLSH
T1B772D72252B31422612391D47B97CB8B73A9C403E106863CBBED9188CFCED99D67378D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4740	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305788368402966"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{82DE3E69-8FEA-4F30-9F81-34F470D83BBF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5744 wrote to memory of 4588	5744	msedge.exe	88
PID 5744 wrote to memory of 2728	5744	msedge.exe	90
PID 5744 wrote to memory of 4740	5744	msedge.exe	89
PID 5744 wrote to memory of 2728	5744	msedge.exe	90
PID 5744 wrote to memory of 2728	5744	msedge.exe	90
PID 5744 wrote to memory of 4324	5744	msedge.exe	91
PID 5744 wrote to memory of 4324	5744	msedge.exe	91
PID 5744 wrote to memory of 4824	5744	msedge.exe	93
PID 5744 wrote to memory of 4824	5744	msedge.exe	93
PID 5744 wrote to memory of 4824	5744	msedge.exe	93
PID 5744 wrote to memory of 3328	5744	msedge.exe	94
PID 5744 wrote to memory of 3328	5744	msedge.exe	94
PID 5744 wrote to memory of 3328	5744	msedge.exe	94
PID 5744 wrote to memory of 2616	5744	msedge.exe	95
PID 5744 wrote to memory of 2876	5744	msedge.exe	96
PID 5744 wrote to memory of 2616	5744	msedge.exe	95
PID 5744 wrote to memory of 2616	5744	msedge.exe	95
PID 5744 wrote to memory of 2876	5744	msedge.exe	96
PID 5744 wrote to memory of 2876	5744	msedge.exe	96
PID 5744 wrote to memory of 2604	5744	msedge.exe	98
PID 5744 wrote to memory of 2604	5744	msedge.exe	98
PID 5744 wrote to memory of 2108	5744	msedge.exe	99
PID 5744 wrote to memory of 2108	5744	msedge.exe	99
PID 5744 wrote to memory of 4276	5744	msedge.exe	101
PID 5744 wrote to memory of 5364	5744	msedge.exe	105
PID 5744 wrote to memory of 2800	5744	msedge.exe	106
PID 5744 wrote to memory of 3864	5744	msedge.exe	107
PID 5744 wrote to memory of 1140	5744	msedge.exe	108
PID 5744 wrote to memory of 1140	5744	msedge.exe	108
PID 5744 wrote to memory of 4996	5744	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\bigsale\indexmain.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ff902fdc188,0x7ff902fdc194,0x7ff902fdc1a0
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,16789106657218512194,11416881064110405264,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,17965697808450191090,5476527082612059898,262144 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,1878990617616996512,13805845106518632685,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:13
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,7417788521291536672,16561200787499663673,2097152 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,11278087590501110765,967279578673598974,2097152 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,8334460125416499694,17647840601730218993,2097152 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,949334490974575891,6173678842307510557,2097152 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:9
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,12361366566550408957,1784335220833162077,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:14
