23ed033bac6263ca69a202dd56ce75e0fe9e246fa414647db07884c57a012661

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 14:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 202KB
Sample260814-rlp9baac49
SHA256 23ed033bac6263ca69a202dd56ce75e0fe9e246fa414647db07884c57a012661
MD5 bc723ce49d04096de40ec10d6cc02e72
SHA1 461b3cb2e3655b0f49be5d212c6f6cb6f32f3127
SHA512 b8a1b020cc72d876dbd209d0a024abebc90a16be8f9e98d113ac8e72d99a48b3b3947deb35d5957aaa54a96ca9854e229d835e236d4ce6fb1f4c803a4a4af6d7
SSDEEP 3072:VsVMKrBOwZMp44wvSAIeTV9hCJ1yPYx4hlxbz5cAcAK:WZMp44wvSAIeTVC+a
TLSH
T17A14C662F3A444FE356F8B29814DB32CF928A540CB4626E6F0E5E37445CD9FB146670E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2256	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311906374002389"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{01124352-67BC-4185-B5E4-2686DE9953E6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1096	msedge.exe
1096	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5000 wrote to memory of 4744	5000	msedge.exe	89
PID 5000 wrote to memory of 2256	5000	msedge.exe	90
PID 5000 wrote to memory of 2064	5000	msedge.exe	91
PID 5000 wrote to memory of 3176	5000	msedge.exe	92
PID 5000 wrote to memory of 2064	5000	msedge.exe	91
PID 5000 wrote to memory of 2064	5000	msedge.exe	91
PID 5000 wrote to memory of 3176	5000	msedge.exe	92
PID 5000 wrote to memory of 868	5000	msedge.exe	94
PID 5000 wrote to memory of 5564	5000	msedge.exe	96
PID 5000 wrote to memory of 868	5000	msedge.exe	94
PID 5000 wrote to memory of 868	5000	msedge.exe	94
PID 5000 wrote to memory of 3676	5000	msedge.exe	95
PID 5000 wrote to memory of 5564	5000	msedge.exe	96
PID 5000 wrote to memory of 5564	5000	msedge.exe	96
PID 5000 wrote to memory of 3676	5000	msedge.exe	95
PID 5000 wrote to memory of 3676	5000	msedge.exe	95
PID 5000 wrote to memory of 4500	5000	msedge.exe	97
PID 5000 wrote to memory of 4500	5000	msedge.exe	97
PID 5000 wrote to memory of 4500	5000	msedge.exe	97
PID 5000 wrote to memory of 2988	5000	msedge.exe	99
PID 5000 wrote to memory of 2988	5000	msedge.exe	99
PID 5000 wrote to memory of 2504	5000	msedge.exe	100
PID 5000 wrote to memory of 2504	5000	msedge.exe	100
PID 5000 wrote to memory of 1648	5000	msedge.exe	102
PID 5000 wrote to memory of 3940	5000	msedge.exe	106
PID 5000 wrote to memory of 4616	5000	msedge.exe	107
PID 5000 wrote to memory of 5868	5000	msedge.exe	108
PID 5000 wrote to memory of 4264	5000	msedge.exe	109
PID 5000 wrote to memory of 4264	5000	msedge.exe	109
PID 5000 wrote to memory of 1096	5000	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffa8dafc188,0x7ffa8dafc194,0x7ffa8dafc1a0
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,12082787137136839272,15272129016290785813,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,6451533627304220110,16320405009038917047,262144 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:2
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,16577178828978648459,10034301446303720927,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,2142534099831000685,3825422564461965976,2097152 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,5641455351391005193,1321886383084859423,2097152 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4052,i,1856186206062393855,6458278161484986914,2097152 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=4108 /prefetch:9
