9870fe3e19732dac43f461f4099cab309959df1b0f9b02f70481ca406210cc90

Analysis

geolocation tags

eueuropelondonukunited-kingdom
max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
21/06/2026, 17:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
UtdWrXrr.html
Size 4KB
Sample260621-we464sft2w
SHA256 9870fe3e19732dac43f461f4099cab309959df1b0f9b02f70481ca406210cc90
MD5 df5831ec919292189b9f087d80b77b0f
SHA1 3b2c4a2bd003d58c115b5972396b2b7ce579f714
SHA512 cc21495b5badf9821d484419f145dc059beeef1d7a4f43dec5a5bbc12a30063611a518508b5168a1a3914c7b0f42d5553a91dec66a35a6777295fcb24f0ba5ac
SSDEEP 96:5x8dIaDx8+IDx8MY4Y9sVA0Xnxx8do2GG+t1nx:TaVIDY4YyAan0o2D+tVx
TLSH
T19381874F0C04BC2862F4B155A543304ED3A6B43BE7496C61D28B292A55F6FD1A7F70E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2888	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265378942765405"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{21047D44-2532-4A99-8575-8899979AF082}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2800 wrote to memory of 4452	2800	msedge.exe	88
PID 2800 wrote to memory of 5316	2800	msedge.exe	90
PID 2800 wrote to memory of 2888	2800	msedge.exe	91
PID 2800 wrote to memory of 5316	2800	msedge.exe	90
PID 2800 wrote to memory of 5316	2800	msedge.exe	90
PID 2800 wrote to memory of 3300	2800	msedge.exe	92
PID 2800 wrote to memory of 3300	2800	msedge.exe	92
PID 2800 wrote to memory of 2016	2800	msedge.exe	93
PID 2800 wrote to memory of 2016	2800	msedge.exe	93
PID 2800 wrote to memory of 2016	2800	msedge.exe	93
PID 2800 wrote to memory of 2556	2800	msedge.exe	94
PID 2800 wrote to memory of 2556	2800	msedge.exe	94
PID 2800 wrote to memory of 2556	2800	msedge.exe	94
PID 2800 wrote to memory of 2724	2800	msedge.exe	95
PID 2800 wrote to memory of 2724	2800	msedge.exe	95
PID 2800 wrote to memory of 2724	2800	msedge.exe	95
PID 2800 wrote to memory of 1804	2800	msedge.exe	96
PID 2800 wrote to memory of 1804	2800	msedge.exe	96
PID 2800 wrote to memory of 1804	2800	msedge.exe	96
PID 2800 wrote to memory of 868	2800	msedge.exe	98
PID 2800 wrote to memory of 4432	2800	msedge.exe	99
PID 2800 wrote to memory of 868	2800	msedge.exe	98
PID 2800 wrote to memory of 4432	2800	msedge.exe	99
PID 2800 wrote to memory of 3108	2800	msedge.exe	101
PID 2800 wrote to memory of 5412	2800	msedge.exe	105
PID 2800 wrote to memory of 620	2800	msedge.exe	106
PID 2800 wrote to memory of 5948	2800	msedge.exe	107
PID 2800 wrote to memory of 1776	2800	msedge.exe	108
PID 2800 wrote to memory of 1776	2800	msedge.exe	108
PID 2800 wrote to memory of 6096	2800	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\UtdWrXrr.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffa4d3dc188,0x7ffa4d3dc194,0x7ffa4d3dc1a0
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,14397601685928505379,18119993911126767244,262144 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:2
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,16636166044405464793,14566994980928287340,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,9176534948867400611,14685668392415229728,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:13
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,8094437590101696544,18443820393239033255,2097152 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,10336858855059374178,17942260136775661956,2097152 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,1799307142633059332,8314924154519420411,2097152 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,1527394090625803619,6887077332830620485,2097152 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:9
