41ac684856a149e7c06d545609de0e98017fdbe9e3971a7ccbd554f26d24ae1b

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 337B
Sample260826-prdrcsdp8x
SHA256 41ac684856a149e7c06d545609de0e98017fdbe9e3971a7ccbd554f26d24ae1b
MD5 a233c98faca8d45880ee20063daa87c9
SHA1 dadf5b1d3d6c315a23597ddcaad5c8bdfc5e88ee
SHA512 ca31d54d3e0703a398283e0090372aa0d8588d58a3003e11a9731d4fb211be4377926044c7ede9cb0928562daa7cd590148d982673b9a882a4dd326dd934e4e7
TLSH
T1B8E07D0EA58602166C1111407AC67342775380AF53F8846039DFEAE2EF49619CCF77EC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2096	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322212149904377"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{F0FABCFD-B140-446B-BBE3-C395E3F3D670}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5508	msedge.exe
5508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5308 wrote to memory of 1328	5308	msedge.exe	89
PID 5308 wrote to memory of 2096	5308	msedge.exe	90
PID 5308 wrote to memory of 3788	5308	msedge.exe	91
PID 5308 wrote to memory of 1760	5308	msedge.exe	92
PID 5308 wrote to memory of 3788	5308	msedge.exe	91
PID 5308 wrote to memory of 1760	5308	msedge.exe	92
PID 5308 wrote to memory of 1760	5308	msedge.exe	92
PID 5308 wrote to memory of 3448	5308	msedge.exe	94
PID 5308 wrote to memory of 3448	5308	msedge.exe	94
PID 5308 wrote to memory of 3448	5308	msedge.exe	94
PID 5308 wrote to memory of 2012	5308	msedge.exe	95
PID 5308 wrote to memory of 2012	5308	msedge.exe	95
PID 5308 wrote to memory of 2012	5308	msedge.exe	95
PID 5308 wrote to memory of 5632	5308	msedge.exe	96
PID 5308 wrote to memory of 5632	5308	msedge.exe	96
PID 5308 wrote to memory of 5632	5308	msedge.exe	96
PID 5308 wrote to memory of 1568	5308	msedge.exe	97
PID 5308 wrote to memory of 1568	5308	msedge.exe	97
PID 5308 wrote to memory of 1568	5308	msedge.exe	97
PID 5308 wrote to memory of 5200	5308	msedge.exe	99
PID 5308 wrote to memory of 1780	5308	msedge.exe	100
PID 5308 wrote to memory of 5200	5308	msedge.exe	99
PID 5308 wrote to memory of 1780	5308	msedge.exe	100
PID 5308 wrote to memory of 3312	5308	msedge.exe	102
PID 5308 wrote to memory of 5728	5308	msedge.exe	106
PID 5308 wrote to memory of 4800	5308	msedge.exe	107
PID 5308 wrote to memory of 4796	5308	msedge.exe	108
PID 5308 wrote to memory of 3080	5308	msedge.exe	109
PID 5308 wrote to memory of 3080	5308	msedge.exe	109
PID 5308 wrote to memory of 5508	5308	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffae139c188,0x7ffae139c194,0x7ffae139c1a0
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,15059210788235603861,7418970198541315442,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,15255626946249233102,13516721368524617670,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:13
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,10383681297020572777,13455191410512833860,262144 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,14427391115440868632,18037194413327412531,2097152 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,7769654374458417737,8992464544508719804,2097152 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,14067213982757854240,10054759670787891908,2097152 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,17379148068145967942,7886433394524648151,2097152 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:9
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,1756845265356781451,9727929459145427317,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:14
