788d0aa5714debf87160caecfbbc6cf0f6a78a73bc24471423784e0faf16f057

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample260805-pfsfdaxbmf
SHA256 788d0aa5714debf87160caecfbbc6cf0f6a78a73bc24471423784e0faf16f057
MD5 d4d77bff234513d649bf45ae6b1380e5
SHA1 61e792cddb4935b02fa1749f26e0fbdd5e375c13
SHA512 34de4a50486689ebe013676a057e62819c16df8d4687b2a437c3c39f43fcb27f5f92f74724843b6e619cf11e5be9c89e37339852c6aa29de272ec6c322ea9350
TLSH
T13021EA372A070927D6455E9F7706FBC09D82A8C9A2FD266C705751CFC4CA2B98B9C3C8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5016	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304058087764136"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{D3FD9159-393A-4A0A-92B1-B9687A637140}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe
1480	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1480 wrote to memory of 4760	1480	msedge.exe	90
PID 1480 wrote to memory of 5016	1480	msedge.exe	91
PID 1480 wrote to memory of 4996	1480	msedge.exe	92
PID 1480 wrote to memory of 4996	1480	msedge.exe	92
PID 1480 wrote to memory of 4996	1480	msedge.exe	92
PID 1480 wrote to memory of 2812	1480	msedge.exe	93
PID 1480 wrote to memory of 2812	1480	msedge.exe	93
PID 1480 wrote to memory of 1748	1480	msedge.exe	94
PID 1480 wrote to memory of 1748	1480	msedge.exe	94
PID 1480 wrote to memory of 1748	1480	msedge.exe	94
PID 1480 wrote to memory of 4492	1480	msedge.exe	95
PID 1480 wrote to memory of 4492	1480	msedge.exe	95
PID 1480 wrote to memory of 4492	1480	msedge.exe	95
PID 1480 wrote to memory of 1416	1480	msedge.exe	96
PID 1480 wrote to memory of 3960	1480	msedge.exe	97
PID 1480 wrote to memory of 1416	1480	msedge.exe	96
PID 1480 wrote to memory of 1416	1480	msedge.exe	96
PID 1480 wrote to memory of 3960	1480	msedge.exe	97
PID 1480 wrote to memory of 3960	1480	msedge.exe	97
PID 1480 wrote to memory of 6052	1480	msedge.exe	100
PID 1480 wrote to memory of 5468	1480	msedge.exe	101
PID 1480 wrote to memory of 6052	1480	msedge.exe	100
PID 1480 wrote to memory of 5468	1480	msedge.exe	101
PID 1480 wrote to memory of 4680	1480	msedge.exe	103
PID 1480 wrote to memory of 1528	1480	msedge.exe	107
PID 1480 wrote to memory of 5460	1480	msedge.exe	108
PID 1480 wrote to memory of 2660	1480	msedge.exe	109
PID 1480 wrote to memory of 708	1480	msedge.exe	110
PID 1480 wrote to memory of 708	1480	msedge.exe	110
PID 1480 wrote to memory of 1472	1480	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ff8af3fc188,0x7ff8af3fc194,0x7ff8af3fc1a0
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1696,i,10905615929643295954,8097820582327196543,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,2307112713125799765,6265021117037188259,262144 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,4901923897912885425,12471411876564634426,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:13
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,15939227404722949376,9494349654900756587,2097152 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,17395730133564555037,3872500614532760319,2097152 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,2670002905348625738,10636614916361051726,2097152 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,12545082095068826152,1485041018669136264,2097152 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:9
