2f9059575649dff69052f041fdd26426ac7c7d82e788e64310e6a332887cfcb5

Analysis

max time kernel
149s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 17:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1.9MB
Sample260721-wjtk6sdd95
SHA256 2f9059575649dff69052f041fdd26426ac7c7d82e788e64310e6a332887cfcb5
MD5 3b2207951e4af67226cd5afdaa8d44dc
SHA1 3e3daf94b0cdcd53f5f7e1b32f6c117771af443b
SHA512 00972b7675ac2414b406e1477e96bb0fb910eae9e0d5f434e61f74106631f559a4ea9cde56e3baa399497ab920ff02216a172e4f753eaf76589376989a877040
SSDEEP 12288:xEoSo+cR5IzXMuo73GAl7GifxG33tlNcl2ab16rQYrXoJch9IJoZfngxXVJSU3zD:SS+6IzcumF7GifAM3UTt2isz5F
TLSH
T1D495C6A4ED3C84A7966159D829DF7958B51E3389030E6E402E7DCB3C738736F650A38E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291302597915355"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{7D6CD036-1BBF-4051-9D35-CDC07028D594}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5604	msedge.exe
5604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 476 wrote to memory of 2384	476	msedge.exe	88
PID 476 wrote to memory of 5004	476	msedge.exe	90
PID 476 wrote to memory of 3432	476	msedge.exe	92
PID 476 wrote to memory of 5004	476	msedge.exe	90
PID 476 wrote to memory of 5004	476	msedge.exe	90
PID 476 wrote to memory of 4268	476	msedge.exe	93
PID 476 wrote to memory of 6128	476	msedge.exe	94
PID 476 wrote to memory of 3396	476	msedge.exe	95
PID 476 wrote to memory of 4268	476	msedge.exe	93
PID 476 wrote to memory of 6128	476	msedge.exe	94
PID 476 wrote to memory of 6128	476	msedge.exe	94
PID 476 wrote to memory of 3396	476	msedge.exe	95
PID 476 wrote to memory of 3396	476	msedge.exe	95
PID 476 wrote to memory of 1064	476	msedge.exe	96
PID 476 wrote to memory of 3476	476	msedge.exe	97
PID 476 wrote to memory of 1064	476	msedge.exe	96
PID 476 wrote to memory of 1064	476	msedge.exe	96
PID 476 wrote to memory of 3476	476	msedge.exe	97
PID 476 wrote to memory of 3476	476	msedge.exe	97
PID 476 wrote to memory of 5832	476	msedge.exe	99
PID 476 wrote to memory of 5832	476	msedge.exe	99
PID 476 wrote to memory of 4572	476	msedge.exe	100
PID 476 wrote to memory of 4572	476	msedge.exe	100
PID 476 wrote to memory of 5716	476	msedge.exe	102
PID 476 wrote to memory of 2644	476	msedge.exe	106
PID 476 wrote to memory of 4592	476	msedge.exe	107
PID 476 wrote to memory of 3616	476	msedge.exe	108
PID 476 wrote to memory of 864	476	msedge.exe	109
PID 476 wrote to memory of 864	476	msedge.exe	109
PID 476 wrote to memory of 5604	476	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff83f1ac188,0x7ff83f1ac194,0x7ff83f1ac1a0
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,4021087605291334343,16775626282986531623,262144 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,1987496676221199078,17320426958118899447,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,976124404048728380,6337581221928976239,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3364,i,1165667462948704853,779781969021955760,2097152 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3368,i,4570731926827036517,17354629565664595792,2097152 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,18130469246627866063,8006165906923895875,2097152 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:9
