16ad6c90d41be166a996c1958144c54aedcb73c1930068370c940f18fb900ce7

Analysis

max time kernel
135s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 41KB
Sample260714-pkafcsct4m
SHA256 16ad6c90d41be166a996c1958144c54aedcb73c1930068370c940f18fb900ce7
MD5 d42f64a01a52fb1958b51838d703e04e
SHA1 f087acd5ce9a2d19034526774acf1fc401533dd1
SHA512 f3134263c7f7d56a5e3234767c78ce6dbeadcbff8fe6b3eeb6668aec53f99b7d90309aa1f041be6c114eaf9ccfeb9a18dab8aa35f347d493c00ad994ceb5eb4c
SSDEEP 768:lqqZdypUY+KLNb0xlMzoDEEy07gFZal7FKTvGIYQgWo0sCOaz:lhypn+KLNb0HMTEy00Pal7kvGIYQgfaz
TLSH
T11913F7B2D08C1437364F63A99162B729F5BDA625CE01A768B1FD616CDBC0EF611B320D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3620	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285053795809522"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{EC9C30EF-CC69-4187-9D62-66C555B9213A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6964	msedge.exe
6964	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe
5408	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5408 wrote to memory of 6032	5408	msedge.exe	87
PID 5408 wrote to memory of 1720	5408	msedge.exe	88
PID 5408 wrote to memory of 3620	5408	msedge.exe	89
PID 5408 wrote to memory of 1720	5408	msedge.exe	88
PID 5408 wrote to memory of 1720	5408	msedge.exe	88
PID 5408 wrote to memory of 5716	5408	msedge.exe	91
PID 5408 wrote to memory of 5716	5408	msedge.exe	91
PID 5408 wrote to memory of 5396	5408	msedge.exe	92
PID 5408 wrote to memory of 5396	5408	msedge.exe	92
PID 5408 wrote to memory of 1272	5408	msedge.exe	93
PID 5408 wrote to memory of 5396	5408	msedge.exe	92
PID 5408 wrote to memory of 1272	5408	msedge.exe	93
PID 5408 wrote to memory of 1272	5408	msedge.exe	93
PID 5408 wrote to memory of 756	5408	msedge.exe	94
PID 5408 wrote to memory of 4368	5408	msedge.exe	95
PID 5408 wrote to memory of 756	5408	msedge.exe	94
PID 5408 wrote to memory of 756	5408	msedge.exe	94
PID 5408 wrote to memory of 4368	5408	msedge.exe	95
PID 5408 wrote to memory of 4368	5408	msedge.exe	95
PID 5408 wrote to memory of 4232	5408	msedge.exe	97
PID 5408 wrote to memory of 4860	5408	msedge.exe	98
PID 5408 wrote to memory of 4232	5408	msedge.exe	97
PID 5408 wrote to memory of 4860	5408	msedge.exe	98
PID 5408 wrote to memory of 1284	5408	msedge.exe	100
PID 5408 wrote to memory of 1120	5408	msedge.exe	103
PID 5408 wrote to memory of 1348	5408	msedge.exe	104
PID 5408 wrote to memory of 4392	5408	msedge.exe	105
PID 5408 wrote to memory of 4904	5408	msedge.exe	107
PID 5408 wrote to memory of 4904	5408	msedge.exe	107
PID 5408 wrote to memory of 6964	5408	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffafdcec188,0x7ffafdcec194,0x7ffafdcec1a0
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,10758510408775792873,14584364133876064364,262144 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,5020272082941375390,13608145570700156799,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,15936601252812747858,1428550969844382950,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:13
