c8f77016f564cf5a5de8745ad6ff702c7f209070a447dd3316a140adcd2267c2

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 81KB
Sample260716-dldzdsft9w
SHA256 c8f77016f564cf5a5de8745ad6ff702c7f209070a447dd3316a140adcd2267c2
MD5 c85bad562e7dd5dd96e63fe09f10f2ec
SHA1 1256f91e9f1124faa299f5f39c3f6ebd4d998254
SHA512 4f1d2f63d4be71d74c2be7af0414ecc5221635ae61f866a15cbc78eb8155e525b1a75ce4259d22a8be3cc5f75b66fcfc7932a275065c52dff93a55a59169a5cd
SSDEEP 1536:2jQrcmRiBmgT0cTrnbO27kGypmWf7RVZMpW4wvSAIXuTV1IIcxHeaeJAHgC/f:2krcmRiBmgT0cTrnbO27k/Uw7RVZMpWU
TLSH
T1E08394A196B44CF5797F832B9D44B214A21BE912C90A76D5F0F3D18865CCFB606E3B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3408	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286447359627935"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{C96F6BEA-368F-4965-8D4C-A3F453AC9C65}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2384	msedge.exe
2384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3152 wrote to memory of 2340	3152	msedge.exe	87
PID 3152 wrote to memory of 1140	3152	msedge.exe	89
PID 3152 wrote to memory of 3408	3152	msedge.exe	88
PID 3152 wrote to memory of 1140	3152	msedge.exe	89
PID 3152 wrote to memory of 1140	3152	msedge.exe	89
PID 3152 wrote to memory of 624	3152	msedge.exe	91
PID 3152 wrote to memory of 624	3152	msedge.exe	91
PID 3152 wrote to memory of 5552	3152	msedge.exe	92
PID 3152 wrote to memory of 3808	3152	msedge.exe	93
PID 3152 wrote to memory of 5552	3152	msedge.exe	92
PID 3152 wrote to memory of 5552	3152	msedge.exe	92
PID 3152 wrote to memory of 3808	3152	msedge.exe	93
PID 3152 wrote to memory of 3808	3152	msedge.exe	93
PID 3152 wrote to memory of 4448	3152	msedge.exe	94
PID 3152 wrote to memory of 2244	3152	msedge.exe	95
PID 3152 wrote to memory of 4448	3152	msedge.exe	94
PID 3152 wrote to memory of 4448	3152	msedge.exe	94
PID 3152 wrote to memory of 2244	3152	msedge.exe	95
PID 3152 wrote to memory of 2244	3152	msedge.exe	95
PID 3152 wrote to memory of 3076	3152	msedge.exe	97
PID 3152 wrote to memory of 5836	3152	msedge.exe	98
PID 3152 wrote to memory of 3076	3152	msedge.exe	97
PID 3152 wrote to memory of 5836	3152	msedge.exe	98
PID 3152 wrote to memory of 4592	3152	msedge.exe	100
PID 3152 wrote to memory of 2888	3152	msedge.exe	104
PID 3152 wrote to memory of 5200	3152	msedge.exe	105
PID 3152 wrote to memory of 4144	3152	msedge.exe	106
PID 3152 wrote to memory of 2768	3152	msedge.exe	107
PID 3152 wrote to memory of 2768	3152	msedge.exe	107
PID 3152 wrote to memory of 2384	3152	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x288,0x7ffec245c188,0x7ffec245c194,0x7ffec245c1a0
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,13439933089729417168,8067216725539893679,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,4212328295200000215,4066255885333861734,262144 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,7107908701352403741,6462953626887908070,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,562094303177523879,12719681102142695138,2097152 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,1069302780074612278,9196685704072110137,2097152 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,6194226454939739442,13459020760442085022,2097152 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,16898989882917157647,12288079926475039961,2097152 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:9
