a1289f5abf04b2f71952e723373754b8e7974c65200a5b24eb45dd455cdc15a4

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 32KB
Sample260810-pmjf2stvhw
SHA256 a1289f5abf04b2f71952e723373754b8e7974c65200a5b24eb45dd455cdc15a4
MD5 8d2b8dab2a14a8316c53a014b01c93fd
SHA1 70570747773a40a517b3cbea385a5ed618aa7591
SHA512 df1e3b19005d7061761814224b1caf5684ddd1449c7a474113284ef7d7090b23ca118d491ac524ea17d4699fbf00d6c9b819e0c5195dcf2c9e5cbc251844612d
SSDEEP 768:OH59XZisdTQcEVqrru+1hiH2doxc7YNW/4GQpoV:OXEKZ
TLSH
T11CE2543776C0227B007B8272D660AFBADD62E78BC21BC588B1EC46570FA6F635943255
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1724	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308385215729700"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{84703511-A74C-45E6-9D34-22A570BA6A8F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4076 wrote to memory of 5332	4076	msedge.exe	89
PID 4076 wrote to memory of 1724	4076	msedge.exe	91
PID 4076 wrote to memory of 4784	4076	msedge.exe	90
PID 4076 wrote to memory of 4784	4076	msedge.exe	90
PID 4076 wrote to memory of 4784	4076	msedge.exe	90
PID 4076 wrote to memory of 4572	4076	msedge.exe	92
PID 4076 wrote to memory of 4572	4076	msedge.exe	92
PID 4076 wrote to memory of 1152	4076	msedge.exe	94
PID 4076 wrote to memory of 3488	4076	msedge.exe	95
PID 4076 wrote to memory of 1152	4076	msedge.exe	94
PID 4076 wrote to memory of 1152	4076	msedge.exe	94
PID 4076 wrote to memory of 3488	4076	msedge.exe	95
PID 4076 wrote to memory of 3488	4076	msedge.exe	95
PID 4076 wrote to memory of 1116	4076	msedge.exe	97
PID 4076 wrote to memory of 4920	4076	msedge.exe	96
PID 4076 wrote to memory of 1116	4076	msedge.exe	97
PID 4076 wrote to memory of 1116	4076	msedge.exe	97
PID 4076 wrote to memory of 4920	4076	msedge.exe	96
PID 4076 wrote to memory of 4920	4076	msedge.exe	96
PID 4076 wrote to memory of 4564	4076	msedge.exe	99
PID 4076 wrote to memory of 4396	4076	msedge.exe	100
PID 4076 wrote to memory of 4564	4076	msedge.exe	99
PID 4076 wrote to memory of 4396	4076	msedge.exe	100
PID 4076 wrote to memory of 1224	4076	msedge.exe	102
PID 4076 wrote to memory of 1548	4076	msedge.exe	106
PID 4076 wrote to memory of 2000	4076	msedge.exe	107
PID 4076 wrote to memory of 820	4076	msedge.exe	108
PID 4076 wrote to memory of 3764	4076	msedge.exe	109
PID 4076 wrote to memory of 3764	4076	msedge.exe	109
PID 4076 wrote to memory of 5972	4076	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ff9358ec188,0x7ff9358ec194,0x7ff9358ec1a0
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,4155362500574794827,2658000209158671932,262144 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:2
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,4090413195125308819,17520822422623717622,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,5498821180157204475,10095422588820616900,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,9460249807274094431,15438714816079268431,2097152 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,16648383880847923938,5073191025141367840,2097152 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,17727477013294955152,16501383639728780033,2097152 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,6321186717630255491,6357945996384724646,2097152 