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,12280027122812667028,8733210301133846828,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9692699949035550284,5667895918685457390,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12164892159554340950,5878255365988408895,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12164892159554340950,5878255365988408895,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,1826047677892727601,2354790636467186777,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:14
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,13111426832313631364,5809762592560586198,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,3439825037026630063,15193495024651480559,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,17359883514991006633,15440751452450583694,524288 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6508,i,14301460089296648967,10778211551511936359,262144 --field-trial-handle=2312,i,10324919016119942472,2253439230258429283,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 b10e3a3b0815d6faecf74ef22044a4c68e22c7b5825a3ce3f28b2594791ce68b
MD5 83e7978b8bc6f97ab4c4123befa470cc
SHA1 d0068e0d3c582665dcbe63aea89e568a873ce2d7
SHA512 687906ebeb7685eae6b1f837a1c9ae268edc9ee751c19d428adefc584b1a71102179b7d7cac7f6798262b6e1dcd987a242a7855034041143670fe3c9e25855a4
TLSH
T11621C05403A76DCFDB94CDF315E1C2A97E30A87D4A437E915409717DED06754B011460
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b368.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b368.TMP
Size 1KB
SHA256 a0d93d43ffce571defaa3d2d3d29474ecc07feb63762640ae6347b0c9a385e37
MD5 efa24dc98ebdad6548b54a1a04e8320c
SHA1 cd2e9253a641534176e2f3ed2f66aa7facbec8d7
SHA512 855f18cb96405b5efb5a94d3d2ddfcaafeeec78432adccbddaaf783afd030505d791c9fe173d3ff5511406ed44aaf1a558570b40c60a89c0bd32feb773905c4b
TLSH
T1FB21CB9803AB6ECEDBA8CCF329E1C3997E34A87E4A437E915809317EED12B54B050060
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2d742d52f063831d39b8556ec71e9b7bbc3f0a64cae5749e02143f2a6f280e5e
MD5 17ef5e49521f8246795c844885690c7b
SHA1 7f570775daf146b6421febd372deb7280dae43bf
SHA512 5229c1b6bcdf508bd32a59592564eddb9c669f1449dfbd22e4cdec7184a6dde2fe5381c23dddf138584ba8c38051b6aaec250bbbc5540c35daf6d88ddae52d09
TLSH
T150419CF3C3E4856D8D0156F0AA14AE2BCE2D0A15822C3D2AC9E4EF6BD3E2471F10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 22e95a7f452840068bfa9af47b489402ec4bb7ae06cbc6a57b7989eab41a7e50
MD5 b2cf520dddc6f41b8fc5099815daa71c
SHA1 140f944f0f5044a50331aa7351b8fe3fd3c0eb0b
SHA512 bf5f5a0564379f55fcb5797421ad40f18f9f3a5064d5b96a939da316f79a350747c24548f2e15ecf91ea03a1f0ad1e2f795b3987f4951e065af57ff8cc79152e
SSDEEP 192:sxR0RWby/fdsFZTHFSaUzoA8p4y/g6+WNIYbtZ6WGEIgIJ:sxR0Cy/fdsF9lSa1L/5IK6ys
TLSH
T1A432C8566A28A93B4CC7E21DFB56BF53D6FD113260D02E48B6FC961C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 37f61bec3e23f6f4f252002703b26be83e71b5286f8fc64a6a203d141bb25a25
MD5 85af0dee0ebeea1752ae77d09a1e8932
SHA1 122b29c60fa8adb0e3e1f844d225d65988e2bade
SHA512 309dcd75c98e1a3c0dd149bb37c4a1671ad040efa01ef94150dfe01141492b7da95b19b0a7400c17055287f016413af0084441ab04120a658eb057f57c9e24b4
SSDEEP 192:sxRXRWby/fds+ZgHFSaUzoA8p4y/g6+WNIYbBZ6WGEIgDPJ:sxRXCy/fds+OlSa1L/5Io6y9
TLSH
T1C632B7566928693B8CCBE21DBB567F63D6FD113260901E48B6FC971C05EB6CD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4e099d337c9b056c51a8d07ead71072ec15a2eefe6b26761d2390ef196f2fdff
MD5 d92869f49681163d895a4b5f0e1f56a0
SHA1 b698cda8f566c64998b8dd1c6224bcac7a6df6f1
SHA512 9cb881b94773073f5561bc0264cf457fb17595eb6e97085015bbf4132682c8981c8bd6092f2f2d398bca6621f8e9439197706d12240c24623332d0e9704f4636