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,13933422338426827304,11745169885813623492,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,227425207536122891,2064524433397111311,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,8711932043334560477,18270618428052608902,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,8711932043334560477,18270618428052608902,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,7836725711074758761,10519313452802884892,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,17869079228548033170,7939678312258977793,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,11322303978369095807,7947122798555455139,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,1891264073572578739,655361699691272244,524288 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6268,i,16339564732996819146,16285848434235634240,262144 --field-trial-handle=2336,i,5513379230179095934,3471766111616149661,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d08cf57eced60b7c49e5f5a4b2a2ee5a8e8ef94daaeb400186a35309c3e435d6
MD5 8cc1d287c9a089fa5a3afa8267960e2b
SHA1 f252b3c6469d8abcd04fa2e070c3b025bb2125f3
SHA512 58e44fb2af54c13ae60f35fd00e9c23067e0151eac3d767a01dfc3a2ee2315f2791b130d25d6be35fe0dba37554e0c9916e8b8606f43c36fde8ea0f26f632bea
TLSH
T1DE616299076D6BEAF322717B6EE7D47971FE848601072E10D2046D785C16FF4A0F1563
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596bdf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596bdf.TMP
Size 3KB
SHA256 01d39d3ecfb29d522d3dd0ab0120b44406d1c5d9f3e7c8082ff7c1cc1b728b27
MD5 8ff1f963024681951a023e83e31a17ee
SHA1 804a3bfdeaceeccaea41636d0ad059fe9c4b44cf
SHA512 92a0402d0e41dff7e33a474ec94a6c154827149ca86c3f6beaa110d77b4a3b3b49abf49c4718981c61e6c8fd3071b8eeaa326be7b06edefd50814ede6782460c
TLSH
T1986161A9076D6BEAF322707B6EE7D4B971FE888601072E10D2046D785C16FF8A0F1563
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 61cf2b8892013d35aca1d5dbee377d46b4417ea3c5cbae37fd62cf862f74e019
MD5 516cf4fe5f03b7cb4850e2a65723f10d
SHA1 96586109d6bf5037b1e12fb71abdb12d192a0612
SHA512 0ccd58bdc4cf217f5924ad846bc1249ee9845dc89e79c3a31137777edd98d6d2bca6b448de871f90926cf72baaf2a23bdfc2f0b6c9250b9598062b099c6e7105
TLSH
T1BD51ACF3C3E8867E890156F0AA147E2FCE2D0955832C3C5689E4AF1BA7E24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7843277b89f3b08d9e38f6014864b2bc3d7138bb41e40abe6b3e42790a4dff6c
MD5 e98845fc1d61720bbde8ecb117eb3fe1
SHA1 b69d8b0b7900e79a424a434e18139f1b5e10f9a1
SHA512 4e0959379c9d10eef0715b3db897c98d90f6466d7058f24de1e3c4e1cb1f8c9db8b3f3e852edc6e1c8f763a90b927ee40f6346ce099386b1ee0a401d38b796db
TLSH
T19451BDF3C3E8866D880156F0AB147E2FCE2D0955832C3C5689E4EF5B63E24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1b69a44f346ed51776661e6c1000fd7d948834131510d0271bd47310541d0030
MD5 80e18f436938633edc9ce99621a26bbe
SHA1 ede759768e50d33910110c71d06acbf4d945e7f3
SHA512 602a7c5c9d5570407dac7eb7ef13fd7b5b86bc0d1322539e7a0d0441dc1f7425b1ee107619578c729b16d7da4f5f5ad0466bdd169e9c39fbedd5fdda5dfcf825
SSDEEP 192:sxR0UCRTObjY/fSssjtsv53THFSa6QZzoA8p40z/g6+WNIYbsZ6AeGAtGIgDWIaJ:sxR0UCFwjY/fSssjmv5DlSa6Qkzz/5IO
TLSH
T1BB32A5166A28AD3B9CC6D21DBB567F93D2F91033A1912E48B7FC870C14EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 465e32c96e18149376f06b16b68455bf09f7e09a3ae8d6f9fd46dcf938841c38
MD5 1ac4185fee359022949e94649a7131e0
SHA1 2051f40bfb80cfe9c6117ac9a239892306911d81
SHA512 4eae53738b0feb8d1e290d2b7ce386b4c8cf967e692d52bec2cfc6ecfc397a529e8afdef3fc42aa096eb1a9a8fa44682f9f39f0a51e3e3a3a2bd0cf425cf1b90
SSDEEP 192:sxR0UCRTObjY/fSssjtsvqTHFSa6QZzoA8p40z/g6+WNIYbtZ6AeGAtGIgDWIIJ:sxR0UCFwjY/fSssjmvalSa6Qkzz/5IKK
TLSH
T17032B6166A28A93B5CC7D21DBB56BF93D6F91033A1912E48B7FC860C14EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0cfbcc6a966411e3f8943e279f3396500e9b353a5fd2be8a24ab8534b7cf7b57
MD5 db265ee167e6d18567a3f99f92c61efd
SHA1 26a0cb2e17ebc59b64428ddd57bab28c30631646
