896622327fb00400f4f4d317f6503e7d468c10b24075a422f60e240157add55b

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 15:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 63KB
Sample260826-std2pa1flb
SHA256 896622327fb00400f4f4d317f6503e7d468c10b24075a422f60e240157add55b
MD5 0c4e92d64e217121a7e08ab9c0290130
SHA1 01b608eeae9b0bf2edb2637ebc36d4b28477b589
SHA512 10115a95515cb4beaa5e19a48bcd29cc1d8423f73b4e38590c97af30dfb7d89fc4764a0465420ff011e7a277d62c45b184ab3923fd270cac5a9f069a4033989e
SSDEEP 768:M5hHm8PaEzHaVrqsToV9sbFkGXMI7KUyuatxLqRXbYIEY7hHRx/Y:M5hHm8PnHWoV9wOGCjttqRsIzHRx/Y
TLSH
T1DC53D75BB9A241211313B2B9A77A530DB23390438605DE42B6FC439D9FC9F92CD936DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2580	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322314939903914"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{A0702AF6-28BB-48A4-9F55-42CEBD407547}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3792	msedge.exe
3792	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 4160	4288	msedge.exe	89
PID 4288 wrote to memory of 3532	4288	msedge.exe	90
PID 4288 wrote to memory of 2580	4288	msedge.exe	91
PID 4288 wrote to memory of 3532	4288	msedge.exe	90
PID 4288 wrote to memory of 3532	4288	msedge.exe	90
PID 4288 wrote to memory of 3104	4288	msedge.exe	92
PID 4288 wrote to memory of 3104	4288	msedge.exe	92
PID 4288 wrote to memory of 2568	4288	msedge.exe	94
PID 4288 wrote to memory of 2808	4288	msedge.exe	95
PID 4288 wrote to memory of 2568	4288	msedge.exe	94
PID 4288 wrote to memory of 2568	4288	msedge.exe	94
PID 4288 wrote to memory of 2808	4288	msedge.exe	95
PID 4288 wrote to memory of 2808	4288	msedge.exe	95
PID 4288 wrote to memory of 6068	4288	msedge.exe	96
PID 4288 wrote to memory of 6068	4288	msedge.exe	96
PID 4288 wrote to memory of 6068	4288	msedge.exe	96
PID 4288 wrote to memory of 3236	4288	msedge.exe	97
PID 4288 wrote to memory of 3236	4288	msedge.exe	97
PID 4288 wrote to memory of 3236	4288	msedge.exe	97
PID 4288 wrote to memory of 4436	4288	msedge.exe	99
PID 4288 wrote to memory of 4436	4288	msedge.exe	99
PID 4288 wrote to memory of 5572	4288	msedge.exe	100
PID 4288 wrote to memory of 5572	4288	msedge.exe	100
PID 4288 wrote to memory of 1360	4288	msedge.exe	102
PID 4288 wrote to memory of 4560	4288	msedge.exe	106
PID 4288 wrote to memory of 4156	4288	msedge.exe	107
PID 4288 wrote to memory of 5644	4288	msedge.exe	108
PID 4288 wrote to memory of 5748	4288	msedge.exe	109
PID 4288 wrote to memory of 5748	4288	msedge.exe	109
PID 4288 wrote to memory of 3792	4288	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ff95e8ac188,0x7ff95e8ac194,0x7ff95e8ac1a0
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,10582758559376439169,12615117604212276783,262144 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,6147963517617296959,6185331386748720236,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,2853552677165416214,9116329830569480613,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:13
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,12201571931558197052,11285069783251358575,2097152 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,13953070429281686315,9680052001297052871,2097152 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,16605418732490954777,16102528269231606401,2097152 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:9
