d6f7ffef4793e7429a8f5cc5f45fb957e439dcd4a8a8775b3fc2a8f423a3850b

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 561KB
Sample260727-phvnhsstex
SHA256 d6f7ffef4793e7429a8f5cc5f45fb957e439dcd4a8a8775b3fc2a8f423a3850b
MD5 cb00f860d79851adcbb195414679a378
SHA1 0d53925bb79f752f713b3d24f64f967dbae0b542
SHA512 00bd9af7f23e9e1623c1478f5880de8545e344fdf9745f2a33c761aa03b42c8998e4b873357ad74c763cd4816d468d6943893c9ae08c52e6e669ae671b613b92
SSDEEP 6144:EaYFpznUjsvSnUjsvYuLIgWODKHVALl0x:EaunUjsvSnUjsvDU
TLSH
T14CC409736674203DB51743589451B37E6B6E50C2E3CA0AE4F7EFFB288BCA5E20072659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2848	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296284280387204"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{2A88F85E-AAE2-4D2D-BD6A-0F08D4B37D7B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4284 wrote to memory of 5980	4284	msedge.exe	88
PID 4284 wrote to memory of 5396	4284	msedge.exe	89
PID 4284 wrote to memory of 2848	4284	msedge.exe	90
PID 4284 wrote to memory of 5396	4284	msedge.exe	89
PID 4284 wrote to memory of 5396	4284	msedge.exe	89
PID 4284 wrote to memory of 3320	4284	msedge.exe	91
PID 4284 wrote to memory of 3320	4284	msedge.exe	91
PID 4284 wrote to memory of 5820	4284	msedge.exe	93
PID 4284 wrote to memory of 476	4284	msedge.exe	94
PID 4284 wrote to memory of 5820	4284	msedge.exe	93
PID 4284 wrote to memory of 5820	4284	msedge.exe	93
PID 4284 wrote to memory of 476	4284	msedge.exe	94
PID 4284 wrote to memory of 476	4284	msedge.exe	94
PID 4284 wrote to memory of 4372	4284	msedge.exe	95
PID 4284 wrote to memory of 4372	4284	msedge.exe	95
PID 4284 wrote to memory of 4372	4284	msedge.exe	95
PID 4284 wrote to memory of 4564	4284	msedge.exe	96
PID 4284 wrote to memory of 4564	4284	msedge.exe	96
PID 4284 wrote to memory of 4564	4284	msedge.exe	96
PID 4284 wrote to memory of 472	4284	msedge.exe	98
PID 4284 wrote to memory of 472	4284	msedge.exe	98
PID 4284 wrote to memory of 5616	4284	msedge.exe	99
PID 4284 wrote to memory of 5616	4284	msedge.exe	99
PID 4284 wrote to memory of 2796	4284	msedge.exe	101
PID 4284 wrote to memory of 3380	4284	msedge.exe	105
PID 4284 wrote to memory of 3336	4284	msedge.exe	106
PID 4284 wrote to memory of 3716	4284	msedge.exe	107
PID 4284 wrote to memory of 1020	4284	msedge.exe	108
PID 4284 wrote to memory of 1020	4284	msedge.exe	108
PID 4284 wrote to memory of 1988	4284	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x234,0x7ff82541c188,0x7ff82541c194,0x7ff82541c1a0
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,13150718754927109786,5784159095129503980,262144 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:2
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,4022677158679581673,7731347563365869538,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,14534212252523937201,14817349574355204934,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:13
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,11114662207412999245,6980690795219919805,2097152 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,14610603978159503334,286438264306145730,2097152 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,10481332952495440060,6404692289035612736,2097152 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,10520957484749305539,16706635828715054248,2097152 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:9
