ea445d8328bdde329a0a474477faefcb564545227c1cfe0e9301498caab63916

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 94KB
Sample260827-pmx97she32
SHA256 ea445d8328bdde329a0a474477faefcb564545227c1cfe0e9301498caab63916
MD5 f544834f30516a00bbbda5f056a4c7e5
SHA1 5c6b5ab95024923e062372060ee21e4f4cfdd810
SHA512 32e1470d4c86968c1e9cd59a7b6a300e1b6d9751542b347d34228981527bf0e8dfb48ecc2d75403e74a00b95b4fe936b10e1ab42fe4e9a6a4449c59c2c41074c
SSDEEP 1536:OubpkZOAZeM6IIBObu+bRVpGer6Br79II18a3xqpVyPuT8fG:O99fpyjWtn
TLSH
T1C693B535D2E220365037C4C6A5B5975EF994C306EA074780B7ACA7B72FE7CB2AE13548
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1884	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323073072751297"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{C0C98E07-45AC-43A5-96EE-0C22AF892308}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 5852	3416	msedge.exe	89
PID 3416 wrote to memory of 1144	3416	msedge.exe	90
PID 3416 wrote to memory of 1884	3416	msedge.exe	91
PID 3416 wrote to memory of 1144	3416	msedge.exe	90
PID 3416 wrote to memory of 1144	3416	msedge.exe	90
PID 3416 wrote to memory of 1336	3416	msedge.exe	92
PID 3416 wrote to memory of 1336	3416	msedge.exe	92
PID 3416 wrote to memory of 2524	3416	msedge.exe	94
PID 3416 wrote to memory of 2524	3416	msedge.exe	94
PID 3416 wrote to memory of 2524	3416	msedge.exe	94
PID 3416 wrote to memory of 2504	3416	msedge.exe	95
PID 3416 wrote to memory of 2504	3416	msedge.exe	95
PID 3416 wrote to memory of 2504	3416	msedge.exe	95
PID 3416 wrote to memory of 5996	3416	msedge.exe	96
PID 3416 wrote to memory of 2148	3416	msedge.exe	97
PID 3416 wrote to memory of 5996	3416	msedge.exe	96
PID 3416 wrote to memory of 5996	3416	msedge.exe	96
PID 3416 wrote to memory of 2148	3416	msedge.exe	97
PID 3416 wrote to memory of 2148	3416	msedge.exe	97
PID 3416 wrote to memory of 1876	3416	msedge.exe	99
PID 3416 wrote to memory of 1596	3416	msedge.exe	100
PID 3416 wrote to memory of 1876	3416	msedge.exe	99
PID 3416 wrote to memory of 1596	3416	msedge.exe	100
PID 3416 wrote to memory of 3112	3416	msedge.exe	102
PID 3416 wrote to memory of 5800	3416	msedge.exe	106
PID 3416 wrote to memory of 1516	3416	msedge.exe	107
PID 3416 wrote to memory of 1952	3416	msedge.exe	108
PID 3416 wrote to memory of 3220	3416	msedge.exe	109
PID 3416 wrote to memory of 3220	3416	msedge.exe	109
PID 3416 wrote to memory of 4568	3416	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe9968c188,0x7ffe9968c194,0x7ffe9968c1a0
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,13986067275718528457,13057691022357843653,262144 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,2694584363255166794,17658383630479621549,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,8295209643937312240,13678649514048935224,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:13
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,11883106752269621888,6960969112780529867,2097152 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,12925875539591217249,15967253123078458109,2097152 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,9914326510005893385,2258559080926513784,2097152 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:9