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,15601526299646307179,13649752101713309319,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,824103158205724203,16305048814190525298,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,6769274250698674805,12006395925238887132,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,6769274250698674805,12006395925238887132,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1340,i,14570876890059686158,6022173495682336047,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=1276 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,17799003620237890179,9516475315238720625,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,11016335395066545601,13770239510640907889,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,8115716031978325506,6107988624224154826,524288 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,8496613560432968605,17342568114844984335,262144 --field-trial-handle=3148,i,16690129449351735424,7909793900454167360,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6096

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 923169116c857247f8cdc7610d6cc7fdb6e77e270c5b70af623093771e8722e0
MD5 cc216fc19f3a6d841b47887338ee4077
SHA1 890374ffb1f4d94a17eab40c763d72b92cbb360b
SHA512 b1fe905a55393eb0e6af895a92ffbaa2c287d6187761e87d501571a83096db90f534ff589262a43cd944eff167b37eefb32ad4ce6e02b2e4b4381cff1ef88510
TLSH
T14261A45C485208B6DB6E4AF576DAFFA4B770D7B69217BE1C02B1A43CE905F8E3682040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595318.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595318.TMP
Size 3KB
SHA256 3e078ebe417a64ecf1f9aba4eb6ac0c76368bca2a5551b5878cee0b00bd831fc
MD5 43858b7810c47ce6f3261bc497066557
SHA1 4e53fb8371ddd7a83563ecb0643e373a57b7ddb2
SHA512 b9d93f4874d86eb5107c2eae4086726ca526efb3cf0a967f0d153ed5b8db7f4c71c84ca3eb9b558aa8d08495cf0859d70ce70d01d60cb5f67396cbfe7d655039
TLSH
T1C361A55C095208B5DB6D0AF176D9FFA4B730D7B69217BE1C42B1A43CE505F8E3682040
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 86615c205c57ad64f4aa4bf024a36ccbe472a7bafe60e810ddb5d695071f487c
MD5 bb45e9f7e04ed467976cb7c751fdc40b
SHA1 e95bf433c2d4e83ad5986dd72f9e4e59b887528b
SHA512 fdc6e1f8faa4847be606268c63a3a1a12a0c2a64fe14d8cebc99ea7761a25f0d61e441d574c6a326b79de54d7d1b619da60c6e21a312df27f18ed48bdd02b5d3
TLSH
T1F82158F7C2E8856D9A1185F4BF196F1BCE290954932C3D5AC9E49E1BA3E2870E14094A
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 df853484dfa532b0e03f093e4c06a8a75b9b0c8d6193c34604d7226acfb85b05
MD5 c1c621f559ef3149fd742676a939f9fc
SHA1 ebeddd24c76b638441d8f27ac1a6acc9ae46a3eb
SHA512 1b25bc15a2d1431047763502264b38e495189c81af5911ce0e5792a07603aac5d21f3b375881186c6c62894e6ce9569d32af8679d71f03ad9d0f011e451c227b
SSDEEP 192:sxRm/yiGKOMl8wFw/fss2+tyNkUV00zoA8p4x/g6+WNIYZjCGWIgD6J:sxRm5bw/fss2+ty7qk/5IFy
TLSH
T1AD52D716AA24997BDCDBD21DF6517F53D6F81473B2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 07795b2c686f55602f22886d8b4c8cf76a9dd1d8c04949e3a5eeba5bba013f02
MD5 1e257dc3957e7a653b5057562df54b01
SHA1 ab7f0746bbd12d5f31887385576219d6d19e3c9e
SHA512 679c34a6babb90a086db42b0f56e5528236231bcb6384cd999c8711a4188187508b391e64a3a0fc356c54b49d5b61bbb220d8827357161bf53ca706d36a85888
SSDEEP 192:sxRZ/yiGKOMl8wFw/fss4gtyNkUT0zoA8p4x/g6+WNIYZjCGWIgIJ:sxRZfbw/fss4gty7Jk/5Ivs
TLSH
T1EF52D816AA24997BDCDBD219FA517F53D6FC1473B1941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b1eab35ec27efe994faa3b8cb00e20b9e3f1fa38f3bf3d9d1680b69dd3f1ec9c
MD5 378e9dd82d8b3597d587e5dce152e5df
SHA1 78b99d3cffdef04b574fe29b640c097ff727ecb0
SHA512 8e923b95026fc7b57e230e5882537b953e55030c589e1dd493bf00fe53ded5b274f254eec040d497b40f8bccf85d9a97ee45fce9b725fe7a38fd5179ad79cb03
SSDEEP 192:sxRm/yiGKOMl8UQcFw/fss2+tyNkUV00zoA8pex/g6+WNIYZjCGWIgD6J:sxRm5qqw/fss2+ty7qm/5IFy
