d3adaa4e107e99cb339ad4e4a0b881b024a0a1e899a6acf83e6f97a112d5e69e

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 06:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 206KB
Sample260910-gz64wassds
SHA256 d3adaa4e107e99cb339ad4e4a0b881b024a0a1e899a6acf83e6f97a112d5e69e
MD5 8ff84285bc06fc860238bf808fe0fba7
SHA1 62ebd77e0b62caad44abd3b9629825b8f4a72881
SHA512 b0d1d786187937e238a3fee4a97b78a22c99c6138b58a1272438f15e0e94f21b6c50117b343acaf83c8f66a11682889bf951f648e2c714046730f67ae1eb94c9
SSDEEP 3072:mTCexRJ9Nezbs4KXnDLDQop0IjxxoxQsz3n0eepESgNIyFuTejenPAzXOuOW6EKp:mmexhEQnDLDjpjjHIW
TLSH
T11C241A7361B8107B2B2242C6B1357F6CBD17913BCF1149C4F5BC9898A7A7EE26621378
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6336	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334945671761039"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{F4B74F44-8454-426F-87B9-D70003999D9A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6252	msedge.exe
6252	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 4128	4540	msedge.exe	90
PID 4540 wrote to memory of 6336	4540	msedge.exe	91
PID 4540 wrote to memory of 7036	4540	msedge.exe	92
PID 4540 wrote to memory of 7036	4540	msedge.exe	92
PID 4540 wrote to memory of 3444	4540	msedge.exe	93
PID 4540 wrote to memory of 7036	4540	msedge.exe	92
PID 4540 wrote to memory of 3444	4540	msedge.exe	93
PID 4540 wrote to memory of 6444	4540	msedge.exe	94
PID 4540 wrote to memory of 4288	4540	msedge.exe	95
PID 4540 wrote to memory of 6444	4540	msedge.exe	94
PID 4540 wrote to memory of 6444	4540	msedge.exe	94
PID 4540 wrote to memory of 4288	4540	msedge.exe	95
PID 4540 wrote to memory of 4288	4540	msedge.exe	95
PID 4540 wrote to memory of 404	4540	msedge.exe	97
PID 4540 wrote to memory of 400	4540	msedge.exe	98
PID 4540 wrote to memory of 404	4540	msedge.exe	97
PID 4540 wrote to memory of 400	4540	msedge.exe	98
PID 4540 wrote to memory of 4536	4540	msedge.exe	100
PID 4540 wrote to memory of 6504	4540	msedge.exe	104
PID 4540 wrote to memory of 3676	4540	msedge.exe	105
PID 4540 wrote to memory of 6660	4540	msedge.exe	106
PID 4540 wrote to memory of 6896	4540	msedge.exe	107
PID 4540 wrote to memory of 6896	4540	msedge.exe	107
PID 4540 wrote to memory of 6896	4540	msedge.exe	107
PID 4540 wrote to memory of 3260	4540	msedge.exe	108
PID 4540 wrote to memory of 3260	4540	msedge.exe	108
PID 4540 wrote to memory of 6252	4540	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffc6301c188,0x7ffc6301c194,0x7ffc6301c1a0
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,13307760623989735036,16462723582233738455,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12647086650158723813,12333602304901522669,262144 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:7036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,5393508566685683251,11882521999882883155,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:13
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,15462570852253875464,17357037796670295178,2097152 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:6444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,750884017173760844,13754602170591232399,2097152 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,15563246124491171203,739461087604001607,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,982753348708350506,11849386913192852874,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,7087688940424474233,6838633883016455116,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:6852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,7087688940424474233,6838633883016455116,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,5983800580813215137,15037107856669631470,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,11750730514285777782,3863143384655403663,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:14