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,5071754058164789121,17578945801499058891,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:14
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,4006920212584498570,323879683948424065,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,107783564381288458,9669931748011338805,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,107783564381288458,9669931748011338805,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,10942765625957317316,17510392048202361134,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,9352716474042591746,8459065346948072440,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,6442867199571881303,7388404196001628904,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,7688178905675298320,4176810994186126317,524288 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6508,i,4846398034218309527,12523471544771150627,262144 --field-trial-handle=2800,i,9528052004240062141,8309966126099194161,262144 --variations-seed-version --mojo-platform-channel-handle=840 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 f9b8ee91ec88707e04b3f1fbf338f5b67d3878393a14a04add9067694b37512d
MD5 12382183f7b03354bfb05ec8bfa7cab7
SHA1 a3b522f2e7ee3cb0c02f164ccd938c4e419e2056
SHA512 140193da59bde407dd176308fb7ad149e9eefcf6fad2d5f1b3db38c6db697c1846276cb680140be9164e825e719b1170a153f72c5f26dcf3995ca9a8ddcc10ad
TLSH
T1BC41FA6ACBF8B8DDD79248B110E0116A32F484D9451BEEA172F09EB34AC3F3491F8123
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 79a7f38bc3f7e98026aa4f705f66626a2f4a527217e26daa2ad89aa32b128258
MD5 b74edab87d64676dcdd60a27eef9e8db
SHA1 7f37a272111cb17b63bf9158cfbe2d7e07745c43
SHA512 047e8aa275dc3e4533bab12011b61abe3d8997eeb3358e3d65041a7e160ac1acf7b1739e9f6c3962fe3cf1237308b98b9318971d7dfc693012e5d562dd51ffe7
TLSH
T1FC71ACF7C2D8877DC91156F4AB247E2BCD1D091A82283C5688E4EF5F63E2471E24169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88c4584429a8fd358c7bf5894d09a016c6eda69830af1cd34277f65a3a6a9f0e
MD5 ee92fa0659d627a7092f6f4dac1fa8e7
SHA1 08736b414362e7f4208a34805d4d487a39cbf48c
SHA512 c513fbc212e7e01882cbc29ebb163817e409d1d2733ba63ee5a04eb0b69d7eea3ecac071e6e33a11a4654213ef5a81f892ba242d2b5a198cced4346efe0c452a
SSDEEP 192:sxRHRHbN/fnsFW3AtWzoA8p4wy/g6+WNIYZFLKTGdIgIJ:sxRHdN/fnsFWGJy/5ISds
TLSH
T1D932C8166968A93B4CCBD31DBB55BF53D6FD5032A1942E48B6FC8B0C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c7c7a22f721e243a8d7308691e3cea3fec8a47858d18e84046ee82a394efbe09
MD5 71cfccb9a5e1633a359c80103145df6e
SHA1 0b9cdcfb868ac538876ec0e019c207bfe228fd7d
SHA512 7ff9819e14de5fd7cb45013c3e8fef2bd1a0766917c8dac845bc58ac4f810fe4b2bdb3237143ffb4015f4a0e51174766b46dce3104c6165037d5e17720afd32d
SSDEEP 192:sxRYRHbN/fns+X3AtWzoA8p4wy/g6+WNIYZFLVTGdIgDjJ:sxRYdN/fns+XGJy/5ISyJ
TLSH
T1C442E916A968A93B4CCBD30DBB55BF53D6F95032A1901E48B6FC8B0C14EB7CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 36c6ce48b1bf1ca111cf0c921e7dc2929f62954ba21327da8bbf7d0231a4265c
MD5 3b0f932b99b3e72b043608e33559d907
SHA1 8611701f5c18d49ba7244fcdafa20de15afb28da
SHA512 1d9c395fed74126d6c38c787ccbf4c511c97d44b761ed92b2e5e63c278b7ebd9ed0c25b20efb9bfc2e4f5cde284017a05cc4f86a8f9d5b7fb547d00e2a7a0744
SSDEEP 192:sxRYRHbN/fns+W3AtWzoA8p4wy/g6+WNIYZFLKTGdIgDNJ:sxRYdN/fns+WGJy/5ISdb
TLSH
T10F42D916A968993B4CCBD31DBB55BF53D6FD5032A1941E48B6FC8B0C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 eae46d4bf08204c6409d5de1e8a5e9d5decbe8ab8887f24eb240821097a4c7a3
MD5 de2b4a6a1e4263f5b866fd78f333ac5f