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3024,i,3781506802440328985,10948130011850397768,2097152 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3028,i,824187379740014717,1110357333969834975,2097152 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,14383509371258283753,13523617604136935355,2097152 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,15467992642095344502,10625081325869630222,2097152 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4451776392756418407,5175909300828620748,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,5416302474485112354,1178951239164376982,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,2542120514739490375,8347360134571443291,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,2542120514739490375,8347360134571443291,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,160917984313360034,18101030346991715621,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1732,i,13293618084311524039,10014123565907078272,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,9129009377528514056,13686379890227299406,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,16111487724928348651,13209320629715736514,524288 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,13339754657008691935,14868761471775441303,262144 --field-trial-handle=2300,i,10181002674994172786,9934542095006952047,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 29KB
SHA256 2403e1a1abbaa8f911da32a55052a95352a23250d3caf33cfd9246e4084fcac2
MD5 fc3a54126b60aabb257a03ee7368bccc
SHA1 2a52d4a13d6025b116c7e2670d8f15b00731100c
SHA512 9ad6ed709ca7da4609e33758d4fcfeede77b7a56f5f8fa2919073695baf49211fabf6905be9ef778e0a060cd11260d0e6eadf4fc0f056dedcda23140640a6622
SSDEEP 768:v8oH3TFQ/RFGRvWIjStaNFCQ063vrSecl8Ba5n:v8oDF6RFGg/QX3Dlclt
TLSH
T19AD2F17215819C2128FA6EA095602547C17CC539C78A7AAC837DA452FABF92E0339E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 34KB
SHA256 00ac21afbf0717b4406a5be832456e7a7cd12436306b7bd36da294715718f31a
MD5 c0daca89e9aae196582ddfb462599c13
SHA1 a08b252e2ddde06e8f41d47cdfa83e94dd1371d7
SHA512 849ff0cf6f5039629cb71568106b71b9b99725742eb1224c22d157e11725c1653fa0fe0a51f9e536392e508f4ecfeeda981a66ac34c0c38002bd3ce5d54fc1da
SSDEEP 768:K+/ZHuieGNwLKwEm6mJlr/ETjqm2pxRlq1wLLDrSG8KDc8z1z+m:KShpeGyLKBm6mJJ/EvsRlOSWpKDZ1Sm
TLSH
T129F202F96EABA3811C827759290333A0EB2490EA8DD30775F6BCE6BD5B210D141262CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 63KB
SHA256 2fbe9f79c4dbf5b2eccbc41a979ecc8b2bc104fa76d001d15a38e36df2f516f6
MD5 335ae7646a69be7bf9eff5922615f89b
SHA1 b4c66f60d89b3c9c38c35f6b7b82c796f4a72cfd
SHA512 2c41e3dfb8d27c0b74b07493474430997bb76d065b518f29f16739ca0899883761875bc44811e64f4c494b1ea2d1b38752ebadea0825b8641f5fc067ed68da1d
SSDEEP 1536:z2PdUh17aZ20vW/3prSJ0rOetW3maS/7FqvId7nDA:z2lUr06pi0KEIvI9nM
TLSH
T126531211DBD3FB80C4D55B2DA9A44ADC0D671B382688D242E3DFC1B60EB5E4452EED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 254KB
SHA256 41b8a4f54af93134d8b4b49d239631c8195a720edffaec43c0e817cb9d1300a4
MD5 83af79a15653e6b2f335e889063af512
SHA1 c2f17966ae57bace596fa9c60d14d299f261ec38
SHA512 b7c7d42e6e725fd8b886e7b4631c03a225e9ae49d57ac3bbb3b73410c51b0f9d9ad56be81b3bad706e77c6aa5272973eb0b3529c8c5f44a01bcd7e42811b3486
SSDEEP 6144:Fhp1iM9EKWKkq1YH+4eWTIPcJiw4rJmbrqRbvR:FJ98DH+47dmcnqRbJ
TLSH
T1DC441225CCF57F23A29157865EAA1134E25F178515FA466CD3272A6BC8A3C7322CFCE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 118KB
SHA256 13b17858dc02130403064bae0d228f332006f02357fa477e1e3a6c9e0c998e5a
MD5 cfec67e6db623f0c8233164b641a7cb8
SHA1 4b0bc77085d9314f134156c51508ffa6900b3e9a
SHA512 e08ede4bb018406232271bf2a35e71bf0f6bb91df98564e425240135a3e425501ffe35d5c1dcba5b4c6528efbf4ff203470337eafa3d4eb64387bb7aae848931