SHA512 f269afdb5c385a00796f7c968d282c8578bc25886d6be4bcd8cdfdfd0c37251e9ad572407df4dfcb62c78dd5f157e25bef4b7f096084b9af3a603353efec7f3d
SSDEEP 192:sxR0HCRTObjY/fSssHsvqTHFSa6QZzoA8p40z/g6+WNIYbtZ6AeGAtGIgIJ:sxR0HCFwjY/fSssMvalSa6Qkzz/5IK6r
TLSH
T17932C7166A28AD3B5CC7D21DBB56BF93D6F91033A1912E48B7FC860C14EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 1630fd0873c96427800fcc850addaf9f7d024d148b95f25f7fba9b4f8634a567
MD5 0258378cf77165bb6caa4f9308f8ac7a
SHA1 e80ff50e3223da708e85c8ae9aa4d136fa84622f
SHA512 12976f0acfdfcd10c5c98fd25220e229a738849796265d667fe4232ace4b97473178acfc8131f37554eb62dc3098b30e2e5a65dcfb55e7efef7c0305e0e33d39
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFjuroAD:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Vz
TLSH
T156B2DB2B204DCB7E5F800A9DDC19AFD76D9802C797988D4447FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0dce46a419beceff69cf02a65d800e9f8113f3b0e41c890293c3dc4d26ef7996
MD5 db2f9af8646d0fce63e601a46b35fc30
SHA1 8611f33b9f38d643bf18d0484319d0b27dc678b8
SHA512 36b1ff3b4b7f6124c9313c6ffd3dacaa7aa330a5db44ae453b2a6e4afd58529f5f0b1b3deee56d0161b10da9607bafc1e67f3643a7ea05be5a2fec7047ce780c
SSDEEP 768:Wuj+9l+3I8IWfmFqCWC1BqobGOeTtKptZu4aWADIidy8Lu53b9MTla/:WN9l+3I8pmFqCp3ptZzaNsuVL03b+TlU
TLSH
T109F2AE36FC168E739CB69294B2833A4BEDF4926386C91DC489EC1F4E09C757D4316D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1425140aa45ba353ab4a7f8894c62ffa8c818ae364440c821450e15d3cc11d6b
MD5 ecf81235d24dadbfc63c0a77a2d696e4
SHA1 10753e1743c46f4d4988b9fbb0a581566de81046
SHA512 631a50280401d19c8e2a6d4aabcfdb8c9a36a0b6879e9ed543602a0ecb5670da0be68a2c0ced669a83717bf68fbee16436276f212cd9499ed7d5cb7b743d814c
SSDEEP 768:Kj+9l+3IfIWfmFqCWC1BqobGOeTtKptZu4aWADIidy8Lu53b9MTla/:p9l+3IfpmFqCp3ptZzaNsuVL03b+Tla/
TLSH
T13CF2AF36FC168E739CB69294B2833A4BEDF4926386C91DC489DC1F4E09C75BD4316D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6f5e0afffd849be8c0326b8fe36f1e76b025f2036fca8b9a5e2eb809c93399f6
MD5 ea75602853d47e85c1ccc7972ad8a2f5
SHA1 f1b8b61060e8b8ceb4d612786c88ba7ea8a0e68a
SHA512 55cc359484bdce6b82feae2bcbad84227e355be606670d3c0729fa368c031deede4ef9e9999a6d6cfc9b4fe55a7d5a7845dd8fdc54b13ba96d29cab84d98c2c1
SSDEEP 768:Rrv+4UNbdv+3IfIWfmNqeWC1BqobGOeTtCtZu4aWADIidy8Lu53CMz:Rbsbp+3IfpmNqepftZzaNsuVL03CMz
TLSH
T1D703BF36FC198E739CB69284F1833A47BEF4915386C909D489DD1B8E05DB8AE131BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 88940ac8db003abb055dcba40579edd769c8704041dad3145c464dbbf08c7dbe
MD5 c0d5c6232f3d262b0bb80c8ff4a0e4ff
SHA1 2227006af8d4f45c35feca25ea7f2af9f095b6b2
SHA512 2d99d96cf9ac2815d0c6bd4c8a74ae15313ba92ea93ea7d73422835ada615574c2ab9a0eabb6601317f094b5e09f28a4fcc0c502a86d49bfa2a76a71988c04da
SSDEEP 768:eVNpF1j+9Mb+3IvwgMIWfmFqCWC1BqobGOeTtYptZu4aWADIidy8Lu53b9MTla/:eVNY9Mb+3IKpmFqCppptZzaNsuVL03bN
TLSH
T12D03AD37AC46CE77ACB68784F2873A4AEEF092A3C58959D49ADC1F4E05C75AC4306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d53e113fa5345765d10c121de80f4cb532df8c063386d2f7a19a2aeb918661ef
MD5 eb463e472167bf79dd60daa4cb6d1dbe
SHA1 646f27b105fc2093944adb3ac75427ad9c890504
SHA512 a3de42f112aa48ad7a20f804af25208c06081db5c44d6ab8f90cb1a938baeb68c46de897b3be9bb64efc7a276492ba2ec47eb7f5cab610ea88d331a9620146cf
SSDEEP 768:9rv+4UNbdC3TAKkTBqobGOPpZu4aWADIidy8Lq55eVH1S1C:9bsbw3MKIpZzaNsuVLY5EH1d
TLSH
T19A03BF36EC59CA739CF79284B1877A077EF8926386890AD088DD1F4E45DB4AE1307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ececa8d4-d863-4d3e-bd54-1b14baf8639a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ececa8d4-d863-4d3e-bd54-1b14baf8639a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download