d5caec9ae4319e90056df7e118d710d28d558803a151619c6323992e613d6fb6

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 18:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 56KB
Sample260928-w875vsce37
SHA256 d5caec9ae4319e90056df7e118d710d28d558803a151619c6323992e613d6fb6
MD5 c68fd24316aedd8bfe791a4f86e0678b
SHA1 61057ac73044dc604e9df8ecf089d13e835c32b8
SHA512 437cf3e30fac37127d2fed4cb516d928abc166476fc7760dedddf27b3437ce693e744ab71c982955056058a80d57d165b1ecd77978a608d856103d7985fbe7ba
SSDEEP 768:9WSZdypa9d+1ub4AJmd1qEC0zZQai2THKX6AOaJ+b0vLBM:9Rype+84AJmdMj0zli2THm6AOaRM
TLSH
T173437222D4F82C63667D42E42271736EA943F20BDA461A5871FCB2940B87D9F457FACC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5520	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{7D31CF7B-10EC-43B6-9CEE-20D911AC4D57}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6120 wrote to memory of 2744	6120	msedge.exe	89
PID 6120 wrote to memory of 1500	6120	msedge.exe	90
PID 6120 wrote to memory of 5520	6120	msedge.exe	92
PID 6120 wrote to memory of 1500	6120	msedge.exe	90
PID 6120 wrote to memory of 1500	6120	msedge.exe	90
PID 6120 wrote to memory of 4948	6120	msedge.exe	93
PID 6120 wrote to memory of 4948	6120	msedge.exe	93
PID 6120 wrote to memory of 3484	6120	msedge.exe	94
PID 6120 wrote to memory of 3484	6120	msedge.exe	94
PID 6120 wrote to memory of 3484	6120	msedge.exe	94
PID 6120 wrote to memory of 1992	6120	msedge.exe	95
PID 6120 wrote to memory of 1992	6120	msedge.exe	95
PID 6120 wrote to memory of 1992	6120	msedge.exe	95
PID 6120 wrote to memory of 5668	6120	msedge.exe	96
PID 6120 wrote to memory of 1196	6120	msedge.exe	97
PID 6120 wrote to memory of 5668	6120	msedge.exe	96
PID 6120 wrote to memory of 5668	6120	msedge.exe	96
PID 6120 wrote to memory of 1196	6120	msedge.exe	97
PID 6120 wrote to memory of 1196	6120	msedge.exe	97
PID 6120 wrote to memory of 3456	6120	msedge.exe	99
PID 6120 wrote to memory of 2252	6120	msedge.exe	100
PID 6120 wrote to memory of 3456	6120	msedge.exe	99
PID 6120 wrote to memory of 2252	6120	msedge.exe	100
PID 6120 wrote to memory of 2564	6120	msedge.exe	102
PID 6120 wrote to memory of 236	6120	msedge.exe	106
PID 6120 wrote to memory of 2256	6120	msedge.exe	107
PID 6120 wrote to memory of 268	6120	msedge.exe	108
PID 6120 wrote to memory of 5664	6120	msedge.exe	109
PID 6120 wrote to memory of 5664	6120	msedge.exe	109
PID 6120 wrote to memory of 3572	6120	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fff8cc8c188,0x7fff8cc8c194,0x7fff8cc8c1a0
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,11487984474697801039,5912009414389297038,262144 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,1660900493924716945,1580952805016744979,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,8170522780210875001,8112563091322651004,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:13
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,8182382698940725457,6428579148883201959,2097152 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3348,i,3262918611944483572,3041918236014899610,2097152 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,11315112455758045977,8433265526892897023,2097152 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,3514288589441401744,11614251425183499428,2097152 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:9
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,6796270792099249802,1402825478916644274,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,1131105667828108189,7373395476437384003,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,8735293571854276206,12976425171000697624,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,8735293571854276206,12976425171000697624,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,5171506204324861735,866251227174389645,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,10857896901480671829,13704634922895908851,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,17311035379191002980,95096499918703384,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:14