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4040,i,12814432129278732372,16656289492868222424,2097152 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,14580133311179467387,14304034641798244338,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,5931904231620321123,3028860843198277383,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9864955915224759599,17787649911201758423,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9864955915224759599,17787649911201758423,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4140,i,16859218749691762137,8254094218923703586,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,4556316947894207926,4428690525652285119,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,8417076878851364265,7173355980060622160,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3112,i,13474732804634036014,10967326959915606866,524288 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:14
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6392,i,14061581697128388247,2290722132052223346,262144 --field-trial-handle=2548,i,10043962705629634531,15232151429134052641,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1096

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4801d30109495bb03ebf097faede4e38106dced9a2961f7cc19e4f79cd4002cd
MD5 3d807d454a17f3157bd46e7e213ff86e
SHA1 4bfb6f2562b776b29792b408990921341e37ae56
SHA512 37fec57675cef4cff933b7ad3fe43b46b30afbf94952e2a2ac4eb641f457fdb67a448eb87bc68c8f52f9ec007e1a325bb807a0b28c3df14d085052c877e498fb
TLSH
T12D51A86D233F35CECB7441B994E4658532F4A45B8AB7EF22C0005D7A59D6F10EDCA853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599fd0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599fd0.TMP
Size 2KB
SHA256 ee886b9d0e3f7cff6b296d93f878245ce76c5e64e52cae6db88a0a77b9063e6c
MD5 3f6f60a11f6ddb6a954b2aa94e5977af
SHA1 ba4fe22176ff2c1f80d08457820ba9878a3c1d59
SHA512 99581b05efffff50cba5ab090930ed4d64ddb6acee41d713b1ff83210cc6ab332dbb894e36ea8c70d8faf14bbc2827ea7812a48f0e8306d190b647591fc0b380
TLSH
T15F51D96D233F35CDCB7480B994E4518932F0A45B8AB7DF22C0001D7959D6F10ECC9453
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 14dd8742ff6ef3dd6a645f869738d8e1c6db8a934bb7cd11148a209e0d9d15b3
MD5 9ba20b73ef3834f1dd562af8b753204e
SHA1 b2c7ed41912ffe69a34d65d346b06a3f92f048b6
SHA512 bf3bed476fd7e2453283d6bd515c38539319b95db5795f5e8bf70c9ce94f07aebd9695996a31c67894291cf311af2328e2d2fd651d097d544e6e9b5007ac43ab
TLSH
T10641A1F787F4857E9A1196F0AA14AE1FCE1D0515432C786989E0AE2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c4489549c43b4337dacf27c46cd4b89636b8424a4c01ffe7065a053f4e61e489
MD5 4f78221569a924e16d74fdad7397b476
SHA1 d6fb9cf80424388fc436a40807c1e85bbe5b06bf
SHA512 a829c19d11ac51059eeeb197b4bbcfed10eed0b96a6f8b781f296a61ee32ac40787d550c08ed705612662bc057545f5c503b3d51984e8b674870081aa275e24b
TLSH
T1D941C2F783F4857E9A1196F0AA146E2FCE2D0515432C7C66C9E4AE2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dd57948a17a0ab210c19df0de7281631975a85ecc04eb705e8a0535941c119ec
MD5 3b5eef9e83bf434c2e563705c39d7077
SHA1 08cb1a51e430cadac67cf788a21ef5c9560f2cd8
SHA512 b5ade6554b0fed0ed177ff0e71cb5206ed911560c8d2eef477bdd16589a38f15083e7a1da45626892edba885c99e6d635cd98780f28f4a92f0659fa7464ee476
SSDEEP 192:sxRUeRTbi/fssHfDde5lSczoD8p4s/g6+WNIYCNXuOUGYWIgIJ:sxRUeli/fssHfc5lRZ/5IJous
TLSH
T15332B8166A28A93B8CC7E21DBB55BF53D7F95033A1911E48BBFC861C04E7ADD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 58357c1a230e5a782f439b496cd646a76f019e2378a92942afb8ee28bccd6d2b
MD5 e24c6b39e5863576ad0a8f80512421a4
SHA1 8785bdb44b1118603b8c4db61bcbb52a9edee962
SHA512 d03c22dd63e948517c722c87a0dc08aea191dcc5f6dee70d4f023f8dba4e45c75db7a5b61329f88dc4cea73e13195785c943a61aaa5136f9c5773da677baf3c3
SSDEEP 192:sxRUFRTbi/fsst8Dde5lSczoD8p4s/g6+WNIYCP9uOUGYWIgDOJ:sxRUFli/fsst8c5lRZ/5IZoum
TLSH
T11642D9156A28A93B8CC7E20DBB55BF53E3F95033A1911E48BBFC8A1C04E76DD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a6a9757c0bd02429ba356a16377c2adaa2aadd8ec7fca01268b46e345ee0693c
MD5 756dbbe67ffe4cef85acb78a71d94960
SHA1 ba63860b8c39a9b80ce6cc5973c9885e90920836
SHA512 53a12ed48340f7abaa838de39f4955785a03e707e1a87b17ca355ad8fd347a021e2426d5fe75aea4641a9b326b91ba93adee2440c4d668ede3a63493e070102a
SSDEEP 192:sxRUFRTbi/fsstfDde5lSczoD8p4s/g6+WNIYCNXuOUGYWIgDsJ:sxRUFli/fsstfc5lRZ/5IJou8