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,9597151654473656179,5687147839757316185,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:6660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6372,i,12732068582833050229,15547313651076196106,2097152 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:6896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,9647430196176211280,13166979421587701585,524288 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6680,i,4119049336863677432,13243927017072405832,262144 --field-trial-handle=2616,i,2463945178287762633,4465435313832776942,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

16fac8d3-ea2c-4e7d-98e2-1333b37e5ac2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16fac8d3-ea2c-4e7d-98e2-1333b37e5ac2.tmp
Size 414B
SHA256 a1de4fee889df660eee3004c56706dadebcaa7ab51b66a9183fa8db29248b7bf
MD5 7624b101af9f37e22fbf7488bd2b3718
SHA1 5a4d8c6aeaf49ec6868f684d0f2d83570fc56305
SHA512 8149d75a20a01385e1f120f88f047830c046d5598212b0a8cf7042608bf9e3c45d3d83c2b02d0d190d5fc641223ca185ac216997ed1f7347c2539ee4ecf50c6f
TLSH
T10AE0E559C820A82759FD5B1860590746F740132B7B50980B7A3C812E4FB063B4686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 508cad08c651db761978e52ca85db4b95cd48b93d36aa71ef214ef1557f95464
MD5 46d5c21114b1e2def4de5299bdd76cf3
SHA1 c84c5b52af6d93f5a79d738d6b6808903040f594
SHA512 8a196855abf4022b226a0c27aee42ae1aab9fc70cbcb118c3a92c1bf1a63507e9aa6d0d850e9b4ee3bd7a4f80c72795d4255f9fa4101dd26c2e145ce045df5e3
TLSH
T1F281CEF7C3E4877E891192F0AA257D2BCE1D0516432C3C5689E4EE5BA3E24B1D14175F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b4f81657eb0691b4862d9f9a69709e07cc254388efd025a4514dd7d2075fd525
MD5 2a8790435371df855f921bdeda165404
SHA1 b34e60cbca761cb745d678ffe3cac1af859b3ca7
SHA512 46e1799f66e696c8185ee2d471031e6bc48b4f51dfc47a7e796e1e18b93dd4e317b77fb43c60cf21d6ea6c3db0db6e44d09d16d8149a036e0d8ae9d24b040c57
SSDEEP 192:sxRzRaXbS/fLsB6oRkNRZE2zoD8peM/g6+WNIYcC4wphsGQ4/GlIgDbCJ:sxRz6S/fLsB6oqN/EqD/5IW4ksGQ4c/e
TLSH
T1B652B6166D68993B9CCBD619FB55BF53D2FD1133A0946E48A7FC8A0C14EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f8e699e11d5b0af9b580f1ac7c6e361374fb8cafa9b8a756437f6cf02356d6be
MD5 3b96de7bec6f441868ef84d6255dbecd
SHA1 e6823fd600d5180a629a174d7e2f87d18473b786
SHA512 8df9137bee47b1d156ce293935d058033b7b163bcbd42327002ecfb9141aa06d568a53414f5af652f2b6c61d3253e9f8ec727945481d7c5b0474cf6ce18172de
SSDEEP 192:sxRzRaXbS/fLsK6oRSNRZN2zoD8peM/g6+WNIYcC4ClsGQ4/G9IgjCJ:sxRz6S/fLsK6o4N/NqD/5IW4gsGQ4qje
TLSH
T17E4295166D68993B9CC7D619FB55BF53D2F91133A0946E48E7FC8A0C14EA6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 80e1cb066c8188e3b4466f91b0e49a5c5ed361555ba50bed85c69e11e8a86974
MD5 9294f34248351175e02dff47d55f6065
SHA1 14d2cb4401480aad623b37ffdabeb61ea13b6a5c
SHA512 f3b6e32e34532329fb72ee66b1002b89b0e0fce5193e54dbb933efc2f526c1c18a43e82ab7bbdab264d32d564b0a32fcc528cc7f3fbcc0b91c346a301225edb8
SSDEEP 192:sxRzRaXbS/fLsB6oRSNRZN2zoD8peM/g6+WNIYcC4NlsGQ4/G9IgDNCJ:sxRz6S/fLsB6o4N/NqD/5IW4nsGQ4qhe
TLSH
T10C42A516AD68993B9CCBD619FB55BF53D2FD113360946E48A7FC8A0C14EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 c77bcb1924bdd9da976d55c1b91982b9e8aeca70e2d1a17e646d2e1ecb8b818a
MD5 316b874121f70235cb65c353d8950b08
SHA1 c750f2214ac75948b6b88ea5e60333fcb5708931
SHA512 49095bf9c70207c6251eefbf497b405fca7746531060dbb535c0588f640ae21c30ef33027cd6a80c235f165e9d4bcadb78167ddc9e1ddbcddde40ad44508df42
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9LD+:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRj
TLSH
