4924b2b154e0366e0c3526cd0fc2b9eeca4aa706eb1e5e1e90630ea783c7fe14

Analysis

max time kernel
148s
max time network
152s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
30/09/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 302KB
Sample260930-shkebsvx2n
SHA256 4924b2b154e0366e0c3526cd0fc2b9eeca4aa706eb1e5e1e90630ea783c7fe14
MD5 202c8641c692cc8d7cb24da1874d3bde
SHA1 2ea8415acc70c7dbd8d541f8ac06a21c6b5b6f46
SHA512 ffcce2f0e35aa7284f1ee6548c2e0ffa0c2c88e984ccbc763fa98c3ecfe153e4ac32ce8624b99949c981a2b6981fb20db5ba15d3c9834bf9da8539cb3184d794
SSDEEP 3072:u0G8HuzqGQ3QIALjlYitFg3Prb3FCboIYrXvJ8575KJZvXq:/G8HuzqPAIALeitFsjaoIIG0JZva
TLSH
T104646C326300B43BB813DD91A6BF6F4E3C25E127DC0A46F8A9A1E530DFE2EB2151565D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5096	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4095433250-3121633380-635025574-1000\{BC5C38D1-C1C3-43B1-B889-22E9ED406E88}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4524 wrote to memory of 3808	4524	msedge.exe	82
PID 4524 wrote to memory of 5096	4524	msedge.exe	83
PID 4524 wrote to memory of 5116	4524	msedge.exe	84
PID 4524 wrote to memory of 5116	4524	msedge.exe	84
PID 4524 wrote to memory of 5116	4524	msedge.exe	84
PID 4524 wrote to memory of 3988	4524	msedge.exe	85
PID 4524 wrote to memory of 3988	4524	msedge.exe	85
PID 4524 wrote to memory of 2752	4524	msedge.exe	88
PID 4524 wrote to memory of 2752	4524	msedge.exe	88
PID 4524 wrote to memory of 2752	4524	msedge.exe	88
PID 4524 wrote to memory of 1224	4524	msedge.exe	87
PID 4524 wrote to memory of 1224	4524	msedge.exe	87
PID 4524 wrote to memory of 1224	4524	msedge.exe	87
PID 4524 wrote to memory of 5792	4524	msedge.exe	98
PID 4524 wrote to memory of 460	4524	msedge.exe	99
PID 4524 wrote to memory of 5792	4524	msedge.exe	98
PID 4524 wrote to memory of 460	4524	msedge.exe	99
PID 4524 wrote to memory of 1896	4524	msedge.exe	101
PID 4524 wrote to memory of 5368	4524	msedge.exe	105
PID 4524 wrote to memory of 2748	4524	msedge.exe	106
PID 4524 wrote to memory of 2188	4524	msedge.exe	107
PID 4524 wrote to memory of 4976	4524	msedge.exe	108
PID 4524 wrote to memory of 4976	4524	msedge.exe	108
PID 4524 wrote to memory of 1280	4524	msedge.exe	109
PID 4524 wrote to memory of 1280	4524	msedge.exe	109
PID 4524 wrote to memory of 5540	4524	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7fffbd6ec188,0x7fffbd6ec194,0x7fffbd6ec1a0
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,7230266180003008651,16737170741932684444,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,14910283669745528201,17623129021578521424,262144 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,5960391224858817170,1226208435178845023,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,13471791796830801373,13463692574926768457,2097152 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,18406509025827163060,17624401371714499014,2097152 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,2001374002097153848,8495084044545302956,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,3341650125367659007,11509407356277282044,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,18133799829993950411,18007938788560083803,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,18133799829993950411,18007938788560083803,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,9566804834872313623,16002971416096882230,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,9444375382112439478,4558932292526995554,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,13535066456628699528,1947976177280346913,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3044,i,5181845500669661011,13306063189479938275,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,13785442317182180852,16380389447343573809,524288 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=780,i,10081541210201209452,11912512548897812350,262144 --field-trial-handle=2200,i,6316458713146788733,10277919574752083570,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5540

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35bfe8411fef5cfb5e836a009d986a443cea8a767a24a62c88b76fff1445d4fe
MD5 7a1868737ff3b37a41fb1012d04e5317
SHA1 68663bf5d3a6b7b5ec10929aab80449de703c46a
SHA512 aab22617c95c8283d6909703835f5f8c127f54c6ca8c76ca1dca713266b8bbbd7738adc47493793e9dfab0c295fe255b678ea1be77229fadf2f3ae7ffbb01d31
TLSH
T143D02BA896CCD8C0C85520361318420830C8D63448A3404244E00244CE9126212A70E0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27341f426aa0efd6c484bc21b43d92cf90ca72c2333c8e492f256c83fd880a23
MD5 5e7e3b8030681bdf6022439fe49f75f8
SHA1 0ff916bc55fa603e71947fca76af181bf6a176af
SHA512 f028e8f02a0deeb001818c82b1b058d78b877b08dfffccd53e7636c6b399cea4a3f75d2e7d48b81a7bd267b29da417e86f7b980e8764b264d26bc3942cb86bac
TLSH
T192D02BA49AC8C8C0C84120361358420831C8D23448A3404244E00254CED126216A70E0
MD5 SHA1 SHA512 TLSH