  2⤵
  PID:268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,11298456379005090026,9250691790448734990,524288 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6440,i,16273707202536080095,12003792639707228457,262144 --field-trial-handle=2212,i,5357283335337202292,12618310345414536421,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4d300b4bbafea0f9d9ee8569ca8de4b7e64aee1919319f85edf3016274b074e2
MD5 4b3a6daf1cda1224ec87b2f31eca99f8
SHA1 e635ddae229ef2834e16a77f07497144e05aa95d
SHA512 d73ef5c52a678cc9d27e3628362a6b3625dd673e44d92ed4eb5475220b11acb2867683eb0f01ba2c1ab536d04e30397bfa5e95ef2115b413e332456b78231c4d
TLSH
T1A15153D0C7704126E759C1B5A4F4278736F4C9BC6F8B1E9215A8C5758F4275783280EF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ad310.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ad310.TMP
Size 2KB
SHA256 41f76cf4a5a35827b393027eefa90832287fa105658ae05703956b23f71ce929
MD5 a746f92bd2ead566b038d3df18e1f6f6
SHA1 d1ea917e21f8c98e742f9e19435dd15810fc0790
SHA512 c10f9b54d75b8416f302e8df502684f561dd4284a030faca6fafa1dcdccd796079e26a67ae2df05e44d18d433048d5b0106a964b0d0a0e9cf119c98dc60c4451
TLSH
T1485153D0C7704126E759C1B4A4F4238736F4C9BCAF8B1E9214A8C5758F4235783280EF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e603f7eb-7667-4677-a9af-dada0be0588b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e603f7eb-7667-4677-a9af-dada0be0588b.tmp
Size 3KB
SHA256 1ecdb6d1d2303646defab67aba37bc5b8ce71add362544e58a72f7f8dbafda06
MD5 593004f3c3b646217b426362548c845c
SHA1 04123766ff770375f9d04c4c32d5c847e066a6a6
SHA512 13104dd60bcea070e9edc4545262e1df91a3eb2eaacaf0fb8f6dac42a18ca35e3c084a73a708928cd8fcefd1f897fcd4ffb7158869f2718123182ae7668b678b
TLSH
T1BD51B0F7C3E8877D891156F0AB147E2BDE1D0955422C3C1AC8E4AE5B93E28B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a6dbad2be9a06f2571fd6fc2473f2a30e823698ad067d1c93e91ab88843e757b
MD5 d4c438fcd063fa24fc96559519f45f93
SHA1 ef55760742df4eb95db226f9b0beb4eaecd5c63c
SHA512 7493dc5756d73aecffdca016a51905a65c09f6bf1c524cc966e9fa6bad2be43707a1149fc339570410fbf99ef9d772a5696c4262a68340ba8779af5d253b9d01
SSDEEP 192:sxRxRJbrf/fUsTHRDDzoA8p4O/g6+WNIYEoQG8IgD8J:sxRxPrf/fUsTAD/5Ib8
TLSH
T1CB42D815AD28A97B9CDBE21DBB557F53E3F95032A0801E58FAFC861C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88df3f92f3866515160686c5095b437e0f536c1331e03ca0f1caaf2bd724bce6
MD5 8033e6b23c207f94d51cc58adaa291ca
SHA1 638fee7ad0c1c0da75a5be1334e101c2d8dae117
SHA512 e864ab633de91ef6cd257ee46574184c8365a964155173a5775f548e409514db7f71971a1fcdcd85a1e4df1e083c930a40dcc3e85e93ce2e1ebbcfb9838320b8
SSDEEP 192:sxRHRJbrf/fUs4HRpDzoA8p4O/g6+WNIYEIQG8IgIJ:sxRHPrf/fUs4mD/5IDs
TLSH
T1A532B715AD28A97B8CDBE21DBB657F53D3F95032A0901E58FAFC861C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 791bb9b9f0b0f49b018eaa5efcb2f74b8460d56e7dd9849aaebfe07e9656b283
MD5 21069a9602053906d50c30837ad32e1c
SHA1 41023c0f280607d7036c3b9f62e84c9b145e88f8
SHA512 fa23f36c1814324d2ee09f6b2411b090e8a071e83d9e3bbca4f23eb87a6152e7cf47dc935204d1fde9e3e677fc890c9743fd07345fcad08acd0435ab5aa6cde7
SSDEEP 192:sxR4RJbrf/fUsMHRpDzoA8p4O/g6+WNIYEIQG8IgDmJ:sxR4Prf/fUsMmD/5ID+
TLSH
T12432C715AD28A97B8CDBD21DBB65BF53E3F95032A0901E58BAFC861C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 d4460e2a1d5e0305ab8d6d3176a19ce45d8c0846a532906089adc66decd43653
MD5 a237ba8a0d5c0a6407497df3dfe40a59
