5b92656f1f1e8657294f3604075e9d5e0b13804f802d7fad035cf453b716a6ae

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 71KB
Sample260822-wt38csar2z
SHA256 5b92656f1f1e8657294f3604075e9d5e0b13804f802d7fad035cf453b716a6ae
MD5 b6b0fc577b5d37aac5d5867609e1b300
SHA1 0276d714b015952c9be0dade6941fc87929048bd
SHA512 b6906eecc5ceb4a96f7fd562bd8144737a3a438d9c05b8d780405567da457972b2be7605bc0378fc2108e371ccc900e741dda7ba402892885958bc95652adb7e
SSDEEP 1536:pL+Oypo0eQeLC4Dwe3q/dAUiIXnE8z8OIaKUeNB:pL+n+0ELPDwe3q/dAUpfY1a1eNB
TLSH
T19B731A3291B81462227FC39D30A53B6AEDA0D946CB4A96D0F8FF936A4F64EE1145370D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4716	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318960747397312"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{D48420B1-8E27-4517-B3CA-C6769E6E4BD5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3148	msedge.exe
3148	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe
6816	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6816 wrote to memory of 800	6816	msedge.exe	90
PID 6816 wrote to memory of 4628	6816	msedge.exe	91
PID 6816 wrote to memory of 4716	6816	msedge.exe	92
PID 6816 wrote to memory of 4628	6816	msedge.exe	91
PID 6816 wrote to memory of 4628	6816	msedge.exe	91
PID 6816 wrote to memory of 1488	6816	msedge.exe	93
PID 6816 wrote to memory of 1488	6816	msedge.exe	93
PID 6816 wrote to memory of 1868	6816	msedge.exe	94
PID 6816 wrote to memory of 1192	6816	msedge.exe	95
PID 6816 wrote to memory of 1868	6816	msedge.exe	94
PID 6816 wrote to memory of 1868	6816	msedge.exe	94
PID 6816 wrote to memory of 1192	6816	msedge.exe	95
PID 6816 wrote to memory of 1192	6816	msedge.exe	95
PID 6816 wrote to memory of 108	6816	msedge.exe	98
PID 6816 wrote to memory of 5592	6816	msedge.exe	99
PID 6816 wrote to memory of 396	6816	msedge.exe	100
PID 6816 wrote to memory of 4692	6816	msedge.exe	101
PID 6816 wrote to memory of 1056	6816	msedge.exe	102
PID 6816 wrote to memory of 4692	6816	msedge.exe	101
PID 6816 wrote to memory of 1056	6816	msedge.exe	102
PID 6816 wrote to memory of 2144	6816	msedge.exe	104
PID 6816 wrote to memory of 6484	6816	msedge.exe	107
PID 6816 wrote to memory of 6484	6816	msedge.exe	107
PID 6816 wrote to memory of 3148	6816	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffc6301c188,0x7ffc6301c194,0x7ffc6301c1a0
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,3273561402114700686,13562005255695745272,262144 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:2
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,11320482624400641388,6404140474680631481,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,5349996183307099640,1715777595742210187,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:13
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,7372249749363851307,15140323193009792305,2097152 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,10265195992953156995,14661138771354438031,2097152 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,10105286313732312648,9818744328983454252,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:14
  2⤵
  PID:108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,15839636050514447658,16744783829017953295,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,5531481988621506351,18400879742368313719,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4104,i,343152842548768364,16990429741750053037,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:14
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,2039019059805240236,12673967243831078340,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:14
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,9177286271028042940,3096623883403708270,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,9177286271028042940,3096623883403708270,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,17490707486806753576,7075383918680524121,524288 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:14