TLSH
T17332C8166A28A93B8CC7E21DBB55BF53E7F95033A1911E48BBFC861C04E76DD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ffe28d0d4564fd341bfef036c39377bd2dc85cc1b29c7740b79d20bdd151afcb
MD5 092612448c60eec99f41ede8944cc966
SHA1 d6882136acbe8f5031ce6cf34cb80b7548ffd381
SHA512 cfe36f25e7d78b4c82b55ee593820a3c6a037d0ff0db6087be43449ca85582e38c9db19b8264b00e826d731a153d872cfb74548d2886bab3ad35f15082f3e542
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRv9roZSv:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VK
TLSH
T107B2E92B600DCB7F4F804AADEC196FD76DA802CB96589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b372bf07e9f38bad1d6ab7db5930d748eed1105ecd4456beb6642bcebfca7f1
MD5 44d085219327992ec058e9fa694a8fd5
SHA1 5b2d95fb974c87748c17853ffebbe471340d3c10
SHA512 2efcf06cea2b91e004852e414111d12cd02537fb9c3671c1dc1f185103c7a1407a78ada8636859106b6c1024e32f556e209b6cfec573d8097e5d5e53d13f4860
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHLURlTp5FWtC4gNFK40gjFcrzKtZ+mVCK1:CbEBVj5JAdSp9/EgTK7j6dJOHLURlTpd
TLSH
T1AB918610347B06C03DBE651D80BD892A978174FB3419A52B7BA941E70F67E425EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 83fe89f67b43bf6ae899226af396e9c2e2e2b33a15ebbc021ea40242d90e5f65
MD5 a19aa30fd133f0c9596d7428fa28b9ad
SHA1 63c2d2793d546d6b8612417cf3e0f98796a17226
SHA512 25605bcc3441ff1d17d8136a7056b3a071badd57600ec38ff5c8087dd8d7e94e6143bbb4237bc114a06968ebbc0c9186c424ab1d503ff5d19144e7ed5e5daf10
SSDEEP 768:ml3xjdxrpptw2p8+p3bd66j+4BRv86aLIW4Pi9P2tf:ml3xjmg8+p3Z6n4y+Pptf
TLSH
T1C2F2BFB2E8A89D679CF5DB44B2863B037EF45163E2C01AD498DDBB0D05D716E030B87A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fbbf947a954004bebbc26a74634da8be154d364888d044945da8dc4c4dc6f57c
MD5 b56d02fd3adc6622637ef2081e18197f
SHA1 9c510dd6e9c8f408e260a231df2059318107dab3
SHA512 d6d32e7c2f397813261bf8f29e02fda15bb23e6d09b3cb1f8dc6aa2652b8e4f3e396a831bdd47b81999b1327043efb661bb6e01e7fcba4a24bae4bbf90699c1e
SSDEEP 768:kl3gjdfrpptwyp8+p3bd66j+4BRv86aLIW4Pi9P2tf:kl3gj0M8+p3Z6n4y+Pptf
TLSH
T139F2BFB2E8A89D639CF5DB44B2863B037EF45163E2C01AD495EDAB0D04D716E130B87A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8fb7f6565cf5fe9bc02739eb0fb679adfa7a674447c78b6cf17ad3b22a76744e
MD5 0d064f94bb196ba4cdb6c59e668b32b0
SHA1 6dc9313162303b932361449c8c668918b8b9e1d9
SHA512 3ded9957d47e3ffa316d466762b7b41cd9ae4c4f08bb9c518ccb91f89760850df3e41552c7fcba47593f80c9ecb22fb4264dd058cecaa6e62f7d0d9c35febe50
SSDEEP 768:pT3gjdfrpptCp8+p3bd66j+4BRv86aLIW4Pi9P2tf:pT3gjo8+p3Z6n4y+Pptf
TLSH
T1AFF2BFB2E8A89D639CF5DB44B2863B037FF44163E2C41AD495EDAB0D05D716E130B87A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 df064a9328263c23b54a1cb324d5d5cb2d432bb7ac8f26df69a7c00dcf41e603
MD5 7959b596675fa6c1e9bae81cfe7fb162
SHA1 01be24173649e1d70c3b716a3744cb0aa97b937a
SHA512 fb62be32786f398f8142d8d1824d7504fe3e78b733a33258dc6496f1e1470020781805357ca28c3f815c1a501b8e01af834a823fc3241641f36c8cb2af1d059d
SSDEEP 768:crv+4UNbdD3nFpptwNp8+p3bd66j+4BRv86aLIT42bwCl1:cbsbp3gL8+p3Z6n4y90ww
TLSH
T1FB03BE73E9A899339CF6C644B1877A437FF8519396C10AD0E8DD2B4E409B19E230B977
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e5cec5ca180371798c47501906df6dd430c6e8e303473c6e9c75da1ad660b092
MD5 f9fce0a957cd61bd67022ebb24242639
SHA1 9b8f9bf0c3b4544335de27cbed5d3e0f19bf7ec2
SHA512 ffb673e92ce67fa91bf9129f3e23ca03122f51f5c19226cd50daede99b9d2849ef21ae7d245a2a346f34e0cbf85edcd25d0d623171e372125f0ae87ddbdf9977
SSDEEP 768:Irv+4UNbdD3jcpoNp8+p3bd66j+4BRv86aLIiV2bwCl1:Ibsbp33L8+p3Z6n4yv0ww
TLSH
T1AD03BE73F9A899739CF6C648B2467B433FF851A396C10AC4D4DD2B4E419A19E230BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8833b4f-afc4-459f-ba75-2b7b062c3560.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e8833b4f-afc4-459f-ba75-2b7b062c3560.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download