TLSH
T1C462D716A924997BDCDBD21DF6517F53D6F85473B1940E44AAFCCA0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e3f2cf470b86aeefcbf148b28a7f07250257f813c41177d08d60e40c06043fcf
MD5 4865460327d06b00e7752ae3831b37e5
SHA1 b64d26730db9b334a2b743c350205e17ddbc4dff
SHA512 25dc5bab60575409b546513afc36b229625a325f03be58b0a39da47a5c4bc01cc7968d2e6c1b3a5aa87024237544f7dc7d862e7db8e03e758fc6fcba8df598d0
SSDEEP 192:sxRm/yiGKOMl8wFw/fss2gtyNkUT0zoA8p4x/g6+WNIYZjCGWIgDoJ:sxRmfbw/fss2gty7Jk/5Iv4
TLSH
T19152C816AA24997BDCDBD21DF6517F53D6F81473B2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f6ea5dad4c5697bef728ddc0dfedfdbca5549c071929b1a6948f3795405c2f1f
MD5 3680d0ebe976c23a71da2436cce29854
SHA1 44d329df6a47e8467d7b7a9b44739ea7081f57f6
SHA512 9447feff2fee1900b32cf966be0bee43f28daadbe52abf16112537a37316f074f813119fba261c5f68d7bbbf62853327938b310628c09e2cc81c20390971094a
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQiro7ov8nOg:eOEt7IWgKgf16u1jaZ/Q588Og
TLSH
T1B9C2FC2B240CC77E4F844E6DEC2A6E977DD801CB9B988D5447EA890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e482e0287f5d53c3ba44f707953029fd78a279155339825c80835c329a77ac98
MD5 c349164cd27e763456564bba6d4ced8d
SHA1 081af2cb261854522b6712ab8e0340eaeb01ea0b
SHA512 a24eeaabe2490e290180b02f40b4ca6138c60b7e8916b334f2ad0cb5fe1483bb97cfa581edb09860dbd044810cd390d855aa365138be3d96ad8dc1773ca37f7a
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uj:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAe
TLSH
T1B3A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59ee7d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59ee7d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 09ad7470d3d4a8d3ffeb9a0dfdcfb639343c72ffefb329a9b33f689773d1a0db
MD5 3b65f700b4a7864ed646124879c12dfb
SHA1 a0ad53e5302834bf4ef86bb29c15dfea9ec077e5
SHA512 7848163ccf187cad4cdb9ef1504830996815ab42cbaf466575acaa5c3428c9ce3fec3ffbe78b8a65700a88e31f6eb0efb884401d54ed8f9aa10cdf4044d35223
SSDEEP 768:XjaeqD4MlshiLdMmO3+JzPfcOhfpfCtV5R4HTytYYqgHvPw3yjWtxUTL:XqcjhIdMF3+9f1fpfoWTwJSyj22
TLSH
T12F13BFB6ECB84CB75CB2D684720376976EB44267C3C92B64D9D85B0D058BADF130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 48bd462209f736921ca4cb5830412464e64bedd62dff625f6dc30144f8fda747
MD5 eaa4d44ed7db6c2a97c9f82b0afa59a7
SHA1 9006619c5bb442258a42f056c21710a27d46cc0b
SHA512 935c11f0fd4508398032473ece48da52666ecdc0b92a012726bbc18fe50cbc51686647c5e4fad63fe8b39d3efd8dfdc64ba44658dec42a0411d4842cdb26aadc
SSDEEP 768:yF1j+9u34wgR7OzPfcOhfpfC5V5R4HTytYYqgHvPw3/+0qvm:H9u3g+f1fpfOWTwJS/evm
TLSH
T1AB03BF73DD988D6B5DE2CB85B606338B6EF443A7D2C56661DACC5E0C058B6DD034BC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dde9c200ffecbf5819c79e6c5000c38a0e06a3c2e15cd668e8a0a2f3d2d99e1b
MD5 e77865035e2fc83a9700145760562df3
SHA1 92c0c9d01e3b710ba50a659e444667263d81531e
SHA512 2df32a79a7f5bccd8477759d89594dbf4e0e42bb22689105d4723612cf047a24d44ca6ba6853000b0fca248a67946ab305a52e0f3cfd2cf84723f5f22d2e067b
SSDEEP 768:hj+9Q3e7OzPfcOhfpfCWV5R4HTytYYqgHvPw3/+0qvm:89Q3G+f1fpf3WTwJS/evm
TLSH
T1AAF2AE72E9A85DAB1DE1C6857206378B6EF44367D3C82B5089DC5F0D09CBADE174B80E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ff02e752917c926fa2ba707b7c64ec846a461a7162eaa43294a0a0a610f53189
MD5 047166a99f8e8f3d8a67f432c31bf114
SHA1 371709fb15c5fc7256e2011bae4d15012a27d1a3
SHA512 6f6502646b54a84d713e94aefb28d890244ea00f55512a21c6b1c0bd5820c75f45c88c7d4663e16fb5d90588f7ceb1b91edc26bacfb16eda77d13b45f13caba3
SSDEEP 768:EjaeqD4MlshiLdMma3tJPfcOhf0V5R4HTytYYqgHvPgSyjWtxjTo:EqcjhIdMh3bf1fqWTwJfyj2y
TLSH
T16C03CF76ECB84CB78CB2D685720277977EB842A7C3C52A64D9DC5A0D059BACF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download