T1CDB25B11713F5680387EB90C81B8D81F92C2B4637519E56F7BA802A65F67E038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b243581e-709c-45ce-8d12-d28d3d5ad596.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b243581e-709c-45ce-8d12-d28d3d5ad596.tmp
Size 23KB
SHA256 e96809f33cbda9260eb6373a89d72345de4ea2dfc1dd75c51bf182b1c8f63ae6
MD5 7b9876740041fcb9ff45d620280db1e5
SHA1 1c465121b2c41e26fe9fbdc29cda2b86ba683a6f
SHA512 59e4f952e9dee0fed6761e6cd7783299309eaec49b11e9b581a62c84a0a539ec4d6eda24ab79e97d1d87db6ce017e7856599ecf0e6656eee3f9e8402357ad0f8
SSDEEP 384:OstWYWDfCtg1fFf9BKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVFd9DdR6zro3KB:O+WYWTWg1Nf9B8F1+UoAYDCx9Tuqh0Vv
TLSH
T1C3B2EB2B600DCB7E9F800A9DAC196FD77D9802C797589D4087FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b2135798b060101fd39209357a9fe748c46d253ebfbd956888fa1a2277c55c1f
MD5 8087f5a9ce152eab6457ab48ba1bfdc6
SHA1 1e3b63fe482e39d555ea488d26fe6d718c2d0d82
SHA512 8ef0fd7a916a941a43fb1a30e307622363f5143e77ccc3b37afa0dbbf76a2fdced5cdcb0fe93764c5ea7b760e4674c5d4fbacde593b6a4d633e5ed21b13f8924
SSDEEP 384:nriF1tNn/s3n9Sn8Ngj8TUNTUlIRiPvuTcFtuEqf+GGrpjBslRcrksOObjI9G6w8:GF1j+9SXjwgUuWsGrlYs29M4
TLSH
T16FC24B36E855CEB7EDE78FD4B24A3A46EEE04263859C5AD4E6C86D0D00CB1ED4707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 62f310c4ac8870b51a4b460e192a083a9ddd1d14734166f4eb0e8b7cd483fcf2
MD5 7143c7dc2a5d051af8005dc047966e37
SHA1 e472cf8fb2c8a7ec601a0e93465134d1a8999177
SHA512 f94cf1950d43d1e48f0fd0709b210a06764b04a526593be37e07c7f387febebead6188ed16bdc065abbe8ce30d7b8394f56397efb79992bf910407dbbd0a8635
SSDEEP 384:nmiF1tNn/s3n9Sq8NLj8TUNTUlIRuPvuT8VtuEqf+GGrpjBslRcrWsE+8LEEIzl5:NF1j+9PQjwgEuSsGrlasEm
TLSH
T136B22A32E865DEBBADE68BD4B70A7647DEE04263848C99D4D6D86D0D00CB1ED470BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f990840bf6a46707bd6056deea69d157dedccb7c9a6a00938a1b7c2f894bf845
MD5 b82147183faa243d5edace3bac9741a5
SHA1 b2da6ed8bb90598fad0198b70b8f74fbf14f1583
SHA512 16f3a9f257747415b88027a30f00df64d5623bc0e480131891dd7327549d140fb3d4e769eb1bb0244806538ce4e7210d6184ed0f6d045f7fdfe744c841a69570
SSDEEP 384:nLiFeZcI28NLj8TUNTUlIRmPvuT8VtuEqf+GGrpjBslRcFOsxuvzxV+Mhdp1B18d:mFc2QjwgwuSsGrlos4184p1QR
TLSH
T1DCC23B32A864DEB7ECE68BC5B64A7603DEF04263959C99D4DAD85D0D00DB1EE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 a9bb8f562221191b3d56ed8ffc8e64b491e36cce1239d81e4d62935b167f6bf1
MD5 dd9ac467caae7aefd4e65f3b010eadaa
SHA1 8046375fd979070590ad52dc3acd27c3e39089ce
SHA512 0204521f6094c852fe6d502b0421a537aa2c8ab84c6a8df075f6df2fa00e9f804ca8bab74465db38b0cd8d644be678beb5b2e16155ecb2b36ab181d677256f53
SSDEEP 384:nmiFZtNn/s3n9Sq8NLj8TUNTUlIRuPvuT8VtuEqf+GGrpjBslRcrWsE+8LEEIzl5:NFZj+9PQjwgEuSsGrlasEm
TLSH
T19AB22A32EC65DEBBACE68BD4B71A7647DEE04263848C99D4D6D86D0D00CB1ED470BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a653e1272e624c54d3903e2895a688aba49056a458f785b8493b9f0a650976d9
MD5 ee8c63df0e60a22376919f589665b9f4
SHA1 32cd6f311b52d399e297ab52450cbb3509f3ce75
SHA512 3d3e3831529bb66063b4b2d70992cbe014877d7658094b8b628e118659e5cb53b933c2e0ff6d93c03f29f8f7752fc41ae4b9ef99e58aa7da20092eb8bd6d96d9
SSDEEP 384:nXiFeZcIU8NLj8TUNTUlIRmPvuT8VtuEqf+GGrpjBslRcrWsxuvzxV+Mhdp1B18d:SFcUQjwgwuSsGrlas4184p1QR
TLSH
T143C23B32E864DEB7ECE78BC5A64A7603DEF04253959C9AD4DAD86D0D00CB1EE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 4708f485da6d8444dd1ea1131aefeb6f9cacbf08151d171ee9caccbebe251279
MD5 615d07b106c549a61232986ae57e79ba
SHA1 8af676be9165d136259dd505da70108092da4c7b
SHA512 93a842182d0e10dbff22d3282841bc12fe063f503cfb69f75873c2ef91e6a5355f7bfdb6cec88f3e020463aa578de3505d7b3c750b1976027b92d76fa46edb13
SSDEEP 384:nwiF1tNn/s3n9Sn8NgX8TUNTUlIRiPvuTuYREqf+GGrpjBslRYLMOObjI9G6w7hq:LF1j+9SXXwgUu9ZGrTM29M4
TLSH
T15DC24A36EC65CEB7EDE74FD8B34A7A46EEE01267849C59C8EAD85D0D00871ED0707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download