53d94034f1177d1d2ee63d859f26ea0145c1db1c33e3b58e993e997b244d0730

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample260819-phwktatfle
SHA256 53d94034f1177d1d2ee63d859f26ea0145c1db1c33e3b58e993e997b244d0730
MD5 519d5878f01c87ddd8b1780cb989bb15
SHA1 0a47ec2d4e6152cfd1163a445759f12f7d1d4f33
SHA512 1256cad66bd87e4bd9d6eee1e8eb3abbfd1d309f9d65836891a3ebb5ccccae636f7ce25cd135aecd7ff2c1d09b19f0d3ae4d97b0b108ab2b0fcdb7646541160e
TLSH
T1ED211112840E1719D25AF7A8BAE05B9BD5C287DBB7C7280849536187D1CCDADE71A28C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2208	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316157603956243"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{0FB7290E-705D-4A20-AEB8-2D59893B3005}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe
5832	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5832 wrote to memory of 4372	5832	msedge.exe	89
PID 5832 wrote to memory of 5372	5832	msedge.exe	90
PID 5832 wrote to memory of 2208	5832	msedge.exe	91
PID 5832 wrote to memory of 5372	5832	msedge.exe	90
PID 5832 wrote to memory of 5372	5832	msedge.exe	90
PID 5832 wrote to memory of 4136	5832	msedge.exe	92
PID 5832 wrote to memory of 4136	5832	msedge.exe	92
PID 5832 wrote to memory of 5332	5832	msedge.exe	94
PID 5832 wrote to memory of 2144	5832	msedge.exe	95
PID 5832 wrote to memory of 5332	5832	msedge.exe	94
PID 5832 wrote to memory of 5332	5832	msedge.exe	94
PID 5832 wrote to memory of 2144	5832	msedge.exe	95
PID 5832 wrote to memory of 2144	5832	msedge.exe	95
PID 5832 wrote to memory of 1152	5832	msedge.exe	96
PID 5832 wrote to memory of 5628	5832	msedge.exe	97
PID 5832 wrote to memory of 1152	5832	msedge.exe	96
PID 5832 wrote to memory of 1152	5832	msedge.exe	96
PID 5832 wrote to memory of 5628	5832	msedge.exe	97
PID 5832 wrote to memory of 5628	5832	msedge.exe	97
PID 5832 wrote to memory of 2840	5832	msedge.exe	100
PID 5832 wrote to memory of 4696	5832	msedge.exe	99
PID 5832 wrote to memory of 2840	5832	msedge.exe	100
PID 5832 wrote to memory of 4696	5832	msedge.exe	99
PID 5832 wrote to memory of 4740	5832	msedge.exe	102
PID 5832 wrote to memory of 4808	5832	msedge.exe	106
PID 5832 wrote to memory of 3860	5832	msedge.exe	107
PID 5832 wrote to memory of 5044	5832	msedge.exe	108
PID 5832 wrote to memory of 3344	5832	msedge.exe	109
PID 5832 wrote to memory of 3344	5832	msedge.exe	109
PID 5832 wrote to memory of 4760	5832	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ff9fc45c188,0x7ff9fc45c194,0x7ff9fc45c1a0
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,11903131685199488277,6746112288715862547,262144 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:2
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,17710131895349792473,11648471135872831045,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,18108277343841436955,1254023116252410095,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:13
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,2779354961375615989,9917308774024841281,2097152 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,1213727759729359442,17050770538066730057,2097152 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,1410099590720189368,995339396194555369,2097152 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,6734562358840351172,10415360741900469054,2097152 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:9