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,2722066693013122843,5944148626827464667,2097152 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,8270897941173618790,1143850966298178414,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,7341661650012872124,6640819279542024602,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,15530061017425271421,17275400765703286457,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,15530061017425271421,17275400765703286457,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,3081292760406578241,4521349698188623501,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,17114091883239049681,2822460757591088580,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,7269442333277827531,4302265854622269890,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,9488569821437844693,14463593661114994445,524288 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:14
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3748,i,13537287198729964686,17437396006314731052,262144 --field-trial-handle=2272,i,15059663280873516487,9127777501693574644,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 04a29f25bf1964968e139ea657b824de2f55e3934d5462497939f6e517d41294
MD5 8eebd22f43b726363ff91f78a3fea189
SHA1 0432b64d52b8f6fab480d428ddb50f8f46de8713
SHA512 3da91a6eace19b48384d6752a4951129f3c64d45aec692769a8c20a2aa53fc26c2e6ab4b508a7904e168e1fac78deec1c620876859e1dd853674bda9a908a93c
TLSH
T15B5130B06B231BB2FFE895B573DE80C8B27685554063EE2E405063744DCB77E50DB058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a483.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a483.TMP
Size 2KB
SHA256 498cd8676e10512d7a7ad3d641c7719ceb24b4ae75d5352c4a2e8368e6e92c89
MD5 1ac3be49f79285168c333982ec571b16
SHA1 fa1356cff300b95fea88fc0c851beaa12fb946ed
SHA512 139c6cd2583b41c3b2b8270d5d6f6c83fe56785393a740bb05db40387bc3dd1b3ae27a7160830f8a3f00b50235aaa832f7be9a6ea055f5b9412f02035e8163d6
TLSH
T140512FB06B231BB1FFE894B577DE80C8B27685594063EA2E405063785DCB73E50DB058
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ab68c565d04594c0e466f0b199a6fde6dd04db9c29aecde8d213776347e9bc50
MD5 2aa3af13781e695a418ca204d0e5e3b4
SHA1 5aa7464fa21d558a9a0b4989e2f9e07da32c519f
SHA512 d8b7d429695690c387d3d07e5ddb2b5b807ea8e74353da1cb1192666b1af138fa9928162cef7fd072ce88af22496b7bcc3ede0f61b5377faca4336cd50f42cca
SSDEEP 96:D0GOFhA7WVaZa3SbBzBZeAGZ21elxxKOwQ:D0lFhAaVaZa3SbB1ZeAGZ21el7NT
TLSH
T12DA19BBBC3E4877E991252F09B256E1BCD2D051A422C3C5689F5AF1B63F24B1D10179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 10b0b484184416f718f34b83b6392d98afd1c60a17b7a67be83f8a5b46a898e3
MD5 96c41810dd75282064f4792d9aa0ee0b
SHA1 826b87e7ddf658e6a048887bd0fb067c13897139
SHA512 d8c411f605697e897fb79f56393073e69dfbcc2ec4d89b15abc6106820c2cf0786ff2f194c23b34b58f34e46ac19b007362af4c28a2c9bfb3c354334762d9edb
SSDEEP 192:sxRERFbE/fzsOExgNHm2Sm7aSWzoD8p4f/g6+WNIY379BGAIgDyJ:sxREDE/fzsOEe2Hm/5Ioa
TLSH
T1C942B715AA68AD3B9CC7E21DFA65BF53D6F9503261D12E48A7FC860C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4e0706b773bf5a5ea87d598107ac61147d7874d37be47185f903353d62cadaec
MD5 c43faf87a7ebc49e3ae8b393c31f092d
SHA1 16f719f9241097060d23a9309fd8ceb990caec9c
SHA512 bffaafe3e705db12dec8cc3b1c4269ec35292fddd634f42d1b87a47c9882b8fa21ca39ab8a1c6455527ff9f47100bc3ae03c0a990842f1f9b3fbf3aa0136a2cf
SSDEEP 192:sxRLRFbE/fzsTExgfHm2Sm7aHWzoD8p4f/g6+WNIY3B2BBGAIgIJ:sxRLDE/fzsTEM2Im/5IAUs
TLSH
T10E329615AA68AD3B8CC7E21DFA65BF53D6F9603261D02E58F6FC861C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c790083cbd93992f8fa296f531ab89545c8546abe2be8415ddfa916d5128c0b1
MD5 f20f8078f97b258a1edeb74b44262888
SHA1 5baf6749ba27a0c0c5812fecf3ade1c8320707da
SHA512 6baaeefcac93a58fc6d8045db61e12abe047e2615710e3bd4f802fb3268a1c0091a14729e63fb6819a306a4a113e517e1b7b6f8a189297a2adf048d0134d95e7
SSDEEP 192:sxRERFbE/fzsOExgfHm2Sm7aHWzoD8p4f/g6+WNIY3B2BBGAIgDQJ:sxREDE/fzsOEM2Im/5IAUQ
TLSH