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,17172732215041865576,5001164666771489100,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,5880043893815138044,17869098956922865398,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,5880043893815138044,17869098956922865398,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,7567038183256578345,3589673650080209768,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,13593404130127954688,8144375580739857558,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,2738329898078937929,14232878585049197144,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,1115305121241732631,5697128062232665473,524288 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5384,i,2474729859243052273,4260656753219506781,262144 --field-trial-handle=2300,i,538470019620532945,10693576967231523748,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4996

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5f358a5a31af1473070b3545a4bd150b3bc50e23e3f27b24f4c31e12f0853d47
MD5 d61560cd055fc6d0d7ba17c874c9bc28
SHA1 aa83f4aa262c475b6f2eaea764272895021176d4
SHA512 8b74d7f739fec9b643054300bfa419512fef3b0ce9c36759249057ba9e9bc90c6312501f7ce7410c57c74fa8e95b73bb3e2ade5d4d39aabc6421486055f3f01f
TLSH
T10651954F2B2589D3E771557260E6076932FAA669DBC3DE10C8001E72EA06F71C1EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a034d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a034d.TMP
Size 2KB
SHA256 715dbebe9ce906fdb390454a78c1edc64d1796993a5fb01f94c137592b06386c
MD5 050fdeaaf576bfd93362a2680eebc628
SHA1 9f151a14a33a31e8ba0ab0141c8a63b2239b22ae
SHA512 0c3f56c52dece6490c059156ae95e569b95eb8efd7e8a38a614df8150dd1c14d01c6c0886c29843e63ce5fb8ae5ca6e5c8d1aec804d0de68dcc280b8655ae349
TLSH
T1C751930F2B2589D3E771957260E6076932FAA669DBC39E10C8001E72EA06F3181EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1203599899d83f5330f9c9434d512bee90191c63e70ab34298b493ac919ab4be
MD5 9474b9647564f493164984df5b522326
SHA1 4012bd904ceb9188391e5725e51fd5314b9034de
SHA512 eaf731408691a2d5b582262ef98ae1b12c3aa9bbdb52742b3c97ad5f478959958ec4e652e11cd12c702889a1959af06aa896f9c2e193b6e2e49157cb1b2564b7
TLSH
T18A41BDF7C7F4867E8A0156F0AB186E1BCE1D0915432C3C6AC9E4AE1BA7F2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8b58d1fb0982211393c426f4bd5e3bb5e2d4e32ec6e6ec0ad34b3514793ef976
MD5 734057dd89f13d80d9de571aa74d0685
SHA1 e7c1429620ed118bd748be0563b61801ac5630fe
SHA512 8a63d50875f71eeee001156417c46ef4f048c6f5681ca89d93bc8b1021e5a55fc5fbbe238da283168eaf158a620695f0bfe10d69e4ea48e35a71fd9aedfa6b99
SSDEEP 192:sxRuRObz/fmsqCZwG7zoA8p4t/g6+WNIYoZCYOGyIgDxJ:sxRuiz/fmshZpaw/5Iszv
TLSH
T1AA32B7566928A93B8CC7E21DBB65BF93E2F9503260942E48B7FC961C00E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2e05a4dbc148f02fb86cae431d09c38b4713594e5354f7caa478a3635b4c942e
MD5 ad58007c64b67083916785960dff0689
SHA1 65a694732011186291103c3108e1d8c4ad10c6e4
SHA512 ab2d7eb74a23992f0a0e48749567c01da914f49e29491ca667b47046c22811b3a9b18b4eae8a238039a6677cfe58d423c79916739e5acd5e453f13b4de658320
SSDEEP 192:sxRRRObz/fmsNC9wG7zoA8p4t/g6+WNIYoXCYOGyIgIJ:sxRRiz/fmsU9paw/5Iyzs
TLSH
T1433296166A28A93B8CC7E21DBB65BF93D2F9503261D42E58B7FC961C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a3566f849a0843a9c85860eef15953a3108788efa36660d9d3c2653df3addf19
MD5 94b15e90f8cab57988c134fdd14eba0b
SHA1 435e3980ca4cef7e4fc9bac7bcc385114b568bf5
SHA512 37b3b9b1b6daf7483b1469835e133555f98cd6751b1f60f50438781773b7804680381b27f5323e4f9de7b14930acd8f8a6dc4bc50fb904907c01ba01d2c77cd8
SSDEEP 192:sxRuRObz/fmsqC9wG7zoA8p4t/g6+WNIYoXCYOGyIgDPJ:sxRuiz/fmsh9paw/5Iyz1
TLSH
T1D732A6166A28A93B8CC6E21DBB65BF93D2F9503261D42E58B7FC961C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 06cf8fbef167ca1448235efbd20c40316030d9b1b557d7f375e246722774456e