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,7483653468233233321,4453685654483787635,2097152 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7629162171556278004,47510567490386803,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,6300181432213952291,7181633557632059350,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,5299080130328568117,9978186337128782224,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,5299080130328568117,9978186337128782224,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,6154912502555890463,7551487595623549495,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,18110899538450785064,6231880669994942252,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,14134640994960701507,17905352762858359369,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6640,i,4583353889958985621,9896120451925865680,524288 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3532,i,13387068145378807918,431793257802456040,262144 --field-trial-handle=2404,i,3921876717237333167,12675413848869572644,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b872a1f2f780e4d9d8116c4d123f9e9a5a9caa1559c19c3b39ccda69cbd25021
MD5 4129a0d6a1066e476bfa1a7bdb1bab9a
SHA1 cf967ebb2d4282defa7c831caecc83a6be9779e7
SHA512 4c0e12c3239f3ec1da67ff4288fa8825aba791b2e2c132bc23ae15eef2f7389a30f71d2f5f4b05097a773d8ac77c5f26ffd7b9372cddbb5b86c6d8a16b9717d8
TLSH
T1F961EB53E3922AC5EFA44AB7B3D1CC7AB6F64458050F2F0AD884AF704425FD06CE6213
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596bc0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596bc0.TMP
Size 3KB
SHA256 26e74bd078fd64b96fa730a22f9f308b9203a8820db74092d8c976146e732104
MD5 7a1dd2ef7c66db5b203a98343c6351d1
SHA1 0a5aef7885fd21eef6cefc02ed50db3147a81430
SHA512 b7d15adc583dfceee4e4dc99c2cc1e6424c91d18bc675db7c52d557fd3b6ed10605b667267fee462a7d22a831da633b5086beb6ff9222b3512ce49eb2fe362f4
TLSH
T1D661CA53E3922AD5EFA54AB7B3D1CC7AB6F24458050F2F1AD884AF704465FD06CE6213
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ecf49d2c04c06cbfea2ba789d3866f712c451d6863d2061ddb84eb8b32063f30
MD5 d27ae9834e3e7a6ec8e91674acd887e2
SHA1 4173037672d9a3dc5f86ca8d1cc0d1b97187767d
SHA512 f6bf906e90b13ac58255a366a6b1acc5374183210836cbb405c58089ba99df798a2d85e3c1be0a32ce8fa40da700849324a49edc41827473dade9c96c8154c7a
TLSH
T10D51BEF783E4867E891156F0AB186E2BCE1D0516832C3C56C8E4AE5B93F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fbefe6188665f69c4ba311bf8acc0105b8b347eb6a006b1b72b2c5e7aa06881d
MD5 d74d4352a91d68cd62a2a374f5ede3a2
SHA1 93b175d673ef54d903372c4632681d0bd7ba4fcf
SHA512 9284251618ca9e37f509065c7332cd610a206692e38db16590d5729c3ae9b243132f9b2cad020e317231f2517a219e18a45fb0194ab4a62d392bb61bad715e83
SSDEEP 192:sxRQRhbQ/fbsp2dYCbPzoA8p4r/g6+WNIYEgb3hG1xIgIJ:sxRQnQ/fbsp2dPmS/5ICIs
TLSH
T19F32D8156E28A93B5CCBD21DFB69BF53D6F9603260942E48F6FC960C04E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ff759b7fc2fb086df33f956c7c176d427689ae79d289d91935cfa2602c41bd70
MD5 cc50499a1b8ba8f5b80a01f2ab2dd16f
SHA1 c975aef40a1b719920ed6982bf9b968b611213f4
SHA512 916cb95b768b8191042ca457ba8313a7c8ec79479a4a70ede1d857cb7ed7f1e094b9667f7f7661d742cf28419e3ee7e138d687a766af066271f8d107f2eaa49a
SSDEEP 192:sxRjRhbQ/fbsd2PYCbPzoA8p4r/g6+WNIYE6b3hG1xIgDGJ:sxRjnQ/fbsd2PPmS/5IOIO
TLSH
T1CF42C7156D28A93B9CCBE21DFB65BF63D2F9603260941E48A6FC960C04E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 52424e3dbd34a6b44bbf93d21d1cbc4871cc9aff1a764301f99218fc38b9b297
MD5 8ff5d76850ef372e2e8b5499bbe1e043
SHA1 5bd14db64cce3bea6d2c8f8091530d6123a3116a
SHA512 3219fac467f597c220b0cbd27ad9a12142c92b7690893762ddcbcefaa68497e7b6d30819c919ef0170d3d597725d87a2f083a62e3cd95afa2314839c31a5e2ea