T18432A615AA68AD3B8CC7E21DFA65BF53D6F9603261D02E48A6FC860C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a90e3a0939ce6aa7c4337f662c784ecbe9d72a3362d5e7f0642bed60d19f481f
MD5 1302e2f6665febcc4330d108c1422b22
SHA1 8f5b92fd262a243dcd71b819b5002ccd498b1cd3
SHA512 8f238e625d7a7f7c67ab3b36500dfce6a38360640059e00c22ea0e524f51d329de79affdc07cb7d7b6abfdf112ee4155f26a58d2dd84a6dd2aa4be08c32b39d9
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTUroOLN:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0VF
TLSH
T140B2DA2F600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c42e10be-802f-4756-b587-65fc1f485c46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c42e10be-802f-4756-b587-65fc1f485c46.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 289532744b7e9775c6c3786365bf6d212531d19c76e0773fcbb3546dd627e63b
MD5 44390fdde44abfc6f022dbb32ff0b933
SHA1 ba4b6566fe733ca101b63c1affc75ee45798c3c3
SHA512 71d9f059c01d6b8904e75c7c1d72b6ab9007313c8c341a2f58f249eeeab521ea6ba07c97ec64f6189828a3556d5e5ee84e94297ea95a2acd7f8a38b47203eca0
SSDEEP 768:0rv+4UNbd43nKc+wfZOLf/66RfI66DvShCQRy3ESB:0bsbO3owfkfC6Rfb6DvSg1
TLSH
T1EC03CF71E878AE739DE2924476477B53BEA45263D5C44B84EADC4B0D01C36EE371F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 9b4e53db6c63c9c7bb3015df3cc2fe4edbbcc472758e810ef6d0c533a8aa9f0a
MD5 27c36a2234229363ab9fcf4723110f7e
SHA1 051475d8decafae48120c1a8a8ec80f8204dc6d4
SHA512 feca92207bd5da132607f22e8c30142c4beb1224ced5853191ea683431b5d84166aaac82eb63873b097ba3ada61f3da1bdb6546df2bdda625ccac1ff6bcab752
SSDEEP 768:Qv3vKc+wfZOLf/66RfI66lvShCQRy3RFvE:Qv3gwfkfC6Rfb6lvSgzE
TLSH
T18FF2BFB1DCB49D739CE682447B467B53BEA54223D9C89B44D9EC5B0C04C36EF2B1B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 eaf5c90f9ecbbb81fa3fb1f2512eea0d20cb61536c0b336a0b0c0d2f58de4e99
MD5 585337b30874c5283f0e750d91b36d29
SHA1 6da326e398a1c53cea42ec440d7469d198d1f63d
SHA512 65a2461fd2f288d865ba48aaaf80e494cdb3b0c8269d7f1b95e05d3bff8930db20e9116ff020c0c6f1965e5f8184733d09f2254e896f5c8df8bdf8752c9b874b
SSDEEP 768:ev3oKc+wfZOLf/66RfI66lvShCQRy3RFvE:ev3jwfkfC6Rfb6lvSgzE
TLSH
T1ACF2BEB1DCB49D739CE692447B067B53BEA54223D9C89B44D9EC5B0C04C36EE2B1F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f47e870402ee467ac0010767e69d90df1a42f428eadbc57919d31f806c136a09
MD5 a37c729942d4dacade5ae7802dff62ba
SHA1 ac64f77195b07e59dc284ad920558c55023b5691
SHA512 ad823745f3acbc3298472c734abc3c1afa528892cb06a878e308a4b5bea782d6c35bd5f33ca926aa306d56d8d013626db25bae1ee6aacbfaa274fc3106a14132
SSDEEP 768:aFQ33awgfKc+wfZOLf/66RfI66RvShCQRy3RFvE:B33pwfkfC6Rfb6RvSgzE
TLSH
T145F29FB2CCA4DD73ADE69744BB4A7752BEE54273C9C89644E6DC5A0D00832EE270FC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 923736626ef548f6a7a0675ff1943474b53942754b509d0f14980ba2487ba0af
MD5 ed747d22576e0d7354073738d939828a
SHA1 8cd3697008457e7a2ea05b7a229ba3b2f1f7f063
SHA512 597779fa06343e1c6cec2bf1473d4c18ed9fc64e213fbf030a1854917721b62b26dc95e2a5187180d15f249af11cfd34aa01a2206b98d8ab6035697f975a65ba
SSDEEP 768:Rrv+4UNbd43tfkc+wfZOLf/66evShCQtyE2bwWV:RbsbO3tmwfkfC6evS70wO
TLSH
T1D503CF72E86899339DE782487646BB63BEB85273C8C54784D6DD1B0D018369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2898fadb60334c202de62fb540cb3da30b92aa74cc19e53d5c4d9d3c9281cb1e
MD5 14a68cb170c7ee39ab673eb3021b029e
SHA1 e9924ac200486641ca609dbdbf0e241895c454d3
SHA512 7682fc3d8d6b57b441ab3ae2ae829678173857c7bda67f12b8e23ce33de2c2f5dbb97061285fd57ccb75c5be0af7518fa1cd4a0fe790844da21bd1923061a715
SSDEEP 768:nrv+4UNbd4398c+wfZOLf/66RfI66pvShCQsy32bwWV:nbsbO3swfkfC6Rfb6pvSP0wO
TLSH
T11E03CF71E868A9339EE782447A467B53BEB95263C8C54784DADD0B0D01C369F370FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download