  2⤵
  PID:6484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,15708689047863787085,6649544203474604111,262144 --field-trial-handle=2672,i,5531391334140766379,15659690425695566198,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3148

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18b624d5-298e-48aa-88d4-4252ddf5b943.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18b624d5-298e-48aa-88d4-4252ddf5b943.tmp
Size 27KB
SHA256 94de6572ec21532a573a444f5993b1548b1389838e85a6bbd0c81ec69d64548c
MD5 aa8e7fca264ccde041faebe4adbb0de6
SHA1 1df905df2b06a6a95b2cfc46991f450a3304adde
SHA512 c76f5d5e13c628e0c91aac10b6cfd091b4698b638e936c468eddb6e9062f7b31c66c9f30b3adee32a9d5140100e59b5ac9b50b119cc380d2149ddd16d6944dbc
SSDEEP 384:nNiF1tNn/s3n9SC8NLs8TUNTUlIRVPvuTDETduEqf+GGrpjBslRcTSDOObjI9G6A:EF1j+9rQswgruMTcGrlOD29MF
TLSH
T1BCD23A32EC64CEB7ACE74FD4B25A3A47EEE04263859C5AD4E6C86D0D00CB5ED4707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 68fc8dfcb47456d57d8e733c768f3845af8b849590d8f98a3c73215a478d4fcd
MD5 57b96e439880fa7c445c8ebd24b02972
SHA1 c88a3c80e017dd563d5ff9e8d97c3f380713e7ee
SHA512 5433528ae9cc278f43e4d7053ed43f947ca33ecb5a5030dcb1d2fb5896d9ac84e782be7c76900ce5b6d1d4e1a2c8cf29a90a18bbd5c5713b706c677906d677f3
TLSH
T13DE02B96C921BC2719FD1B1861555747E740131B3B41880B3B3C832C4FB063B538BC5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 555e5eca108669d732e5a8d61b0da1265ec7e94567df37bf843b95c21cf4dff4
MD5 5a3aed9c96d54f39a799576761286625
SHA1 7cdfc62554d56f4940750be8d2d64896f1b13471
SHA512 4203eb6a708117667872807d9504b146a7f4e0d7a08bb262b4492838ead5b6cae39532caa112f49bdfb7dc55593c87b3304801ab32a568ac75ac1bb6c7dfacc9
TLSH
T1D851B0F783F4876E991192F09A18AE2FCE1D0515432C3C6A89E4AF1B53E2471E041B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d89d63335b735afd66c0dc54129e2dc89fee109d96cf0463f6eb61386603eb05
MD5 93247fa7935f2a53c4521748e64c6572
SHA1 2e5068e8df499a37dbbca1d5bef998221978e623
SHA512 5cbc30704d887f8364891bb6d0e87719ed736087ed3264f849469e05e4b0d8284ceda4842ed50b8a0c50139aec418da8105e07d5b8d7279097313d03dbbb8844
SSDEEP 192:sxRLRTXbqo/fSsFnNRZnDjzoD8peu/g6+WNIYcC4vlsGQ43GAIgD9CJ:sxRLB1/fSsFnN/nnB/5IW4dsGQ4LJe
TLSH
T15E42A6166968993B9CCBE619BB95BF53D3FD5032A0956E48E7FC8A0C04D76DD220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9b1125beea72e9a9cabf131de708dc785824344392232db8b79222c9e73436d5
MD5 69aa1fa4dc332f47e708817c0921eb09
SHA1 1b64ab80db9698ab59f2d3b8fbfb019d598ddd2a
SHA512 43f43d73dec9387826411250bba254bb230239598b220b992e2d8c93a0655757b888ba332ebb87aa7bd420c85ca760b269203c6d37bb2e6520c88005c50e365c
SSDEEP 192:sxR1RTXbqo/fSsMONRZwDjzoD8peu/g6+WNIYcC4ClsGQ43GAIgjCJ:sxR1B1/fSsMON/wnB/5IW4gsGQ4Lje
TLSH
T1D442A5166968983B9CCBE619BB55BF53D3FD5132A0956E48E6FC8A0C04DB6DD220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7f2eba1331baea462f118cbd84e629481a57623d888f0601c36095987bf24c5a
MD5 4b8fe147b393da9bbd7b6e4afcbd1f24
SHA1 380ace9964443e620f486209af79f09e99df6912
SHA512 046ca6a7179a5f3286dde98be4c1254a54f9b495d57e6273249c50b401d739eb65d6b9287413509eded2811d44566c77df76ff11014c06f75bae475228891aa9
SSDEEP 192:sxR1RTXbqo/fSsFONRZwDjzoD8peu/g6+WNIYcC4NlsGQ43GAIgD9CJ:sxR1B1/fSsFON/wnB/5IW4nsGQ4LJe
TLSH
T1FB4296166968993B8CCBE619BB55BF53D7FD503260956E48E6FC8A0C04DB6DD220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e96809f33cbda9260eb6373a89d72345de4ea2dfc1dd75c51bf182b1c8f63ae6
MD5 7b9876740041fcb9ff45d620280db1e5
SHA1 1c465121b2c41e26fe9fbdc29cda2b86ba683a6f
SHA512 59e4f952e9dee0fed6761e6cd7783299309eaec49b11e9b581a62c84a0a539ec4d6eda24ab79e97d1d87db6ce017e7856599ecf0e6656eee3f9e8402357ad0f8