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,10617773508063197315,12041754603876676352,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,8863612645269582836,5337787169890113001,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,4416067171787604663,1066983902849447051,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,4416067171787604663,1066983902849447051,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,910354467925656985,13413686800305634996,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,8184211223433847666,8048954144064754591,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,13817828063492189892,15039648883283672510,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,2560686401397981633,6251577463980054870,524288 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6056,i,3162507090557072343,10690062810538226858,262144 --field-trial-handle=2964,i,672012113010304383,3131139002245674324,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d521027fc806f372d54993299864f670e8cabdf6b5927ffecf77a379f8b7c95
MD5 8e0bd46edecdc1d8ee0a699b720cc238
SHA1 20616d862906d6968fb5816781dcc647e0a338d1
SHA512 7333efd89a2cccffe03cd76e72333e8b3a0e4e3eea58c88150935508ba50f6ba1952225e5f6f1452c425b7a28bc3e967b70fc30fec2f1ca38a754ef72b37957e
TLSH
T1B1613C64236B0BD2D73B09B150D3669F3FB98E46858FAF828F507778570A3D0291107E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 23cb41908945b5ce42a5350853944144232f3aba32968e6632a3dd679ceba838
MD5 b174a8ed97e50c503967bc2619af6956
SHA1 c1dd6aa8e824c99a4d1e401fb85c68d185713197
SHA512 14ab1ff9bb088a816114b984bb49deba3776fed46bcc4a5b8469a247b351bbc7b0661bb565a320e59b966c904b5995d9bc209e3b19265e2e861eafc75faca181
SSDEEP 96:DQOnL6V8qVaVaiZZ2zYZpKDPPKMxLQow2YM:DrnWV8qVaVaiZZ2UZpKDPPDxsoT7
TLSH
T17E919EFA86E8477E851552F09B25AE2BCD5D061A822C3C678DF4BE1F63E20B1D10179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 74bd76d9eba27b8b2f868bd2a47637975ad8f80f92735bb9fba31f70324e17e1
MD5 c191f76b3663dfad4f9e6daa95703db3
SHA1 7a8812779faa0590f1b6bb7876937fe008a02902
SHA512 505c616dd235db8d075d0f9d75aa0ef170645e999e641a41bfd471cd3ac9e3cf5e8d84193f5cd0935dc2a9ad84b199e8260cab79385bf1faef9e309c6bb28525
SSDEEP 192:sxRRRrbN/ffsThSYCbkzoA8p4b/g6+WNIYEgozYGq/IgIJ:sxRRpN/ffsThSPF2/5INCs
TLSH
T13A32C60A6928A97B8CCBD31DBA55BF53D6F96032A0941F48B6FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e17f18c7e1f8b7d20ff79658f43bbdf22dbaf6d66174496492c01b95cb888635
MD5 cc28c04c438361f0a40de2db261a907a
SHA1 08baae6336d5dd9b9c3362234471561c56a956a3
SHA512 b58f204b70b8abf6ef662ca6d726f8f2e9c0ae2ac74d4597e0b190e220cc01f5481af3aa442e34a5dbcde1e2e68908fc6f20ea8546ff3577a2c70d1a2dd9b0fc
SSDEEP 192:sxRqRrbN/ffsoDhYYCbkzoA8p4b/g6+WNIYE32zYGq/IgDoJ:sxRqpN/ffs4hYPF2/5IYCY
TLSH
T10E42C71A6928AD7B9CCBD31DBB55BF53E6F9503260901F48B6FC960C04EB6DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 47f30d21daf4a733adec88a8b7eaaea422539bcaa256601aec60a71b4b987862
MD5 5e349e4b02befb4f399a2288433ae844
SHA1 79c1593a0605cd81d36c32b6b89b590454e43f08
SHA512 88096592b4637c3508396099071e72f9290f91f827a50a326b08ffffbe25ca832ba95cab2e4ccea14d01f642462e2c4945be5bf7c310c6327d45586a47c1487f
SSDEEP 192:sxRqRrbN/ffsoDhSYCbkzoA8p4b/g6+WNIYEgozYGq/IgDyJ:sxRqpN/ffs4hSPF2/5INCa
TLSH
T19342C60A6928A97B8CCBD31DBB55BF93D6FD5032A0901F58B6FC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2b2d145d4f0dbb0ecab4b43dbefdecfa95449a2a7a0f403a44661cc5dd28ba3e
MD5 c6f20d63f345399dffc445e5aad9a9cf
SHA1 502bc981d97598dde087c498f4cbf87414dc5c1b
SHA512 36bc1beef14d351261035113196d2b1a932074309f321607c37de9a257160788bfb1c8b114d56bb8859b68d7d2a895c56985c6e2fe564244bfe59ee2551e0c69
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVF:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoU
TLSH