SHA1 663197d04c3d7267afd936eb4d172f179a7d7102
SHA512 cf2dac712c6c6c50aba3109a85b49f4c1b18ca697a45e76eed29547895189c4ed20c09a62725cef1b8bfe6508d62e0adf2e1f7c27c99d66c69a3c33c4ea9c42a
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXzroJew:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VF
TLSH
T12BB2D92B600CCB7F4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c7f5192f85e67cd887d9bf6ebbf590a8ed371d7d08ade42ba9e5e3dd3d05ae91
MD5 1a028bb3d5d5c0d12764ab35200f543f
SHA1 5cd5926624e0132f525a899e06908440a79b57cf
SHA512 207e099b325bffe46721729233d6b377d8b11ace55411ae38d4c3cfb717e2c80db6df633f3c83cd5c4d724444a4e057a1f9b659a9ad03c607cb14b127a5a773c
SSDEEP 48:K0KGKhK8KgK+KkKkKdbKoKfKQISK4KdK9Kc1KeKdxK2KNYK3KIKkKtyLUjiu8+Sy:KcGYKTCduDCKMUDOQKjqmOd+KO0e
TLSH
T1B1C1C71070BB02103DBE79498A74971E62413173311AE62BBFBD456A9E6FE085DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

8d55f56f-e377-438b-a024-88a18f953d8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8d55f56f-e377-438b-a024-88a18f953d8c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 447b371c8af62bed398085942f6bca93f85a65c1ece59f17acca8d60d4d7a146
MD5 d0f0b4d99dea6203a9b4ba2bd00ae37c
SHA1 7c2388cc636daa1cc163a863952490cbf1d686ab
SHA512 de10daafe698caad270d0c8b0b3e0295dffe7b65450c3693345e8ad2963efe92693adb1481785d26a1f70614ced44f872064cb1f43b70fae94f074ee075960eb
SSDEEP 768:p/UxvxjgC+O3jSMQc7fZrKffp5XSwQs88uBkiT2sLd:cZj3+O3jSYtrCILNBVLd
TLSH
T16903D039FC945863ACF6A391374B2747AFF05147C4C41AA88DED7A0E028B7AD634B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1c31cf240fc408cb4ddce8bd40e1d58905af4e76a9670bf1a9d5079f016d38d5
MD5 3f2e14873dd74a54c20a627dae330b26
SHA1 22c3148293c5263554980c0b10e56b37c62c668b
SHA512 5fc68b70561c761c2b051f966e36161262f96b26058c3f77a9b64623c1b2deb5ff26b6755666a4a194bd96c94f94d39b0b67bcaf9a6291829c40fe7bef0a25a4
SSDEEP 768:Vf3jS/Qc7fZrKffp5XSwQs88uBkiT2s2s2p:Vf3jSLtrCILNBV2s2p
TLSH
T1FAF2BF35ECE488B3ACFA9391764637066FF09147D4C40B94C9ED761E019B7AE234B86B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 f084791461b09d550cb964e67fafe67eeb98432aa400b17cef238d1dcb919890
MD5 d82297072757cc95fd7216abd5156618
SHA1 aea6e6a5faedf82a0ba9112d6dd76b3bf6396880
SHA512 49c37f28f3e0910ac7dd759d4229fd58e9c3e1bcd0fa3b8ed173e7716ef8092ee0a743681f3d43bd19a81cbc1bbc493dbed0c6cb16a56a997fcdcb1301c551ef
SSDEEP 768:if3wS/Qc7fZrKffp5XSwQs88uBkiT2s2s2p:if3wSLtrCILNBV2s2p
TLSH
T143F2BF35ECE488B3ACFA9391764637026FF09147C4C40B94C9ED761E019B7AE274B86B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b168dd76f0644b5d3baf4dbca5f5daca18833db64c39aee0f1b514a0b6a37d5a
MD5 8ca4758ffd3977be2889aea3ef181493
SHA1 f7db3e82f8f5864eef5a427a4e21fb7561ed962b
SHA512 f6da8978c8a237376a5c2339fa6d973d0571a814c0d3d23c761bf8c3b5b0dee99adcbb1c21ccc24f9947db4b749be258c2506bf1396cf9f6267235c1cddbce47
SSDEEP 768:R/UxvxjgC+W3NEAzc7fZrKfdp5XSwQs88uBkiTCH/P84g:kZj3+W3+vtrOILNBuHg
TLSH
T14803D039E8945873ACB79385375A274BAFF05093C0C41BA849EE7A1E028B75D6307C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 eb8015f41cfff8751b7774eca0a4a5a8b49fbbdcb1eee6adbbbf5191aea58679
MD5 105681202fb123e3f7e25f1db55c9ab3
SHA1 3669a4e096f3206cace72c0a5a55ae672d5d7860
SHA512 01450a1c810547ddb440856c6c07a50a6819528a59a63418c966ce23477a0ec4638f718fd7a0efaeacaddef802fe712e86f7eb3a6cf17ccd3d915852f59eb86a
SSDEEP 768:GFQC3hwgmS/Qc7fZrKfqdp5XSwQs88uBkiT2s2s2p:NC3GSLtrDjILNBV2s2p
TLSH
T13EF2BF32DCD488B7BCFA9781BB4A3702AFF05147C4C45A94DAED651E01972AE234BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0259281e-db27-461e-b723-215e6d7c8b57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0259281e-db27-461e-b723-215e6d7c8b57.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download