SSDEEP 3072:hjRdrHJS6up6HppSLJ6xJ/Y5ITQLwhJYrOocIVHbN/P:hj/rHM6up6HpwErOISwhJYio55bFP
TLSH
T1B3C312E0F40E6E40560063E79B01821FB91BCCBED79D7289A7D053606CABE958E5BCD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 57fc1ae5c616b4126eef4025f3acf3cb6c39add247f441ab6bc87bfc7fd51728
MD5 d13adbdbf3f0523172174b295081662d
SHA1 db1e6c15419e36b2587fb68443755fc6c3158f92
SHA512 af625329ff8d19d27f1d8e1ee95419903c5256f559d37164ed63f8fc90ebff59ff35d6946134e75085b9d420b6fa886f29d42340fe775588a086bca428c74b9d
TLSH
T183519968632D25D3DB61B9B294FB868937FEC0B9C8CF9E1558041C345B22F9760F9023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5965e4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5965e4.TMP
Size 3KB
SHA256 64b95a90efab0f4c44a43cdc8e6e2de1e09c65bc724b5a09d6e8b5a0f68bc929
MD5 286fa685be3891580d29859812e52162
SHA1 ce126e955dde52668a29e1c736043882eec9dc68
SHA512 751ddc067776a88473832cc329c539d020501b0a4f12ec2e7f473488640fec0d354ce8a195782a67bb3abc4092786af37a85cd96107dea216a6541a915c38038
TLSH
T108519968632D25D3DB61B9B294FB868937FEC0B9C8CF9E1558041C345B22F9760F9027
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 221a0718c3c9f5b12f5c1ec593314a4d966453606029ed2e193346e134b458c4
MD5 f949f513cae9c17e5bfedba03fec8338
SHA1 7df359adfe9f02d813de20d9f35bd374aaecb838
SHA512 41b39ebf80ee8a1c2b273bf386395cec2c22b837711be7aa3ec75f26050f789a83744855fd80b37383cc522e8167c77dc7af561deb99c65c9fccc48a4de24e1e
TLSH
T14041AFF7C3E4867D891156F4AB187E2BCE1C0915432C3D5AC9E4AE1BA3E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fde753458c9d0b2d08d138df8da94bce1357d4e20d1a89e82313adc4cc499858
MD5 90352db6cb64dcf158fe39a96f74a519
SHA1 8da015dbab2f37b4cd41383e20a640aac9e538de
SHA512 307fa9af15596dcb24ceb3cf99bb8976ae545d0354666239281fd52436a3b3550f2c256c2ea6d9f1a4eac41bf0ffbd4f39660ad01b8bc8f266468bdd07462de5
SSDEEP 192:sxRruR4yM/jK1Ml8wb9/fTsN9IKCA94/uzoA8p4rO/g6+WNIYD986SyG3jIgDvJ:sxRruWl9/fTs/IZ8OUO/5ISSdV
TLSH
T1C252D906A6245D3B8CDBD619FA517F93D6F81473A2901E44AAFC9B0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 550f2b769b2513cb7a020bb8beeb0d0363fb10978d8cc7e60c19aa6a65cb45cb
MD5 4237fa6e40ea5a39e569db4a18c0abd9
SHA1 fa55a0d941a534c1aaf7ae09d87518235b614218
SHA512 d99d43926f2691bfeb6931bc0841d8f1e43f35c8d3f8806e0e1b49ede995405e32ba7aa7f477ddc1c6553c12e5e3f1880e49fc2e4be1e8187a65214b6cafd1ea
SSDEEP 192:sxRruR4yM/jK1Ml8wb9/fTsN9/KCA94/uzoA8peM/g6+WNIYD9E6SyG3jIgDRJ:sxRruOl9/fTs//Z8On/5IkSdP
TLSH
T12E62D916A6245D7B9CDBD60CFA517F93D6F85473A2901E44AAFCCB0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 529c3dba8b9de1c3feffedfd6366565475ff463bcc1435568220172f0aa80e18
MD5 fd34a8355f7033f47b191147cc6d99da
SHA1 4134ad18e5b5070c9a470636e650b7f217d98670
SHA512 4a288e392f561f9eb7cd32b2d2651cda81647ae6453876c3e45dcba68b2618c020e2e961d49b226e21efe07047d43cae0efa7066077e6091000b85780efb27bf
SSDEEP 192:sxRruR4yM/jK1Ml8UQ+b9/fTsN9/KCA94/uzoA8pek/g6+WNIYD9E6SyG3jIgDRJ:sxRruOqg9/fTs//Z8O7/5IkSdP
TLSH
T13962D91696245D7B9CDBD60DFA417F93D6F85473A2901E44AAFCCB0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2c020c73083b42282fc1c9486d0ee34193e9f05ba6cabfc77705c4aaafd72408
MD5 f0569b18c049c403e9752e8f5919037e
SHA1 9ccdc3f3aa4b279c0dfe871f2215c188e5228795
SHA512 7bde78350cc04bac4968c66c39b5f25ee525fdd8705ab6d2769cd66673d71530bfc0579644ad015285c8568cdeeb2716aaddc99f77aaf0c5bb300fbf8e24cc3f