MD5 c2665e6513e1fe60f7f2b72739f98d00
SHA1 daf3ffcec7187625466ff4431fccc069200a6cd0
SHA512 cfe276bdbe6d619a95c709f4a381819742ad679223b7159b5a9151a15949e122c2af580133276924ff107a2c2157fa51b402eb7bee78adcefe34f83beed29047
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXyro98Z:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VT
TLSH
T1EDB2EC2B640DCBBE9F800A9DDC19AFDB6D9802C797588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 84d77227ef8dbfeb088a7f479ff1d16ab0088232830eff4948edb4331de8ac2b
MD5 f978a61211bf67a5cfcc90dba3732222
SHA1 742e60fa00dbeca9e6fceef0d8fc49a4b6922879
SHA512 ad0ec1b2b03b9202541cec80cf3dc91b5bc45c0e9f5b2711891ca62891f787b41d13090457e0c638849912f49d861db21c6126fa11e9515a3e7e08f8ce383253
TLSH
T11351F442B07A43C03D3E5B5C847498298693F692301DE9ABB79801518FABD234DFCCD9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2773d40c596e994be23afc077a81285af9a357113cc9e6d2d3d579a1da20e21a
MD5 8e08de7b151ad1814c0d56fc1e2f55d4
SHA1 71839356dbc0bc76a972e3c8f495bfe859e46b8c
SHA512 0d3aaa94a2e32d433ab53efca16e9e162809f98909a2c23013dbc5157e2a62b6ee507935deff493f9c457c64f4a3cac41fa501d67d1f9e99579abe7858bb223c
SSDEEP 768:yrv+4UNbdW3ta+/TBOW1r+lONXyer1IRCzni9le:ybsbY31oSIqnme
TLSH
T1C703BF32E5589E338DF2A3D5F10776837EB8505BC5840AA0DDDA2F8D059B5AE230F947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e7bdb4782a7b19710a38ffc9eab8b320b481fcbd54f3699fdb40a8818d59dfa1
MD5 6dcc309a163a9fa8f8d82e4acb2317a2
SHA1 fc849925f448b70c12fdd71ada00b1caf90ac022
SHA512 7c6026999053803bb70f4cd905af00516253cad3c6dfcd4db1391a22f265a89a5eb9541ec716445b418f86bd7d1eccb3fe4a18fc3226583b3e27bf3fa1b8eb72
SSDEEP 768:xl3cE+/TBOW1r+wONXyer1IRCzni9ltKWH:xl3enSIqnmIm
TLSH
T103F2BF71A994AE334DE1E3C6B6067383AEF99127C2C416D4ADDE6F1D059B51E230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8a23e677e3794b0c09540743403895c3e062cc2380200ba74d482d6df54a7b26
MD5 6037467f8e74de3dbd2300c6567c0837
SHA1 02f23e0c7882eac9a99ebb8d523e161be5036ff7
SHA512 d2d98afbb09a463c5dd06a2937b88c32ebd1e83386afa80a6d3a234e45b61c3776a29629e45907516bb0bc9144d63e36ffc5930fc97731ac476c6778d65fd777
SSDEEP 768:Wl3tE+/TBOW1r+wONXyer1IRCzni9ltKWH:Wl3vnSIqnmIm
TLSH
T178F2BF71A994AE374DE1E3C6B6067383AEF99127C2C416D4ADDE2F1D059B51E230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 404337adbf822f1284b31a9b9c98a878d249bca96067cdcc5b2c8993aad77f86
MD5 746800ef12a77c3366b543c93793a53a
SHA1 679dcbe96bc544c8054eb3352a4f381aa556b238
SHA512 b21fd4a6a55b65f66a9925912eee0b61b5944bd0652046873856847ff30c4f83c3091239a07ab57f6b48ab62a6584b9567ba62f3b52ebdf6b82c3ba1c252981a
SSDEEP 768:pW3cE+/TBOW1r+bONXyer1IRCzni9ltKWH:pW3egSIqnmIm
TLSH
T12CF2BF71A854AE374CE1E3C6B6467383AEF99127C1C816D4ADDE6F1D059B51E230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d3eb08012ee9faedee21f41badfe3bb4fdcac8c8fa376463c0679c86e2a4b6d7
MD5 37e89305cc1afe2dac6ecc0278ab2c7d
SHA1 52539a25b3ddbad2e4cf7b3f2ae1bb87608b9aeb
SHA512 66ae5ba2ee0dd88b04ebcd72cb0f9d5eafc386518f389ec4f8538c0e75974270972e778cd0bd6e5c17f41dd26b6b2cda6f17adb87c7ad05861422e3643cb8753
SSDEEP 768:hrv+4UNbdz3x7/TBOW1PONXyer1IRCzniB5eVH1SK7:hbsbV3x/SIqnqEH1l
TLSH
T14503CF32E4989E338CE2A3D6B147B6437FB8605BC6840790DDDE2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e1a1194-b150-4f9e-a6a8-183770b2eebb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3e1a1194-b150-4f9e-a6a8-183770b2eebb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download