Submit Download

146f34aa-0538-43f7-af1c-7cb5a2b9a66b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\146f34aa-0538-43f7-af1c-7cb5a2b9a66b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 0df316860c38bf267a0bc3cd062025d329da706bc4ae899ceba461f6ec0fb728
MD5 00961d09d5a2aefaec0bd305cc6ef57d
SHA1 d38be53614ca41216e1c2abc44eb60a0d4699b8e
SHA512 37ecb203ebb49db65ec3caab629bc7a5e2a81e82bcfb0977e1eb3539de77024bb84d0925f54f02ad089eec09820d60b277c4644e9c0e9eff3659824ef7e38faa
TLSH
T1F5F0F9A5CD21FC2B28FD0B1A60A5474AE75113673B40488F3B3D810C8FB553B8696C6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 de33325e20ba6e5c48fb9aa16cb8bda16eaae7f464e2b4a8c39c1229ea5dce27
MD5 251bec9ba8ddf3343bc155e6ba7a876f
SHA1 a988756d98bdae67df5dd857dea5c85fc100c825
SHA512 2d2731a63652189585ec9b094c7393452845c9d3243c3126432d996731bef9c969d08860044c1b4959f2e38eda36da426b9eaf9250eebd5a3f7f7e9cea55f21f
TLSH
T1A161CFF7C3D8866D890156F0A7247E2ACE2D0959422C3D56C8E4EF5FA3E24B1D24169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c36a9c29d4e6ffa5e6ca34925afc6173310c51343cb9e543a556af22b43debc3
MD5 7541222625fce67be44f4d2962e6a250
SHA1 32d5af378469c280be89cdc206ed6d9641294f8a
SHA512 3d25a4a9a6702e307c84399bb9fd2d94894119e8067c65efa19954ff38813064e700ab490cb670df9c54d98b44b6bc17fa0d3324b32129a475f1bf90c2d727ab
SSDEEP 192:sxZORhkG/fIsiXQ35MvX+zodpHkHW6+WNGYC3XdKyIg5x2J:sxZO4G/fIsiXw5clEHbGZ3PC
TLSH
T16832E8156D28A97B8CC7E21DBB55BF53D3F91033A0911E48A6FC8A1C15EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 07d67f68cc3ab8236286190b80922774ea652e941b0931d0db56546675e75053
MD5 4f53fb7eec27ae5ffae45f7dd3976cbf
SHA1 a5944f779e889fb71b93e128f1f292a32ad0ef88
SHA512 9fbb514b2eba93f1bc91d8205603109b53ad9131c706ebca1d8dd7b26df157ac1b901a21f8fcc15b61671aed105a17444e935938b24d19a68d68062a604510f9
SSDEEP 192:sxZORhkG/fIsMXQ35MvX+zodpHkHW6+WNGYC3yqKcIg5x2J:sxZO4G/fIsMXw5clEHbGLbPC
TLSH
T16542E9156D38A97B8CC7E21DBB55BF53D3F91032A0901E88A6FC8A1C15E76DD220785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 36fd9e7375f3cac24e657bdfbc1244e4ddb59b15f742b9ac6e813aaaf570cb3f
MD5 bbf92ef79e282f92020605932e8313af
SHA1 02de78ff8998b36ee52fffd4558c046b57b889af
SHA512 8e3c2fb2b5d4c168cbe26c8e7dca2ae7ecb9c03c03a17f72c8da16bbb1b79ddbef1e04c0d53ae771ec0ede112f594d5b0d862c7bdfc2a5f07f5a9ed07c720c97
SSDEEP 192:sxZORhkG/fIsYXQ35MvX+zodpHkHW6+WNGYC3XdKyIgj2J:sxZO4G/fIsYXw5clEHbGZ3jC
TLSH
T1DF32D8156D28A93B8CC7E61DBB55BF53D3F91033A0911E48A6FC8A1C15EB6DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d13fe99a73ba75fa1d443f1e6be9e39c6546b620562039b35d66d9769fa83419
MD5 dc5907c3ed19db2269ae1de9e987d2c8
SHA1 b6c8ddf5ffac8bdcd8b60d6d25aff2e39f43402f
SHA512 5b570bd05ef0580abeb132ec1bbb0e96bdbfaf868405ef32b252d5422736c6ce2294593765ee00a63b05e95d91df1a28e5e513a20b9e5bab9e19d422b6561b86
SSDEEP 768:d8+S3v9WvhLvb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVcwLle4ZvWrohMYd2:d8+S3v9WvhLvbu1japwLQ8vtKf
TLSH