SSDEEP 768:aW5WP0Wg/XfCf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyc1s2ro/0Dhxu:aW5WP0Wg/XfCfu1jazysN/0e
TLSH
T148C2FC2B140CCB7E4F844E6DED25BED7ADD801CB9B988D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a0cacd58-7fde-4bd4-baaa-c92ba76f2149.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0cacd58-7fde-4bd4-baaa-c92ba76f2149.tmp
Size 13KB
SHA256 7debc77522c9e98d9b555749dc64e64fb778c8ed135c79064ded8f3e368b30b8
MD5 739f72e24f83a13093589b19e1c5d95b
SHA1 bd7c32010bcce6bf25e1630089539f89c376055b
SHA512 56cb2de1329bbe27ce0bfbc0843b8ee57af65e59568b0bfdfbb856d7228b940e8933e1a994a5a97e9cc6cfcf4398020006bc0646da03ad97453e4165d804bb8c
SSDEEP 192:sxRrNR4yM/jK1Ml8wb9/fTsC9IKCA94/uzoA8p4rO/g6+WNIYD986SyG3jIgIJ:sxRrNWl9/fTsCIZ8OUO/5ISSds
TLSH
T18B52D905AA245D3B8CDBD20DFA517F93D6F81473A2901E44AAFCCB0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcaed6d6-cc4c-4983-9e38-cbf70b199cb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dcaed6d6-cc4c-4983-9e38-cbf70b199cb7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

673c048d-fb93-4866-9111-a4086ba113f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\673c048d-fb93-4866-9111-a4086ba113f1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 683ebc7e8c97a4ba5565d515bc7f481d24c5dc85ed1440bfd4187dc7cba35367
MD5 25fea2acd967aabecff668bc68d277b0
SHA1 9da007b95a8caef0b44aa0066c1f1ad5e73503f5
SHA512 edd3d1e9b1689b2ad10a197c1eac046c6047c7b86e068b76d6f4139c93ab0bcc3ef9150411246a917b744fc59bbed34b0aede78e473610d8612fa28a8eb2866a
SSDEEP 384:ZtNn/s3n9Sm38NtxHh7jgC2VPuWZlf8hyEGwIFMgzb4py2rEoajo4cdR8eHhVOD0:Zj+9B3aXcXi0/arEnjN3Gac1FAb9M7
TLSH
T11BF2BF3568659EB38CEAD795B2073B52FEE0479782D40E94C6CD7B0D05C76EC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c54c7b6a68c6d04d7a1051f836025e2e4d7963b052390627fce1e016dbddfd6b
MD5 aba3ddd154b372cc7af5f06d6336a940
SHA1 918fa85cf85dfb3506a376d96ad93ae5f0cb6c71
SHA512 fd2e5747229f30bd85ad1df7b234f1ed9113419946978ba258185e740e1bc1cda8e2539956a3c7fa37c3a2a09dda25ec12d82eef69c20e1bbde772af182e1abb
SSDEEP 384:ztNn/s3n9Sm38NtQHh7jgCvpPuWZlf8hyEGwIFMgzb4Zy2rEoajo4cdR8eHhVOD0:zj+9B3nXBXi0/ErEnjN3Gac1FAb9M7
TLSH
T1CCF2BF3568659EB34CEBD795B2073B52AEE047A782D40ED4CACD7B0D05C75EC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e04bf2117c51ad2859f0bfb1e81a9e1abc22b80d00fbeabe64ffcac7b23ab090
MD5 13cae8c4c9a34c5b2fac017322b599b5
SHA1 3e36c0dac0bfd6995a47f5a77b3aab3b7427526d
SHA512 dba368e76d9c45d30b4085d51af57574a7568732a8854c737e75c14cd3a90f38497a8cc040d78658f89e52cdf0c512b823356aed107f7afa21adc958fff3e1d7
SSDEEP 768:sF1j+9x3Iwg9XcXi0/rrEnjN3Gac1FAb9M7:B9x34Xi/rQnjManb+7
TLSH
T10203AF366C94CEB78CEA8B95B6073602EEF102E7C5D44AA4D7CCAA0D11C75EC530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 79cf0faa3b37e30f05ff5e429fc5e63ae3e157262cf936a36f22920ac52402e2
MD5 ea713f59a789f8135b7f63ed6c00bba6
SHA1 aa572a95c5c91d75f8dc688d66fccb226bcc30c9
SHA512 faca9d93bd1d4365e9d3e75ac9d4b887862eef53e390cce6d4445f4a1a97cca9ed2036d9102ed1dc937fd5162c8fa0c2038050ae4bcd881acb60fa7f18ba914f
SSDEEP 768:rrv+4UNbdS30mi06rEnjN3Gac1ZfeVH1SCz:rbsbg3z6QnjMaUEH1V
TLSH
T12D03CF3669B88EB38CEBA38571877A037FF4525385940BE4CACD6B0D06975EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

baadab2b-6347-4195-be51-e8a268f60c06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\baadab2b-6347-4195-be51-e8a268f60c06.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download