SSDEEP 384:OstWYWDfCtg1fFf9BKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVFd9DdR6zro3KB:O+WYWTWg1Nf9B8F1+UoAYDCx9Tuqh0Vv
TLSH
T1C3B2EB2B600DCB7E9F800A9DAC196FD77D9802C797589D4087FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 985e202c16e48e6f10126565de2c5847cb5f29e75c4bb569cdc9a3bd0e30cde3
MD5 09cd9819f768e97b0eabf3aa8794ef37
SHA1 653d87b5f0a4b97b87e37b79f42bd49b54d2bbf6
SHA512 df23477882a20bd532dbada80541b240db30c719b7041c75963a2ea40bac95c47d5347628289954013906d69327bcc6dd3950b65031e713f4e94370c6ac9229f
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9LDR:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRs
TLSH
T162B25C11713F5680383EB90C81B8D81F92C2B4A37519E56F7BA801A65F67E038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f3c3a911c96dc7d375a4656f364409233cde8cbb04d3b734f010dda8689f49a9
MD5 49c9d38072cb7b98abae484fbc69aea7
SHA1 49756207f5c7a610bc2d84e3e43f126f13f8dc45
SHA512 11afbe1ddc7acfa5db71775d318e807719b1ec50a96a0ebadc03d01eb530260a1c2650119ae158b3cdc5df30906e6b72fbe87771988bd63f727a307496ab3b3a
SSDEEP 384:nBiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTJETduEqf+GGrpjBslRcTkDOObjI9G6N:oF1j+9SXswgUuWTcGrlgD29M4
TLSH
T114C24A32E855CEBBECE64FD4B24A3A47EEE04263859C6AD4E6C86D0D00CB5ED4707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2b2e83a208d9b769a665e0b1cd9d9fd9e28cc0157765ec11c0736a1137093127
MD5 bbf76a5a07d3852fed0878173cba2231
SHA1 46cab156d520bc241d521b0bbc205a405c066101
SHA512 8ea70844462b8b2a4c4d0d159b6f14c48569695f0f79bfea74026f03a2234d96628d1e015fca7a400d28703622113122204ebf2f7b5ccde1fd4ae9728018da58
SSDEEP 384:nPiFmtNn/s3n9SN8NLs8TUNTUlIRDPvuTDETduEqf+GGrpjBslRciyDOObjI9G6A:aFmj+9IQswgduMTcGrlrD29MF
TLSH
T101D24A32EC54DEB7ECE78ED5B25A3A47EEE04263858C5AD4E6C96D0D00CB1ED470B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f5912b45ae91f9425e2f6dcad8eb87c65c143eb351d2041927f74b4b84e820c2
MD5 4521c54137b23eee319cf82a2bec836a
SHA1 403ae183fe8f0e386ce66b5206f3806be4d08409
SHA512 3345b37e09a1378c15dd1fac37ea12b31885d89673844bff13ed95a9d4902efa1204869c33fd7e89d8141072e7d5a181f08586945caaf6dac7fde1fc810d7468
SSDEEP 384:nNiFmtNn/s3n9SC8NLs8TUNTUlIRVPvuTDETduEqf+GGrpjBslRcTSDOObjI9G6A:EFmj+9rQswgruMTcGrlOD29MF
TLSH
T174D24A32EC55CEB7ECE78ED4B25A3A47EEE04263859C5AD4E6C86D0D00CB5ED4707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ab62b44a81c98841f4cf53fbe7b2d59d2abc745702666153d128ea867618d9c6
MD5 04be8732061f5d9ae8bc9037e9d08e41
SHA1 0cfcf6632136f53600cadf2a777979565cf15ef8
SHA512 6548146255d0949e063261a9e1c007de152093696593c31be1302658fd5a877bb6ccf8be05dfb665b9fe9f62a117e8e0f1655fb75da465533434c69cc826e871
SSDEEP 384:nPiFDZcID8NLs8TUNTUlIRMPvuTDETduEqf+GGrpjBslRciyDivvA8LEEIzyop:aFbDQswgmuMTcGrlrDivG
TLSH
T10AC24B32DCA4C9B7ACEA8FC5A74A7607EEF4415385DC9AD4D5C85E1D008B5EE0707C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0f29808ecaa298173828a3894c3800a09937cae4c052f469d2f5ccbbe5da7b8a
MD5 d5880971fb2632d331b1470c9f8ce14b
SHA1 63d613da3e20291abc28599d3db9ec5664243d05
SHA512 6a8e6298fe3230fcfc189e3e36253ed30ba01e359968b9907398012599eb44e65f0d04a23dd31c05e88a08074598f0985e0a9865351f11284e1a2e3583007837
SSDEEP 384:ngiFmtNn/s3n9SC8NLs8TUNTUlIRVPvuTDETduEqf+GGrpjBslRcTSDOObjI9G6A:7Fmj+9rQswgruMTcGrlOD29MF
TLSH
T1CED23A32EC55CEB7ECE78ED4B25A3A47EEE04263858C5AD4E6C96D0D00CB1ED4707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d79a826c6e6efae2a0a5fd3bae67eed0c64465dc48ee2bc1defd789ce29217fd
MD5 5b61ce56cd2ccfad31509a662decfd01
SHA1 1bb49d6b8cdacf6b3626f0e31552c07d3e7b8c8d
SHA512 1167ca9d40063ed1090f1cfb491530559b389f6fd2e9b31e419b3b09863e2dc7649002f3e50946a3ca3036552bb779ff3d304934c6bc7c4aadc926353dc15a3d
SSDEEP 384:nwiF1tNn/s3n9Sn8NgX8TUNTUlIRiPvuTuNREqf+GGrpjBslRYLlOObjI9G6w7hq:LF1j+9SXXwgUugZGrTl29M4
TLSH
T139C25B36EC55CEB7EDE74F98B34A7A46EEE01267849C5AC8EAC85D0D00871ED0707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download