SSDEEP 192:sxRXRWby/fds+ZTHFSaUzoA8p4y/g6+WNIYbtZ6WGEIgDpJ:sxRXCy/fds+9lSa1L/5IK6yP
TLSH
T12932C8566A28A93B4CCBE21DFB56BF53D6FD103260901E48B6FC971C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c47e29864fcd21275f4c8e955ff9cdc4e44b9bc293ab5d70b7177bf096ad7355
MD5 4736fcf4bff622122f54b1f838b491ba
SHA1 89c78c2ed6f7e12080e2c73924325d40b9dec2d6
SHA512 d2257e73567a7d84e2fc7b0244bf259b3c2a25305f9f8aca2b446d441ceab23d00c7a8918f1d9e3dd45e20e4a5a056c93ffbbd0bd4d771c198e0ac028355e8a8
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFNroAoQ:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Vs
TLSH
T185B2DB3B600DCB7E5F800A9DEC19AFD76D9802C796988D4447FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

258c6dc8-357e-4d66-970c-b9007434cbd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\258c6dc8-357e-4d66-970c-b9007434cbd0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c996500693fc3cf557187ed2169f9a041570c8e4616d228ea6fb9fe5ee603e73
MD5 da77c415a2d672b34d2f2a052632cacd
SHA1 85379e8b253f98ba08e5f1c8abeb4072f67e7bfc
SHA512 eba2d82d7d70bea7d3476e76cec4be77cf5634caf189882d5ff914e3a152cb9a0c9b7e8f0dbea605044fea826176ae40490e77681445166ed2d7cf5aa03533e5
SSDEEP 768:IX3lImI+BqobGL2ktZu4aWADIidy8Luw7smEKpUZfx:IX3QtZzaNsuVLP7qx
TLSH
T1B3F2BFB5EC569D779CF6A180F2833612AEF88263D5CC1E9489ECAB0E01D75BD1303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4d4ad4f1b356d85b1113e578035f78e188692a96cac2aeb4303665f577ce4c5e
MD5 cf38df878f895125a671be2f20d7b3f3
SHA1 4881251d07153da1dcccde90cbfc7623d35fd18a
SHA512 88ec87e6a96f7de9494fe9dbbcb816ca9ee70ed9f2f2dada974dcefe6b27c64d9d2a81660b9fa8743dc1984bb7cdbcf3e2e18f4050e5f23dae5fe7612d276f9f
SSDEEP 768:Trv+4UNbdY3KImg+BqobGL2BtZu4aWADIidy8Luw7smEKpUZfE:Tbsby3otZzaNsuVLP7qE
TLSH
T1BF13CF75F8599A739CB2A184F1873907BEF892A385C90A94C9ED6B8E01DB4FD1307D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d0c92ed0db72486ccfde7b2704de107d57e12697e63b3632be52b1c686c48873
MD5 916bed19213de5d97ae0641e957706d0
SHA1 6035ab8152db8662850ed7249e12646f8a040479
SHA512 e6a55d8ecae2862fb66207b4cb1b253be2466dac94381cb2ba05542915e755f4c3323b77b6699e5052185ed54151618ab069074a59452452fa7e5d3b2a356224
SSDEEP 768:JX3KImI+BqobGL2ktZu4aWADIidy8Luw7smEKpUZfx:JX35tZzaNsuVLP7qx
TLSH
T1CAF2BFB5EC569D779CF6A180F2873612AEF8C2A3D5C81E9489EC6B0E01D75BD1303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9f07c27157797dfb529c43edee247f56c4e2c2fc5c97fe6c441ad63c19fa8bf4
MD5 5cd9997ffdf2e1f51ad638c5f937b331
SHA1 0ff5fe41bea25ff21564dad67f697997ed6d4596
SHA512 7ee259729e2d50b396f3f44485656ab2a6b7c0c2f1dcbcfe71c7081ca8d36d26489599efea3e9e2decc6f1f64f6fb8a10f017d556737612af7abd7d79218682b
SSDEEP 768:WFQJ3jwgBImI+BqobGL2WtZu4aWADIidy8Luw7smEKpUZfx:dJ3gtZzaNsuVLP7qx
TLSH
T12003BFB6EC85C97BACB6A680F2873616DEF482A3C5C85A9596DC6B0E11D74FD0303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 050215fb2b0d0d27173fc05acb233a646a37bcff0b117222effd24e506ae797a
MD5 37e865fea480da2d46f714ce8e43bbe9
SHA1 b02f83a45804374b99567f7ad54d7c09efaa289c
SHA512 ef4e53920521ea1832b97be501630ee07fd3229095bc9c741fea4ebf7fb56c1f7726cd185c5deb269b76b5a87b3b3639b399f8d59ce780444fb87e48477bcf6f
SSDEEP 768:9rv+4UNbdC356IBqobGWpZu4aWADIidy8LqpeVH1S1C:9bsbw3FpZzaNsuVL6EH1d
TLSH
T18403BF36AC59DA779CF7A284B187760B7EF8926386880BD088DD1B4E42DB4ED1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e493dd43-0c1d-4ae1-8a0d-3ce3983866a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e493dd43-0c1d-4ae1-8a0d-3ce3983866a1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download