2463a84f32237cf0e0852132e941c859cf036cad0d3f25932ae9679d7cb0f215

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 157KB
Sample260827-wzcbtszbpg
SHA256 2463a84f32237cf0e0852132e941c859cf036cad0d3f25932ae9679d7cb0f215
MD5 e5124c02c7447b18f8fdd68a297bb536
SHA1 d78147ccf897ce28d9cb7095476301331c899d41
SHA512 d2ae74c66dd99484a56e67e311d7ea9294d3ac9ad010ff4ffe5f0d0dcd6e8799ccb847c6983e0c8345df6c59e1632adff4f7fff98ec5b96a5c93934ae9e87082
SSDEEP 3072:Yy4kqEDTeHsK8RwGmlgKTBlkOeqT/SYoL44v8apHGHGNQsX2gprT7JvUyv2EMis/:kCi23YYdOWwuEeAV2hZG1
TLSH
T1A6F33E705288287F0727B6D2E4556B29E4C6917EEE0B1602DAFC17E917EBD14EE3B043
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2092	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323285022691184"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{C2F0510B-2ADB-44F6-84CF-C5B7B99B53A2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5928	msedge.exe
5928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe
2344	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 5884	2344	msedge.exe	89
PID 2344 wrote to memory of 3876	2344	msedge.exe	91
PID 2344 wrote to memory of 2092	2344	msedge.exe	92
PID 2344 wrote to memory of 3876	2344	msedge.exe	91
PID 2344 wrote to memory of 3876	2344	msedge.exe	91
PID 2344 wrote to memory of 6084	2344	msedge.exe	93
PID 2344 wrote to memory of 6084	2344	msedge.exe	93
PID 2344 wrote to memory of 1188	2344	msedge.exe	94
PID 2344 wrote to memory of 1188	2344	msedge.exe	94
PID 2344 wrote to memory of 1188	2344	msedge.exe	94
PID 2344 wrote to memory of 4608	2344	msedge.exe	95
PID 2344 wrote to memory of 4608	2344	msedge.exe	95
PID 2344 wrote to memory of 4608	2344	msedge.exe	95
PID 2344 wrote to memory of 4088	2344	msedge.exe	96
PID 2344 wrote to memory of 4088	2344	msedge.exe	96
PID 2344 wrote to memory of 4088	2344	msedge.exe	96
PID 2344 wrote to memory of 3740	2344	msedge.exe	97
PID 2344 wrote to memory of 3740	2344	msedge.exe	97
PID 2344 wrote to memory of 3740	2344	msedge.exe	97
PID 2344 wrote to memory of 3152	2344	msedge.exe	99
PID 2344 wrote to memory of 5276	2344	msedge.exe	100
PID 2344 wrote to memory of 3152	2344	msedge.exe	99
PID 2344 wrote to memory of 5276	2344	msedge.exe	100
PID 2344 wrote to memory of 5084	2344	msedge.exe	102
PID 2344 wrote to memory of 2432	2344	msedge.exe	106
PID 2344 wrote to memory of 1912	2344	msedge.exe	107
PID 2344 wrote to memory of 3128	2344	msedge.exe	108
PID 2344 wrote to memory of 4188	2344	msedge.exe	109
PID 2344 wrote to memory of 4188	2344	msedge.exe	109
PID 2344 wrote to memory of 5928	2344	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,5594576446229577484,13078924774387657440,262144 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:2
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1644,i,5242575084426886543,3406377373923856326,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,3247886516004597914,8044355349684237442,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:13
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,16687683421504529365,933881909027072692,2097152 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,12514951681744928854,17372958402594220,2097152 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,15347954005192827377,13448146267453749919,2097152 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,13293825831523479893,9702538408841791258,2097152 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3860,i,13306748259012083933,17055776329112650646,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,12014689043988349066,12411234222526364905,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:14