T1B7C2E82F380CCB7E5FC01E9D9C5A6F9A6D9802C7A6588D4047FE994C03C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 af711ad88f7b16154cf3a671e4d6d8ae1043bc76bd6baa32245bf1dfc57331b7
MD5 c8c211e90e4e20dcd55cf720c4f018f4
SHA1 53cfaf16951b5b3361bd37f17df31f73d3bc4618
SHA512 ba751ff29d0bcd8d9ec8a780c7cc141a0a5d2c0ca3200b2d9f10bf0615e50e95d9c3c825243e6d8e7dc8c1cb1d0d10ac86dac011ac8f2a87fd9683722bec356a
SSDEEP 96:K0UwKZ+6mZ6KawN8AKNeGq28KfKkFiKOoyS8YKBWmLCKI4C2VSKGIRggK9myqcQb:yjNB/XORbkJNlzjk517HNRZhRBB9
TLSH
T17BB2E11571BB0310383E2D1885B49B6E9A4271A37068EA7B7FBC04A6CE67E055DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d4ec63c17cda2b1633a3caa40bdffc5a75e4bf7ac12c053b7906e8f7cc17e788
MD5 c855995c92a8e3041aeb5eb8d7ea385c
SHA1 8c50036d5dd85a44efeada1f33a298f493448981
SHA512 09ee781c2dd6ad59b5c1a46d3fdacb2f5060303d26003bbd3b637004e73e48e301c0435ec4cc8ab5c59206287993c19c5ac638698eef7a0fb08e98443fd6a957
SSDEEP 384:nDiFiZcI73sNo8TUNTUlI4k0jh+57hthfKj/1ib5FNdwdXqrQRhtgOIwZOyLLLgy:uFQ737wgi4kjcLNdcUQRhXss3N
TLSH
T172C23932ECA8DEABACEB4BD5A74A7603DEE04163C5DC9AD4D5D85D1D00971EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 4076f18adf93f43ad6acf40127a60cb49fe38866e8de8f08de19c3c9f12321b4
MD5 8e15b6c06f7e0f99061e93af67db7401
SHA1 70cef36f1a4064bd6c83a0d88a022726d551fa05
SHA512 55ced92f690fcb02167033590ebd2d7769db0efeecfb66e59cbb85b1aa487bb60d51df223a7b89caef95cc3763038173a7212a2b230fe15b634bf20b53cce8c6
SSDEEP 384:neiFiZcI63sNo8TUNTUlI4k/jh++7hthfKj/1ib5FNdwdXqrQRhXTgL/7Izbo5:1FQ637wgHHkjcLNdcUQRhX/+
TLSH
T1A5B23A72EC98DEBBACEB8BD5A74A7603DEE0415385DC9AC4D9D85D1D00971EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 92f8bb8387d6b14e9ea94b5beea43342b06580646c02c0fc340c7cdc0654b562
MD5 730b3c1d8ec305baa49f8347ca1206c0
SHA1 558b646a95369228777d6f79a15df37035a34275
SHA512 b6a34e5a699ad4430bd372f085e2ca4e508194604405ecacce3bbaf0b7fefdc473adad61eba7c02b97479a768668f0889aff2a7cdfbc655ba9b04ae1b906d95e
SSDEEP 384:nKiFiZcI63sNF8TUNTUlImkrjh+mPAthfKj/1ib5FNdwxJRWn7O6R2FeopJgL/7A:BFQ63Owg5fZjcLNdiJRK7TRkn
TLSH
T171B24B36EC98DAABE8FA4FD5AB4A7A07DEF001A385DC5AC4D9D81D1D00935DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6c48cd7a06f8441dce26825de216390b2c39c8f48ec3b1f68d2e259e7f6ea316
MD5 a2f1b2e8fe67d21e5ea24c08365d8308
SHA1 e614f0ae9f356986445938693c03105217e9f6fe
SHA512 922503c270d59cd92df3ef67e97ef5b4bea533f531235f54003f0ada293e67124fc3b745fcef889a38dfd9710774342ee8be3d13c59cca4ba1ec23a06db6907f
SSDEEP 384:nDiFiZcIrh3sNo8TUNTUlI4k0jh+57hthfKj/1ib5FNdwdXqr+RhtgOIwZOyLLLl:uFQt37wgi4kjcLNdcU+RhXss3N
TLSH
T19FC23932ECA8CEBBACEB4BD5A74A7607DEE0415385DC9AD8D5D85D1D00971EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 79c86c4ae7fe5f32839ee474b069c7cae43f74c24b9105738a276e556697829a
MD5 346862aba88ab02caf630a33f69db39a
SHA1 64897894b8d3a8a3228e61e1a047de220a838185
SHA512 9070013fa17192ba30fb763c9be1942836134c3c3c7f30b039da031955e9c43298998b91dca939e1e57c050a541c50acf6aea2e0352a20fe201f4f790661dd1c
TLSH
T191410958AAE91144B3B37E56ABF7A86D487BB9772E07D49D10010E4E0623A45CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download