SHA1 2301a5d082175143d14909aafa3d0cb1b9878ad6
SHA512 92304acc28e3b9e6c277e8413156e1759b11f14c7b6e73283ff799f73090e8511e4fa3769125834eb2fe2eb49cdc9263002328dca6c534228f8d5a0c314209ef
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGYrocmE:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VW
TLSH
T1ADB2CA3B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0dbd77d07a01ba690fe0a4aa155f99f57e244e1156c2fdaa7c4c12066db82ff8
MD5 f48122790afd82fda61e423ff91621c3
SHA1 174ef51006b204dca5708a456f02009d8c6449d7
SHA512 d74a7b6d45671213fa01d015c8fcddc21b303ac06eaf4a37a0fa623fdfd07f7bed1830769be055866e8ec884bc6ed2e302ea05cc91c525e9ccfd697ac5abe8c4
SSDEEP 96:KRT8ZNbRRtWFKAg1tK4MgbtcjbylxWH+zC+4AwmWgFNg+mK4jg8mc2edsZYgKdSm:CT8ZNbRRIFKR1nMgbCjbylxWH+zC+4A0
TLSH
T1BB914201707A1250383D7A1885F4AC6BD7C2B4EA3459E86B7BE941E24F67E024EFCDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8a40.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8a40.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 eac111e0f1be55bb2ac2121737bcc70ba8cc89fb0a7e5906335c2629515d4029
MD5 3d50bd73c34882a7bf9466a0f481a8bc
SHA1 dbef6795ae54e54de4dd0fbb0883b76edb36ee30
SHA512 7c7bcc4c598cbdb1c444021c4bf3a9ea47567136b3a4a02fcf17a9c8867c9a4b1b09c78da2fed7503f488b4e007cb7e82b2d1b0206dbd3cbcd961060f968105f
SSDEEP 768:/rv+4UNbdA3nW8G+LeSFOUkdXX4fouOToPvB2thtA9VAgyOPR4:/bsbW3nWXsnnwthttn04
TLSH
T18403BE72E8A88D23DDE6D398720B71437FF0915399C00B949EDD6B4D069BAEE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 71e94bd60ba467a01bece6a9207a0a7867bddf5d8e8343e1f2b0123acade8322
MD5 9c4e18c9af1c541ec3c6646497bd3025
SHA1 3ad6563d1b4ded7a84b7a72bc1db2e411728737e
SHA512 2ebbe30c51b3a47aaf44d2147047e5276229a25521b7796ad689e2dc76a0c9dfe4ab6991e8ec38fad8fb0724d720c9d87ff2221c934c3aada2f4c06ed9a19e37
SSDEEP 768:Vr3cWnG+LeSFOUkdXX4fouOToPvB2thtA9VAgyb9MRe:Vr3cWysnnwthttnb+Re
TLSH
T17EF2C072ECA44D73DC9AD3A4320B36526FF09123D6D41F846ADDAB0C0A57AED470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3bc5a97482d09997885e0eb8e76d5492254edee84ffbc1f58bd882916bcf8e56
MD5 a959ef690f5b6a025d911d534b82cd25
SHA1 52486e4abd880c95e9eee0cff1bad347767102df
SHA512 d41599ceb6c95652b36e07e35403ed6c5d365a40a86362f1790a091dff971b6948b7695e1a427040e50bc3963570af597af527e8293d80b0380cd1b35f8e3ea9
SSDEEP 768:Ir31WnG+LeSFOUkdXX4fouOToPvB2thtA9VAgyb9MRe:Ir31Wysnnwthttnb+Re
TLSH
T1A4F2C072ECA44D73DC9AD3A4720B36526FF09123D6D41F846ADDAB0C0A57AED470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0b8545fb891f5aa33958b6c283b21bc639a5800ee90ec2483a4b2d2a5868a31e
MD5 31172576a7a37a2af1f82ce4c0a99b8d
SHA1 1db11232915ce92756fad9180a5b1c718b2870ff
SHA512 2e845e8574619f0304f0ba15597478336472de1706843b47753381bce281ebba83b829ef6c7371b6a1d5fa08c47eeb365bf1dce29d0047544bc54581d4420b75
SSDEEP 768:grv+4UNbdH3H1+LeSFOUWX4fouOToPvB2thtA9VAw+eVH1SlX:gbsbh3vsnnwthttLEH1Y
TLSH
T13003CF32A8A88933EDE6D398720B75472FF4916396900BC49ADD1F4D079B9DE070BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ea752aea76a6499e4e05058c42074babcbd1a510913b37b2f2e89f6ec7fc373b
MD5 9f84e91bcc9dde008367a6ec1dc7ccbb
SHA1 addc54ce5999803bed2437a5472a8c6af3900e05
SHA512 d66d5e3215346d412601939a1cdda90e9af7c1d2581e3c4507ad67fbf359ab0604bfc11b3a9fc31a385e216292408dc664595940d281d2a14f16e6dab78c9305
SSDEEP 768:BFQk3LwgxWnG+LeSFOUkdlX4fouOToPvB2thtA9VAgyb9MRe:Qk3rW+snnwthttnb+Re
TLSH
T17003BF73DC988977ED9AC7A4720A32129FF08163D5D46B84ABDDAF0C05579ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download