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,18018143598813690977,12545284941168737561,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,18018143598813690977,12545284941168737561,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,9096068372484585427,13260526517151125437,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,14977516242458165942,10488238940894695994,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:14
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,11476327074040519385,367111865954554201,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,3100235355784729147,18096627264199740396,524288 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5804,i,11094136600213403378,1840878319913039765,262144 --field-trial-handle=3168,i,14719398555627134611,888876366724917423,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 ece5113281d84a70de5b1b261cc2bc826d20579ae500b17cc6288e452958548c
MD5 ab2d8de62183451841a633e77aa9b971
SHA1 7ca0d204c19f87ca22e78ee944a707feddc15079
SHA512 2469ca11b05a4b1196941fd0454df47343dfb8f2c72e6b227195e649e311d8f9ef545d818371d062c4d97c9e8fbd81285822c49b2dd4900acab0613076e77bbc
TLSH
T10431D8528BA031C2DBB695F209DC675632F0B469A5036E67799CAEB48B01FD2C2D0077
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f8b5ea0116142af9801c291ff9b00a793e4bef253cff282b4fd9bad6ce487ede
MD5 474d18b67c4ca0e626eae8344de180a0
SHA1 7c324658a24441d5629e5735ce0c60f7a10027a2
SHA512 fd384ad73b57434c3e7fffbba1ce66bef0ca4db93f6d6dd4e73e039c59a361c584da6d44efd752e84b6e82f894ab6ebc7a800f81097f6e44cc86e7f1fd037ef7
TLSH
T1A7317DF743B4967E8A1196F0EA14AE1FCE1D0512431C786589E0AE2793F3472E04175F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a6d5788d082885db7f4845c1cfe50c4176d5ea7c421ea1fd5153d876978cd743
MD5 bb5e01ef946a8ad5de7ae325cdfca5e3
SHA1 90a61d767f4bab81326b54dae06def9d1e418166
SHA512 61631813196ea93e96b131b6fb05a681f7a769a898965a3b0b042c4b2c3c533402013f4beabaafb1e14021d94fa68e9b4019d4d4d1f483d6f370b97ee39a3592
SSDEEP 192:sxRKRwKbD/fhsFbL3pq1z8WWzoD8p4q/g6+WNIYGF087GyIgDiJ:sxRK5D/fhsFbL34YWKz/5IPTa
TLSH
T12042C8156968A93B9CC7D21DFB557F53E2FD6033A0911E48A7FC860C04EBADE220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7c0486163a22c95dfce2be8255b05fd7319c0b52ac6b9ce5ce8776c0dbeb9d0a
MD5 a7b92eb7bd6504e15c0736ee34ec62c5
SHA1 f7a4444c5adefe7d1e2d2b92aa7277aac43018e1
SHA512 3e528587083e3f3e9e770ca84ce4bdd072cc9d8193f910f999c8253a11d1edbcc7cbe21d719be7cb9734b3cfb4dbab38adc8a58870e402b08ec88ad16fd6e505
SSDEEP 192:sxRZRwKbD/fhsyLApq1z8WWzoD8p4q/g6+WNIYGlbw87GyIgIJ:sxRZ5D/fhsyLA4YWKz/5I7Ts
TLSH
T12032C8156968A93B9CC7D21DFA557F53D2FD6033A1912E58B7FC860C04EB6DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9324fde43421902c0aa04ef315ae29cfc76cc94d476d391cb37d1afaccf5f023
MD5 feb8fcaa41b4a4d4b8b2997575ef0af2
SHA1 b8d0921e4cb0085de904987b80a40182a741adb0
SHA512 60b786e8972793f2f7a90088a933762468edefc354808f4ee9feb3f2b037563551e9ed77a6ee0965233a72b43ff5c5c88870ab23a34888e635ca8b8ebf08e637
SSDEEP 192:sxRKRwKbD/fhsFbLApq1z8WWzoD8p4q/g6+WNIYGlbw87GyIgDAJ:sxRK5D/fhsFbLA4YWKz/5I7TQ
TLSH
T1A542C7156968A93B8CCBD21DFA557F53D2FD6033A1912E58A7FC860C04EB6DE220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cce840ccda104e4c59ad01cc3ecaf3f4bae4fbb1aa18233590813ecce7562c94
MD5 1c5bc7e2e4476b28eedba86909b85750
SHA1 757d6b8400d26cbff5dba27113ccc8a34eed7a7c
SHA512 bf42b70e8f13451faa868de7cd2a0ef92d476a15077a9cc75966d56b01af3a88d849473a5a984715372b24ed41921d3128c498aad9698df666cad31e991bc888