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,5152295626833526122,16160294720833211360,2097152 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,3537841829891023734,702940231061430526,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,18313115464961294977,14876548109160016264,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,2022538101310795873,10103288096938073938,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,2022538101310795873,10103288096938073938,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,15614223205591391849,17310684066710210048,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,9736879272479592351,16095565432492501111,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,6814670445154887532,6479507160874311428,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,62568806343934284,13990387470865046411,524288 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5656,i,4594012373011753636,9487888689651696218,262144 --field-trial-handle=2212,i,5781366551517192710,3422411725369070125,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 98876c4df7ec44a626b5bb9dfc280e2b5ec67d07240c033c7dc3a2dbff16b6e3
MD5 804aa4978da7e9e24f55330f9c7b9b7d
SHA1 668e0b60afcb5a3735027960ecf34483adc72434
SHA512 cc46f934f1dffbdbfee4a7f0032d33fc762908224bbf5a09372c9b62cb9354af5689b12e5fd908b8fa30637ba16414143f042f239a77cc39b790dfdcd629f212
TLSH
T1B561E7A3936725D1E76B6472E3F1980937F8A44B81A72E0343D25D38180AF4CD5DF667
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a00f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a00f.TMP
Size 3KB
SHA256 a251bf4176bc644c5b5457697d79a4e993234f6608a4921e79341d8ac23ef505
MD5 5f71c626c338e7e29cf70810fe5e93f8
SHA1 faf8ea9c57352410fa0f2f4643e653210cce7d07
SHA512 2874415e880bd0338a929112f3656e40fc5f82c41d04f960b55828fb6309b90015c1e74c5c434d5d4e9e889e1fa09e88f0b49057044fbb029efa9049de2ec909
TLSH
T11E61E7A3836325D1E76BA472E3F0980937F8A44B81A72E0303D25E78180AF4CD5DF267
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a719ad32d8a0846592c0f367e47c410c0d6f55b8115f92e0ebcef5472f2d5d1b
MD5 7d0cde0317e7e86587bd3b633d7742b6
SHA1 8525ff5f29a382539ea001462928faa3b4901931
SHA512 bdaeed5b211bdb931c005d9d8499b10fac631da297bc57dd4274c413484d953020e274d3a4de598bcf44fcb02bde604f5b0fb35222786f4471c37c121b0abf01
TLSH
T12B61B1F7C6E8867D890156F4AB157E2BCD2D0919832C3C66C8E4AF1B63E2471D24169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6ea6094ebab4ead581098f633396a5c066815021e863f461ce675ddbe635df21
MD5 552d93fc508f3c7a1618545eef6e940c
SHA1 9d58dd2655c376ac429472dc88bfe12e8e602418
SHA512 4a79fe5267b74a84463d618f6e51d3d7bfcd94fb42bb93c467e7fa1908238136ef636740d9b11b47897c8c84a5ae248bb1ccc6d6041c302cb9e8b4c6b2a04667
SSDEEP 192:sxRKKRTbS/f3sNVDde5lS8zoD8p4c/g6+WNIYCyuOjGVIgIJ:sxRBdS/f3sNVc5lz5/5IQws
TLSH
T1E332B7165E28993B9CC7E21EBB55BF53E6F95032A1D01E48A7FC860C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e289f9ee7b1cd2f949fc43d75881df1c89023add5b0e4061e7f49fec4b849cb2
MD5 555a884c228c9fd504826b180b6a314f
SHA1 bba3b9ea64167951ee0d04b49ae25969d1d36992
SHA512 fcd15cb06a324c331962c79394ba69b92372b4b01c48f5701063c3c87badd1f6a6995df9fbd03f508c0a378124e3a7a3727ab2dbd327e0ee9889324057237349
SSDEEP 192:sxRKdRTbS/f3sWVDde5lS8zoD8p4c/g6+WNIYCyuOjGVIgD1J:sxROdS/f3sWVc5lz5/5IQwj
TLSH