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,2848456603729790775,187662016300655076,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,8548163758630390893,2337532647139640264,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,8548163758630390893,2337532647139640264,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,12498608863642049423,12644176979645195608,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,7280595625697544669,18421865407898719265,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:14
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,16759808953056688846,4842928490454564572,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3344,i,13214023496928516130,16537050496456749202,524288 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5048,i,8415724866389499204,5454036902239154694,262144 --field-trial-handle=2516,i,14042778335689772570,3826159470550639874,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 719f844e62c5a3916fba05dc2f32d02dadec54c424efb41ba161d1fca59227ae
MD5 e633a9ff8da83df3b4dca0ad6f30e5d9
SHA1 610df135117504b2857ee3cc03a5ac9797b10333
SHA512 56404607616c88e3d1268893aa0c748db1db04fe698a8f5d214c6a2a533823ff606c3f2a3f007d08bc16bd8838597597f9fdcfe0f631495c1928104ff11d002f
TLSH
T16BD0C0303948E188C9832172DCA033117310007020B147054031F42CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4e63dd86db6ba33f637ba1f39c48bb911e9e13f5130368b077f325e695376862
MD5 a77b79b5fd077cacc5b5063a8314b587
SHA1 0c1d4838b0e0f89b2d5bdce458c885e0fe778d5e
SHA512 0d30ae5ec6e554e945ab49bb8b064c079fc25da067c9436f92b3b08cee92a2ab889080ce92ffdc96fc76ea9ec1050fcc97ba9321f34301d79b251f2ffa732cdb
TLSH
T1635163D4872FDBD2E72456BE25E148CA36709E572A07AB3013BA62B65CC2F4D34F0214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b905.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b905.TMP
Size 2KB
SHA256 f6b36c8d0eed22156a43ecfb8c6581592d0a5009ec6d205dde17bf326dd12d0b
MD5 f9a35ab437383bbdca1a0290c358fc53
SHA1 d7e44e4fdfb8ca124c9f114ad2e8781592a85df8
SHA512 386221b782df3a537071b0432e379f4308b051e02a2a9af0e01784fea2cffb5e030c6bfb25e26f163717851fe68468627cdc019842dd523b793e5e19b8c8cc07
TLSH
T1CD5152D4872FDBD2E72456BE25E148CA76709E57290BAB3113BA52B65CC2F0D34F0224
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 929e3ed1b49d23827898dadd024fd094f0f93ee87adb001137e24ea89757ab53
MD5 f38680591ff1134a5646bd7c03ee5310
SHA1 63756c666ee1accaacc12ba5d40d68794c5ddb5e
SHA512 850c35946ca241b4532f00ee3e66af7b8498fc11ad87f0e7456e169314357f993938126db806aa169d1ecee94101fff0b644612f5c0c8b489ab1dc7a3f62f44b
TLSH
T10331A0F783F4956E8A1196F0AA14AE1FCE2C0511431C7C6AC9E4AE2793F3472E045A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 21f3f498ae55c68821bf50089f50ae5fb722dac7326242c606994a74459d7d16
MD5 b1e5f8f07c376aabc6179aa94f0e0277
SHA1 8da801adc7ee6d106438bcdcc85ee526255d0091
SHA512 05a40d52cf43c55c6f6527d76bd576170761afe0fa2d8c68e326e816ead9feea6b9aed246e8d45cb60ac8b861b792060f292d59d95896bc05204341ee8f95e31
SSDEEP 192:sxRsRfb1/fssjD//0zoA8p49/g6+WNIYZ7PqaskGIIgIJ:sxRsp1/fssjDnVo/5I5ks
TLSH
T1FA32C7166968A93B8CCBD21DFB55BF53E2F95032A1D01E58ABFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b1498b34dec31f2cec3f7f4331b176ed6efd2ff79696fa958515a4cd923fa531
MD5 71b0a2840e8153d15268c560edd553ab
SHA1 2ab8824b6de18134f194b11f9e77175df543b290
SHA512 a84ed3ca8532b6c941039b3db8b34baed55715ae97a5ceef2a8b43dadfbeb15de148f5ef39afc6e55c6bbd56ff5f82af8c98892a8a397f393078f87379dcec2e
SSDEEP 192:sxR7Rfb1/fssm5//0zoA8p49/g6+WNIYZ7PDOskGIIgDZJ:sxR7p1/fssm5nVo/5IgkH
TLSH
T1CA42B7156968A93B8CCBD21DFB55BF53E2F95032A0D01E58ABFC8A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e21965e698613a753090e2b13d6191eb142ece7b7a62480e352d81c1dcba9f07