SSDEEP 192:sxRjRhbQ/fbsd2dYCbPzoA8p4r/g6+WNIYEgb3hG1xIgDUJ:sxRjnQ/fbsd2dPmS/5ICI0
TLSH
T13432D8156E28A93B5CCBD21DFB65BF53D6F9603260942E48B6FC960C04E77DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 268f18377c726ab153072636c9c87e843153b53ecd879465532d1ec9b81f38ca
MD5 56ca240386e4431b01d273c14a5055c3
SHA1 d4bf0f8112d74fa5e9b7955ad60a4081c1511470
SHA512 08a22df4c60efc41b3f5a63bf3b3020a0247256b3264ac86ae25ff56e96cd7eab682957387eea77ace0f684e28af10a925511962c3d0c2d8660135dbc6f145f5
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo/
TLSH
T18FB2DB2F640DCB7F5F804A9DAC19AFD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e6c810d5-1277-4a12-a440-d8cce8a18516.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e6c810d5-1277-4a12-a440-d8cce8a18516.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 14024c51172410cf7956de21e0a1bc80803eba83527e3cc55113a6663c123962
MD5 63640243359b352d50a2a5fedf1974df
SHA1 0cd681eda137123ce41c3200419450713b9edc03
SHA512 fb5b2fe5ea65b49f933eda2b6dd510135298914c1e9facdcb6041db5592c77a66edb5445a6117531ce1241f45ea46b35f3cf4ace99da106247a7e4fa5c3e5c12
SSDEEP 768:1rv+4UNbdG3wI6DTd+ZL7geX6+qTko0u229a4vsSZeVH1SdW:1bsbU37L7PvVTVKa4jEH1h
TLSH
T11D03CF32E86999338DE6D685B14775472F795263C7C80B90D8EDAB0D068F5AC230F92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 3625c2a4d3a97e5db54e9a2c3cb7bcbe2205232ceb38e7a7679cd01a3597c0de
MD5 35134f69872e32338fb69edd02390bd4
SHA1 c796fb6b704641f28fc696b5d31a7a5c83f97014
SHA512 3eb3259708d6343f355b49aa38c851648d68924835c322addabd5b9e37a64cc978f49b74e6e819607979fd193097d78cb76d8180cc5049c4f5fed1faa859b0d7
SSDEEP 768:gP3AiE0DTd+ZL7meX6+qTko0u229a4vsTZ9BH:gP3sL7VvVTVKa4cb
TLSH
T1C1F2CF72FC719C3388E6D299B50736176E7A9273CBC81A44C9ECAB1D054B62D270F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 0b15c98b806d5079d9109c4090aa8fd98afefe4d91f773822f1b25c2ae7ca990
MD5 c72282714ea394f4bd2657f2f2c56118
SHA1 09e7e575bd05d7703a592f1c9f7cd11ba0176dda
SHA512 4807b2d2b9656930ac9078f3fd9efc01d03161e5c7ef2a74feb4dd517fe72041759a8be0d4163351492a3cacebeddfc62b9229dd2f10797ccdee31cefe10a35a
SSDEEP 768:sFQ332wgtiE0DTd+ZL7LeX6+qTko0u229a4vsTZ9BH:f336L76vVTVKa4cb
TLSH
T10103BE73ECA1893789FAC799F60B32135EB651B3CAC46A54D6DCAA1D014B16C134FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f478ea3406e9d4ac32119eeadc4c67f765a771db3cf3d9253429418a7cf8cd00
MD5 5450f6f2a2e30e5c7387e5c408b9fe53
SHA1 c296f07c2796933ca2dcfef41643a1ea397558fe
SHA512 ea90528301065b51f33f36cbfb796e475bb436e7917bb90589d70c6d3abdd91ab56e9dd7b250227e1dc480d5e80ef864c00f99357718324c595b764d8a4a930b
SSDEEP 768:oP35iF0DTd+ZL7meX6+qTko0u229a4vsTZ9BH:oP3QL7VvVTVKa4cb
TLSH
T125F2CF72FC719D3388E6C299B50736575E7A9273CBC82A44C9DCAA1D054B63D270F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a4f81aaae2675d08f68f5632fdd45e0462d39d99e44a24ef97a590f0e9da7e06
MD5 af464addf9ef8a99fc1e5dbd2ce8932d
SHA1 082120fafe481f48ed3f858afed32993279b5ce2
SHA512 53e18c3f957817a9245bf88d281c63c6620e4fdd002106cfd5a6388b1585c327e9fba932599ea6e37738e2a1e1d75188f518028d4c7b3df1564892c0295c8930
SSDEEP 768:prv+4UNbdG320DDTd+ZLLeX6+qTko0u229a4vsDteVH1SdW:pbsbU3aL6vVTVKa4AEH1h
TLSH
T1B703CF32E8698D778CE6D688714B75472FB92163C7C80B80D9ED6F0D064B5AC230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3819c7df-79ef-47f9-80bf-37a77aa929df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3819c7df-79ef-47f9-80bf-37a77aa929df.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download