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,2068987150909390775,4587887783225454860,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,12845878315765232044,10838541891139923607,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,5699609786982956532,3120128291953912973,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,5699609786982956532,3120128291953912973,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,12766343636550041226,4662847664655198077,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,9555464519597766809,4899945133544153704,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:14
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,2684530447311259940,4645255842369646356,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:14
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3024,i,288471826513466744,352549836435252366,524288 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6512,i,8321611947252949673,8655209777869084810,262144 --field-trial-handle=2688,i,17698575048811496264,12049603622592279115,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8b480100109addc71fd63cef6c1dc85b65411b28ca57295a2e2cda902ae47187
MD5 87686a1c0956e11863bec3621d15c819
SHA1 c4071a288d1f288a316daafd80278b28d3d970bd
SHA512 5c46ef2378320d4f380d350dd4659942f1fdc8c06bd4e247d8ddbb449314a4798bf5ebf931cfb1ef98d63329da4d7e0fabf0f2d314c16c36c42c45cbf03e11d6
TLSH
T197312394332409EBC7696EF551F48BE7333D8BB94A07AE11C49473BD4D72BE5B012028
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2d0a2273355b48463b9b4ace11fd49bf5fff44f53aa9c09d2e1adb341744710d
MD5 df8dbc15f99438abb11178a61adf3a0d
SHA1 1935382d2006c513cddfa7de9b914af7970f286a
SHA512 df6bb87825f92233b76f388c8dd83c631d2dece1f7d3fadda31733ce0b1ba2d0088547e45d66b1caaf49141e491f12e5f67fc6ab6711485449deaa8a32d32ddb
TLSH
T13431A0F783B5957E8A1196F0AA14AE1FCE2D0511431C7D69C9E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 efe2682dfd0c43c97e76fa17ef0a9429863572b4f859281643c714608649279e
MD5 94c255f760b20de3e00c190d57d98f24
SHA1 7fcd2364f500c99e7b5fd83c744d7be124b07dd7
SHA512 dc74abd8b5e12a98dabc250d322c25540870d4434842cce9e687afd79bd13046f58cf05ce8222ff3cf65123411fb110061c7db800619c1c283e5af1be999afcb
SSDEEP 192:sxRJR2b4/fms0p/pJzoA8p4P/g6+WNIYZ7PqnsIGKIgIJ:sxRJm4/fms0pRUe/5IMus
TLSH
T18332B8156E68993B8CC7E24DFB66BF53D2F95032A1D01E48AAFC861C04E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2a18616ec145a2d7e666a1d4625d1e421095d28f95b0ae2a85a2bbaf477c7b83
MD5 cda280a2e928da4a5e31ce6bfd8f2ca8
SHA1 71bb284bdde6f4a4e056d0bfc385a694bbfd06e9
SHA512 26123e09ab45802bdd0bd8109270c74ea5646097d6009be53a92076ce60829c51903a04debb9496f61a2a6af26e8d470404ce5c2e20216dc1a64450dbeffca8d
SSDEEP 192:sxReR2b4/fmsYz/pJzoA8p4P/g6+WNIYZ7PYhsIGKIgD6J:sxRem4/fmsYzRUe/5I4uy
TLSH
T12042B7156D68993B9CCBE24DFB66BF53E2F95032A1D41E48AAFC861C04E7ACD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a9311f4332496045864876cd8df95dd654093ecf98ecdd8fca43e8a176855698
MD5 b2346b10d0f553ef92433771385d9b18
SHA1 368a1c9ab4b54abbd3c1a4f3ded6992093bdc3cc
SHA512 b4d020a12446a2a6e3d424007af18f09f127dc8f1d00db8e0ee508d48daea1def79aadf5e3910b4c02356090ca1d274edcc1bfa977481237d88201ee2ee84a23
SSDEEP 192:sxReR2b4/fmsYp/pJzoA8p4P/g6+WNIYZ7PqnsIGKIgDoJ:sxRem4/fmsYpRUe/5IMu4
TLSH
T1E432B7156E68993B8CCBE25DFB66BF53D2F95032A1D01E48AAFC861C04E76CD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7f9abc67da0188ddf41edd751f9b5e1352fe82007f4e57aa0b8aee73b82f22da
MD5 b0d5eaded4aecbb16fed7ad902642aba
SHA1 93c2e361c12d17a51d297483b27af7463f160ea3
SHA512 d68ab3bf828ad7fd004ca340935915f908a0b7ac89a5629d2042dc1d5334462b03ecdc61bf920778d58b39f93a0c4ca08b7f824aa788fa2e8fec9bc9e96839ea
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR6uroOpv:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0V4
TLSH
T169B2DA2B604DC77F9F801A9DAC196FDA7D9802C797988D4047FED90C03C77EA912A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 59f3544ddbc6f570def994c82c3c30e6a87632f7fe176a4300435186830c1d75