MD5 c223d966931122109116724c1fb88102
SHA1 711513849b4f0b5e2f5e003f6287e9b50c1f156b
SHA512 c0f65100a950d845eb3acf4c9652d3345aec9f73c8b9ef376eef552c9d7c0ba345fd61663f7b9e0be3db7757eb11db7d3494459615aa9978bc01fe680d7ce652
SSDEEP 192:sxR7Rfb1/fssmD//0zoA8p49/g6+WNIYZ7PqaskGIIgDHJ:sxR7p1/fssmDnVo/5I5k9
TLSH
T12D32C7156968A93B8CCBD21DFB55BF53E2F85032A1D01E58ABFC8A1C05E7ADD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 77eed982a422a364710723c754623e4c8ad9a8a8856034a4b12ff56b8f68c7bd
MD5 0c7a3af248c32cc69e5f8faba5755c39
SHA1 c1304a23a9de30cac794cf9f57ae50adcf3f3cf2
SHA512 ac2b7b0bba57abc3844b81e0290634aaa3bee699e9959dca92e40bb652d3429bf2d0b64e98a1be1038de8826291d627fabcdb8301ef1543faacbb73e1ccd07f1
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR64roOpP:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0V6
TLSH
T169B2DA2B604DCB7F9F801A9DAC196FD77D9802C797988D4047FE990C03C77EA912A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a58b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a58b0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 1a2a41152712f22fefcf4e4ee2ae16f0bd359548dd44cfe7d990b8a10f6e443b
MD5 240b34b091ea42fcf66f708467ed32fe
SHA1 c78eb47c57980ee5b479f6f543004c1ab6cad4d3
SHA512 a9a11dfef4c193a30a5979850ef7c7e0462b14f8e37f4eafbd05085f93a2d35ce9da6ebf6ddeb6a9515e869a8e40f1d95cbf57c0cddb9c30d65f7a30aed30433
SSDEEP 384:WZcIS38NQwfmivxD16d+dfYb9UUMXJZWmkA1QiZh6vPqQMQYeJfjWca4G2KCQ9fK:ES3efq4JcAam6aQMGdjWca4Ghf9f61
TLSH
T1C5E2AE3158B8AC778CE7E296FA2B6643BDF4416385C85E80C9DC6B0D039759E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 eadfa8da0deffc262d28de349486e17841fb6f004bffc6f1fcf43e15df7cd080
MD5 9fc8ba18bc2964bc9e7cde550ae8612e
SHA1 5ece170b0f36b0b62eda1a248abedb821b38d046
SHA512 87f971bf202698c89d4a0ebe456b81d154647aebe19ce0fe1e0589296428fc3e97575d3a7664e8d133c328780005bf2bb85511a749a2a60ac802460ea32159be
SSDEEP 384:oZcIS38NQ1fmivyD16d+dfYb9UUMXJZWmkA1QiZh6vPqQMQYeJfjWca4G2KCQ9fK:WS38fq4JcAam6aQMGdjWca4Ghf9f61
TLSH
T10DE29E3158B8AC778CA7E296FA2B6643BDF4416385C85E80C9DD6B1D039759E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c9dceaaba37384348e435c7f8f1a7566150997d2203697889bd0fb90ddc7d725
MD5 d274044a6cd04212a9322af11c0286e6
SHA1 a22ba60ca2ebac362d873868d56b015446bfb513
SHA512 2df6ba844144ed71a6190aed770e603b5adefe3f03adee02b16411ad6d68b5cb958724aae76c6ba32ffb858944d1b903731b84b75922df3e4c6dabee20ff492b
SSDEEP 768:jFQj3rwgSfq4oAam6aQMGdjWca4Ghf9f61:Gj32CmaME6pfK
TLSH
T160E29E324CA8D97B9DB7E795FA2B2643EDF041A3C4D89990D6DC6A0D039749D130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f5059a65db05b97160ef3a2068d97ad2d847e6d8323ca40a21380c3d36b5e9e7
MD5 bfdeecedf2b1beb38afc1b9b69485d0a
SHA1 7ac2a988fa90604fb1b339455cbd425b80d0361c
SHA512 0e40e3eb3501bd146bd9f6a498657a0d17e61bce91d335457b12ef6c657220967c5def42d93a0f6e04f2e893b30ecc503735f28c0990d3aff9c29060c8d2dabb
SSDEEP 768:/rv+4UNbdq3F3q8AAam6aQMGdjWca4GhfB3PeU/:/bsbc3dKmaME6pPH
TLSH
T108F2AE31A87C9973DDB79A99F21B6687BEF021A384D40E80DAD91B0D439748E3307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d8fee8f179c6b0e58a562db91bc0f382ab5d64983bfdc98ce94e156b74bfd58f
MD5 0e0c52522ce5be7ec320ee404ee97c36
SHA1 5b5f765b2419c0c152ec4cab30db3cdd97eca3e6
SHA512 da8cad7af5bdbdbbfd7786568d6261733031199bddd84064bd7bdf7428635871742d758a205c0dd0432fcbee3fc396466289109599d72f0b3f4031ad5acb62a0
SSDEEP 768:/rv+4UNbdq3bVq4J0Aam6aQMGdjWca4GhfwfPeU/:/bsbc3DJWmaME6pQH
TLSH
T1F2F2BF31A868D9739DB79695F21B7643BEB052A389C40E90C9DD2B0D439B4CE330BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download