T1AC32B7169A289D7B9CC7D21EBB55BF53E6F95032A1D01E48A7FC960C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 19e2efcc5ab543b77a3c17a4bc35e40af6d2d6930f876c78233badd5b16f4735
MD5 8d6f5ffcbb29a62b854a8b0acb3dfd16
SHA1 4aa5afde3a7c066a15da5b5248bca54e4fe6cdc5
SHA512 e1a55ddc7137807a78afc08416444d5e5e2bf953c9ec3e46ac8162228e5582287a59e806d81ea6562379f1f1da8ea9b1135e96b8cc1f7afedaefbd79acbd3209
SSDEEP 192:sxRKdRTbS/f3sW2Dde5lS8zoD8p4c/g6+WNIYCfuOjGVIgD7J:sxROdS/f3sW2c5lz5/5ITwh
TLSH
T11042B816A9289D7B9CC7E21EBB55BF53E6F95032A1901E48A7FC870C04EB6DD220750F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 6017ad41b8384c6264c65d32444e1a5ceec98f7f08cd5fd37a964d26b1e603f7
MD5 bd623f9bb3522b838923c42162949a17
SHA1 8d2e65673fa04ea6d6a599655740b6fb00d6b672
SHA512 9a3e17791e7f818667d2fa35d259714236805fde380156605227c44bb237653e4e52ef14f7b4f3b156d2d83eb645aafcec3049e33643e4195c88fa05b61b3152
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvNroZSL:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0V6
TLSH
T184B2DA2B600DCB7F5F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a39be.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a39be.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 9927c6c443c3825989d6275e84eaed3f2415d24e93e8751f6b4213aa4f95cc8e
MD5 f68bc0e9e57e427ce1179acee5d98ad6
SHA1 a4068bdd8c4edbfbb8fd5c2aa085b4b86a01e418
SHA512 726f29ce806a386e3b5fd14583a5e9989b995e96c92c6d7273b907c2b32f56697c147ba4b2517012459e553291b0a9e3e4e340bf264d50dc5f4dd8e61b2367f2
SSDEEP 768:sj+9T3BgVZhVp8+p3bd66j+4BRv86aLIWr2X:r9T3shj8+p3Z6n4ylw
TLSH
T172E29D72E8A99D378CE1C689B2473B47AFF4426396C02DD4D8DD6F0D01D72AD530B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b76c89e87f1e17eb61707e31ee019342d49863aeeee7177994c4cfc6a1b397a8
MD5 fca313e39ab7f22ac1458ebf66e73ca7
SHA1 723908280f4f8b2c3ab715581c12623b68c8d9a1
SHA512 f7aaed60ad2698a5cea859a00dc51355a3c1f7f47bdab070ad44ee5d328332beb0ad3e8565368566015c14ce8e8283e70025aea42a290cdde3f59ba3fd725ad3
SSDEEP 768:prv+4UNbd93QcVZhUp8+p3bd66j+4BRv86aLIWr2r:pbsbv31hi8+p3Z6n4yl8
TLSH
T1FF03AE72F96899379CF2C644B1873B437FF8515396C01AE4D9CD6B0D069A1AE230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 2a7d6af3a3345e2239656552db9258d4acaa5d0541b90aa872737a12a3af982b
MD5 4f8b8292783e1ca70de0fc1325662ade
SHA1 9a0b76ce54fe74a3ffff18984e16ae035b39e3c8
SHA512 26609973df7815158ab8d57bb8d52c829a47c68b4398b3f4239d5bc057feadc1394cc3137bda60373af19ae9e83c92caf1336b8bcc8edc9500fc8d59c543cafb
SSDEEP 768:xF1j+983FwgHgVZwp8+p3bd66j+4BRv86aLIWr2X:Q983OO8+p3Z6n4ylw
TLSH
T1C3F28D73E998C93B9CE58B85B64A3747AFF44163C6C029D4DACD6F0D01971AD130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b5f228530d3fa4435590ca8395265606f97557ca5b56c5be252289ba9e95afe5
MD5 eb85d43bbd35a4827735687e685c38dc
SHA1 43d4bca7b99b782cd8b92127bbb49dcc395e15fc
SHA512 15af657c3a2f2b4179b3f3f6f2c668972de11aa658ba5729f379f2b9ae0783767ce2101f92103a0e25ed83af117e0ce412f9d974ef4ebbb0da82f1f7d080f3f9
SSDEEP 768:Irv+4UNbdD33cZZNp8+p3bd66j+4BRv86aLIig2bwCl1:Ibsbp3oZL8+p3Z6n4yK0ww
TLSH
T1EB03CF73F9A899339CF6C644B2467B477FF851A396C10AC4D4DD2B4E419A1AE230BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a48ac08-2cef-4db0-8d15-d88ed43f8ace.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8a48ac08-2cef-4db0-8d15-d88ed43f8ace.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download