MD5 7671f86e824db5c403e01d4fe0aed594
SHA1 0f99b941252e0460459cfc4bb0624491abb4efe9
SHA512 e61006717fbb554d32a59536c71b45e49218ef3287ef30fb91f715ed36aed6ec349c9cc32151e85fcb31f8a7123e6402466674261c01975375dd43d5ae82ca31
SSDEEP 96:K0yAKb6CG16K2I8LO5lLpJhUF082NhKOI2LhyTb8NpiDGyGZGeGnGVGM:2/95LO5lLpJiF0ZN3I2LsTb8NpiDN8rD
TLSH
T16291E6D2B57B52043DBE651C92B8CA15E6C570B3701CA92B7BE810B61F6BE114EFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2200.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2200.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 814a907cd2908f6348afccef00f2db511308ddcb5620ad186e96807b1987440e
MD5 a09480434da4034ae401b56849ee6cfc
SHA1 c6ea9a3c1315d96a8604bce728da861d91d37d2c
SHA512 e4d07672d76b350fc239ddcce9000da92bcd249f66e75f8c2abf96c99c2f0f55daa3e23108288df90cef2ef90970112d028c530519a3bb76967ec11a5695f3bd
SSDEEP 768:nrv+4UNbdm38dtq5LALCZAam6aQMGdjWca4Ghf9xk/:nbsbc38aLmaME6pxW
TLSH
T1EAF2AF31AC6C99739CB766D5F22F7647BFB0526389C80E84D8D96A0D429B09E330BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 470bb0dcd0cc5d3feaf3d4e938bf71b438e6a34d518d1e6d61ed79ea49b61368
MD5 489d0216a9f3756f3a232898d674e520
SHA1 96d80231a9a845c756e475da634983b34ab1ba4f
SHA512 5e4fe297f55405e5e6e56e9fbae579be7e67ae0434e3672a837379219e3244a29a300fe3ad632521fbcbd822c590dca1afaac203fbf446aa89d9b508bb3f0960
SSDEEP 768:Pp3b1tq5LALCIAam6aQMGdjWca4Ghf9xaf:Pp3bSimaME6pxo
TLSH
T11EE29E319C6898739CA7A2D5F72F6747BEF0527385C84E84C8DD6A0E029759E2307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 41f5d8886d192ddd44f4328b7dfa484f8b73b019d59335247e7bc88502bd0889
MD5 0a1b4eecdf07bf5bd03c0b0fa5411063
SHA1 8a538cf9c81eac53351c0b8267861320bb8157df
SHA512 e6b84035750e09b29ded726cf8c217453c1bf25d2c9ec8b6da40d438fb70991c3415c5a9183b5d122a4bf34986697801a7aec529d83d6f867de3626aa36fff4c
SSDEEP 768:Wrv+4UNbdq3Nrq5LALC0Aam6aQMGdjWca4GhfwxPeU/:Wbsbc3MWmaME6pOH
TLSH
T117F2AF32A86CD5739CB75695F21F7647BEB052A389C80E80D9DD6A0D439B48E330BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 64bb17edb6c5c94ec9cf99608a2228804c6f0e56d7daf7fcf2e01e4c479f67d7
MD5 c6c245c13d438620613f9d866c3b4327
SHA1 4bdbbfc223658f5b322ad3ac7591b85789dfe39b
SHA512 81fe44fffc901f10a1c5dd51689a03b2218c1b9603feef931128ac731b0c7159add61786b4bb96a661ff4b216e57bbf82490f6d23c0dfb239ac4604419808622
SSDEEP 768:Zp381tq5LALCIAam6aQMGdjWca4Ghf9xaf:Zp38SimaME6pxo
TLSH
T104E29E319CA898739CA7A2D5F72F6747BEF0527385C84E84C8DD6A0E029719E2307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 66dca5ecda5514dc1f771d9bc8caed63f8eb3f59b10572b8b8e776b4e369f510
MD5 096c67c621511597466369285c4d96ca
SHA1 642c17a043f18148df4777b3bfd3e49cf0f27185
SHA512 c8ea53aa7cfa23c6d4f438b8a88978a650fa6717aad078cd48136a054afbbcb5b38ca930f90112352f690976566d77a2709d70316c1b3272add861d8ecc5c989
SSDEEP 768:rFQa3nwgT1tq5LALeAam6aQMGdjWca4Ghf9xaf:+a3FgmaME6pxo
TLSH
T1A7E28E329CA8C577ACA7ABD5F72E2347EEF05173C8D89984D5DD6A0E029709D2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 5912914b5eecc3c13077d052c645cfc455259e2b1c3aeb67cd996ed64910e66c
MD5 ae5d50c539a094a48cc3df57a5db12d8
SHA1 6ec71ddf0760f421f169c3a74c1951417705a65b
SHA512 172b972d1ea88bbf4356c2de262bc4a023004d0fb235254ed584caf445e66a7d3e0ba6a147c55619f3a9443f77a0cb6fd1054891c2c8d477ae1cb90e50f5618c
SSDEEP 768:/rv+4UNbdq3gHq5LXnAAam6aQMGdjWca4GhfBQPeU/:/bsbc3DnKmaME6poH
TLSH
T119F2BE31A86C9573DDB79A99F21B6787BEF021A389D40E80C9D95B0D439748E3307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31d60ef6-7d63-479f-aa3b-f55ea6213551.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\31d60ef6-7d63-479f-aa3b-f55ea6213551.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download