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRItrowH:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Vf
TLSH
T1A1B2EB3B604DCB7E9F800AAD9C197FDB7D9802C796589D4047FE990C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 645a793c08ee1e1d72afdbf4e7bd5b25a89e88b8125578a1958b522526116c0a
MD5 c4cec3c974861575dcdaeb02e08ed3d9
SHA1 4f5c1abfc050ba7218529610472376fb5ab3b6ee
SHA512 d27d1cb13875770b2f506c80e843d678077704feaaca5bbbfc19af523797786addcf0a97c36ee1a9e4bcb4863aa64781c36b0f032421dc086a77ecaaa59eb143
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkr0xFzJZlWNiYgtlK4UgDlcLTqN5eHBoBZBsw:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNY
TLSH
T12391D556317A1650397EB90C90BA882F92C274A33258E42B7BB911B64F77E039DFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

7c73f1e6-6bbb-46af-b6ed-7d6086c51efa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7c73f1e6-6bbb-46af-b6ed-7d6086c51efa.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 9cc1532fd1e76d69e9eecdea0f4ad00cb9e8457624aad5be69a8bd6461341375
MD5 69c378f6ff25fc1569e3b0b2ca0f976c
SHA1 a8095f373acbf62f1c7a5c7011d15d90f84d6327
SHA512 d3ac6d53917100d8cf77c7c2641622bbb71590d08cf42025fbe7bc304e05ef163bd15d3a77f7a9ced64f25ec7a5479bfa35488627b678573ed6a3319a65a564c
SSDEEP 768:Qrv+4UNbdS3OtlYyaI7Hucys6BRvi82oP4/z6himof32bwn+h:Qbsbw3Z3imOz6Imov0w+
TLSH
T14E03CF31E4589973EDE7C288B4467A537FF8526385C91AC0E6DE5B4E028BA5E130FC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ca27845f27a3346fcb711c28fbcadf0e6ff788abdf15a7f2f200dfcb0e62a443
MD5 a243b80fdfb49b1f406616fe42d7e742
SHA1 3b73a5d7f018ecb9e0e76c5b3abbd2da04f00661
SHA512 9f7440bc6d29984eb054a9777c9e5b38d250d0f1d13265aa2c966e1d0d712056b72657404efe9a1da1e6d2c90aae437718c19ff40edf66d15c0cb06966db67d9
SSDEEP 768:LL3v/lYyaW7Hucys6BRvi82oP4/z6himo639B/:LL3i3imOz6Imog7
TLSH
T1A1F2BF30A8959D72DCEBC299F4067B537EE4A22345CC5990D5EDAB0E1687A6E031F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5692d6a3e5367ed8c6d5fd94f80fbe9409d00993c498e0142bcb7acb151eac38
MD5 aa44cf2dc02b5d1279a514794bf9f50d
SHA1 5908815539e67eacec1881aca388c40b331af36b
SHA512 03b7bfbb48b4cf1bda7a2cc2c3a34997f64bb065cc8db200af8256628d088508264faaeaa7ccd85be39d4f0fb1c36f197e10d5fc077640a231ce28bbd4b1f3ce
SSDEEP 768:HL3N/lYyaW7Hucys6BRvi82oP4/z6himo639B/:HL3I3imOz6Imog7
TLSH
T157F2BF30A8959D72DCEBC299F4067B537EE4A22345CC5990D5EDAB0E1287A6E031F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 b0659b4e2e5277ca70084b2dedd09088611f6c80a59d981b4635a7c5de1b42c7
MD5 fbb5a2bbc3de2ccfb35a52c33e9e6096
SHA1 b4ea5d66600097846fcf4f2a478381a95adc31cb
SHA512 cf1ffa44513baaf1e2dd2dddced5b9c29291e70cf16fa7b68f71af3ede0eb76270bae7380d4546b74a0ae5c1cf81a3371c45a78a325193b46d03d31d99ef4d4e
SSDEEP 768:vFQ43xwgh/lYyay7Hucys6BRvi82oP4/z6himo639B/:y43O3imOz6Imog7
TLSH
T133F2BF32A894CD77EDEBC7D9F5063752AEF4522385C8A990E6D9AF0D11875AD030FC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2054791a910a532621c065d3712615ebba5e525cc0cb03ad8bea3e9e0aab4ce9
MD5 749d6fd9abbb63b2128adff53e6f7b35
SHA1 affdb65993bfa8199f82905f4a2844bcf2b70499
SHA512 05147e49e8ffdbfdfd860ef5ebf66e8c8ca1e6bae2dff0750272f533a7cd233feb9a776941d1822ac683b161df6fcc39d6ab6e50c17e0d5325a3c2da6b11861b
SSDEEP 768:xGrv+4UNbdS3OAjlYyh7Hucys6BRvi82oP4/z6himo+u2bwn+h:xGbsbw3OD3imOz6ImoZ0w+
TLSH
T1FD03BF35F4489973ECE7C288B4467A537FF8522345C91AD0E6DE5B0E028BA5E530BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0bef74c-73e3-4a52-80f3-b8a5a6c762e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f0bef74c-73e3-4a52-80f3-b8a5a6c762e4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download