T12FB2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 40a5198262cbdd880ca180a23d8bfa564019138f48e85c3358a724bd66548f0f
MD5 f18d1923fdbcccf693b5fb591e7eb43c
SHA1 05683f76dafb9f85974df18fbb5c2d2f5ec1e175
SHA512 8f3bf7620b714c43fafd59e5bfbd694b56757e2a0f60dea61503443530a6d61cbdce2bc69752d558f645e341a969912ffd5dee50eba2c318ced757c2460545b5
SSDEEP 96:KRpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHyX+SkE0SWcJhgCSK4Xg4ScCqRwLJoN5Pf:Cpm3zBj3CH0j7JKg1A5xMv3wHyX+SkE+
TLSH
T11691519179BB42403D7F695D8278852BC692B0B3310CB96B3BA801B24F67E124DFF4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0c7bafc39a10084fb61631f6ef8342b7fcd4504c198e8d5434fbadf105d09073
MD5 6cfa73f042b39f6da99d9bafb10b9660
SHA1 459775544cd79e1c0e4bfbe6a77069ab4033f75e
SHA512 3fcfe67f79c640c3e0aba516af153255d5a36fe6f71d5ab364414371d84e84f581427b03a184e1a2e7d9d80db8d571b7415e5f686d1b08df692fb1823783842f
SSDEEP 768:pWrv+4UNbde3hVzopDTd+Zc0UXTtdeX6+qTko0u229a4vsTpTp:pWbsbA3LLdUmvVTVKa4sF
TLSH
T1B803BE32F825AD778DB6D784B11735436FB812A3CAC41B94D9DD7A5D024B1AC270BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b7398accdc126ccf40018d458a2ec06159ba7c2046bedf3c64bb9004e01b59bd
MD5 aeb1e149d6b1362e4dca25818be55cd8
SHA1 f327ad97dc6375b4aad3e82b5a207bb0a91870dd
SHA512 fe709d9c28abf6bbbc524e72c62b50af2cccbd23450835a5de3b0098471816e141afeb9ca529fb66e0806fcb0409e88a161b60f2de4c9448e74dd63e10b741fa
SSDEEP 768:JUFQi3jwgAVzvpDTd+Zc0UXTtLeX6+qTko0u229a4vsTphy6DqV:J3i3GKdUsvVTVKa4sT+
TLSH
T13003BF32E8A18977CDFADB84F11B35439EF51173CAD86B94A6DDB92C114B1AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d64e00a62ca3d2653ae0b684a0e40aa39da544eae4e85dd359a4f965f1a07c51
MD5 4757532aaef4c2d627637a43dd8cb14a
SHA1 aec8908fdbdcd69aed5ba76171366c0100938694
SHA512 ca5921c44b621637fa858c832ed729344f52cffd1405ab04e98c2d07854563fe7aff3cb845ffa8799798d91bb2d1b935430bfe9681fc83821a1bcca2113cd2d6
SSDEEP 768:pqN3hVzvpDTd+Zc0UXTtdeX6+qTko0u229a4vsTphy6DqV:pqN3LKdUmvVTVKa4sT+
TLSH
T1F3F2CF31E8715D738DEAD784B10735479EB91173DBD82F98A9EDBA2D018B168130B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 473b2a12d28b75b469365b892711d2df6ea9d9769a2ffed422d3a2b08b4f3a43
MD5 facec03d1f008d316357d6612f79ee61
SHA1 748adffcf1a870eeb42b36c8a33157292c81ca78
SHA512 ebf10fef80817a0e7945f882b26ed2bad9d40ad995d81689db8894c018f9ff21609fbd9b7b3a8b7dfefc53c80de74a0eaa084cd2b5d44973518819093baaf8c6
SSDEEP 768:prv+4UNbdG3hNtDTd+Zc0U8eX6+qTko0u229a4vsDpeVH1SdW:pbsbU3+dULvVTVKa4gEH1h
TLSH
T1F003CF32E8A989778DE79784724B75472EB91173C6C80B94D8ED6B4D028B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 f2cdc4d4b3593db458899a2f5e0ab9f0eaa92c6c5be9446266970de9591eb62f
MD5 3774adf41e6e07c80b022e9ed04fdd84
SHA1 ae6338a17011ff12a39b00c39d2205993419d2bd
SHA512 15022cb83494f9ef4247b1a9138894f80aef9b430b116ac00b36a30d4deb4bd60cbb4cad90b2c6764104e369548932a03817ea53e8f3998a87b13fcf3f66a8d6
SSDEEP 768:2rv+4UNbdG3JEDDTd+Zc0UXTtUeX6+qTko0u229a4vsSpeVH1SdW:2bsbU3jdUJvVTVKa4TEH1h
TLSH
T1E303CE32E87599738DE79785B14B75472FB81263C6C80B94D8EE7A4D068B4AC230FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fcf34bec7e74b9287f9e80bfb7966a19ca132677a0f9185b05886c9f05503d25
MD5 52e5e9cef955e4a95b6be9d7d06bcbc4
SHA1 8ef8645ee197d9b8efbd14604d0ceacb50e0a750
SHA512 818187c2974764a729f4a90f3d8f3f35d4f82995cb87c5f8b794fea163795169119db834ed7e602c7fc1a038928bbfd6211e4ae656ebc8f7647bdd99040690b1
SSDEEP 768:RqN3kVzvpDTd+Zc0UXTtdeX6+qTko0u229a4vsTphy6DqV:RqN3sKdUmvVTVKa4sT+
TLSH
T149F2CF31E8715D738CEAD784B10735439EB91173DBD82F98A9EDBA2D018B66C130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download