b28e8965625ffe3ea3a5ca0b8208197421e330d8413f9ba1144751e05551a311

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 48KB
Sample260712-pdkmrabv81
SHA256 b28e8965625ffe3ea3a5ca0b8208197421e330d8413f9ba1144751e05551a311
MD5 7f50b6ee4988de996f872352c177b87d
SHA1 eada7a880b48a82d84482bcb1fb8e5358f2ece9e
SHA512 48ec8a234afed128350393d23be2d0dc09f56c13a5aa3b03d4a297b72bd284b0e7937aa0abf9c587cc657764531c33ebb715475cc60012d785c1f68cccc2af50
SSDEEP 768:08A3NXwmEvsy8j3fugwnS7D3668orO3y/95pSHrwx/36:08A3NXwmEGfugwiDhjqG3pOcx/36
TLSH
T10C238531E3218536603780EDD97AE71961D902D6EE0B4BC06BBEE7B43DD6CA07513B98
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4104	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283319804026133"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{E49B942B-4CA1-4C07-BD41-B597490F04AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5468	msedge.exe
5468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe
5716	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5716 wrote to memory of 5636	5716	msedge.exe	87
PID 5716 wrote to memory of 4104	5716	msedge.exe	88
PID 5716 wrote to memory of 2036	5716	msedge.exe	89
PID 5716 wrote to memory of 2036	5716	msedge.exe	89
PID 5716 wrote to memory of 2036	5716	msedge.exe	89
PID 5716 wrote to memory of 3912	5716	msedge.exe	92
PID 5716 wrote to memory of 3912	5716	msedge.exe	92
PID 5716 wrote to memory of 3912	5716	msedge.exe	92
PID 5716 wrote to memory of 1716	5716	msedge.exe	93
PID 5716 wrote to memory of 1716	5716	msedge.exe	93
PID 5716 wrote to memory of 1716	5716	msedge.exe	93
PID 5716 wrote to memory of 3020	5716	msedge.exe	91
PID 5716 wrote to memory of 3020	5716	msedge.exe	91
PID 5716 wrote to memory of 2112	5716	msedge.exe	95
PID 5716 wrote to memory of 5708	5716	msedge.exe	94
PID 5716 wrote to memory of 2112	5716	msedge.exe	95
PID 5716 wrote to memory of 2112	5716	msedge.exe	95
PID 5716 wrote to memory of 5708	5716	msedge.exe	94
PID 5716 wrote to memory of 5708	5716	msedge.exe	94
PID 5716 wrote to memory of 2316	5716	msedge.exe	97
PID 5716 wrote to memory of 2000	5716	msedge.exe	98
PID 5716 wrote to memory of 2316	5716	msedge.exe	97
PID 5716 wrote to memory of 2000	5716	msedge.exe	98
PID 5716 wrote to memory of 2132	5716	msedge.exe	100
PID 5716 wrote to memory of 720	5716	msedge.exe	105
PID 5716 wrote to memory of 2916	5716	msedge.exe	106
PID 5716 wrote to memory of 480	5716	msedge.exe	107
PID 5716 wrote to memory of 5460	5716	msedge.exe	108
PID 5716 wrote to memory of 5460	5716	msedge.exe	108
PID 5716 wrote to memory of 5468	5716	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd5f32c188,0x7ffd5f32c194,0x7ffd5f32c1a0
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,12208880703574448741,1807057833102442738,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1824884111805311041,14544043310333012541,262144 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:2
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,4815367860520008660,1448479340030724510,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:13
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,16963010101085225607,16917837509018974696,2097152 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,3171013622434445911,1081132999389473731,2097152 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,16101700225503848567,11863034654728607251,2097152 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,15719798330686904518,17570069689662194684,2097152 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:9
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,18250035628754916809,970068568173508572,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,17877212729737397947,17900812809801217262,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,13288423142102593946,9308981845482756514,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,13288423142102593946,9308981845482756514,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,900804718679079580,7186503355777541579,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:14
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,2894933414633331093,4570907962041202686,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,14555025723015349693,5643206958290145163,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:14
  2⤵
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,17933778826216764721,17211106302240686061,524288 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5416,i,7714114961269971532,16253463307089139607,262144 --field-trial-handle=2620,i,11147809045253001182,199248039742404788,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5a04dc3f9613ffa5ee5d82a22900a3fc60fab819d880d24321e027ec38640a55
MD5 fd6cf6309005ae2b2b37df51a1633c73
SHA1 176b6b3e697fab3ca0d68d4f3c8a4643558557d4
SHA512 830145924a3a52c7bf310a87069a767645e553f9276465bb0c9a7c69d224a5cd16bfe6625e4a608f48f7bfc0a70cef47bdd329ad03374a4fa88035c5566e8a2c
TLSH
T10F514073336D09D8EB2A857520E296B632F5C35E8707AE4282995CB77906F4052F2C5F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0aee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0aee.TMP
Size 2KB
SHA256 25375263169a13d57bde4ffb2cc502dbe187857452919b73564e647d82caafa6
MD5 6ddf195edae64d0c34319e9311573530
SHA1 a28c5875776f8f1df5f076a52ad5f9becc347835
SHA512 7242fa2b5aab4a8cd3d03af445de5deaddf42c7af7aeefd4b41ebeb6f08c31ed7c92b4a9022726442da5d7bf18a1769a72688335bfaa660a393111f3f42a48c0
TLSH
T129514173336C09D8EB2A847520E2D6B632F5C35E8707AE8282995CB77906F4452F2C5F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b2511d423193c2889a4ba9cee5b638987708b2dbfd137f839d1c8907d77e7fe5
MD5 4a74da1d46fbac29e52146332ce613bd
SHA1 0a227b5d6fd61c457460e89a2a0a0ffed94dd290
SHA512 1cf643e22bee31e68ecf7bd6650354c09f7afed8df1ea6caa90ecd6c3da9ade13ef77086b501178c0d11424066b88093c212e691ff4e39c12aa5e25bf4a19fd0
TLSH
T14741AEF783E4867E991196F0AA186E2BCE1C0915432C3D66C9E4AF1BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 97663d64b2d747e4e5d334fe1b36bef61ab2e6af5481605750b300afc8ec79cf
MD5 e91d2a1d42a23ce536f46a797939f7df
SHA1 faca1b56862e4226fa8523892c2ece46a8f88957
SHA512 d1838aea0a4ba029388dd467dc97d1b106d43aa49f86807c2359368d9d4ca22b9a752b76f57e4ff71828c03d59110fce5916189ad5f03810082ea6bd22b68d7d
SSDEEP 192:sxRCRvyM/jK1Ml8wbv/f7svO+KCA94/9zoA8p4o/g6+WNIYD986S2GSVIgDkJ:sxRCblv/f7sG+Z8fR/5ISS+s
TLSH
T12452C71666245D7B9CDBD209FA55BF93D6F85433A2901E44ABFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c30f9016ad36cec9cd0dfea005850baecb094dfb7c6baeaf24cf5afe712683f5
MD5 0e0ef3e3c8eb05400aff50626cff59c9
SHA1 479396a601d88c136d67a3a559d92c0954100c59
SHA512 e45249cbd2408800001fb1d24afd625db904e4bc5b53c0154f788db473e46c5cf30fc38415b2e3cb25fd12b39c0fc423965ec9add00c4b8e1fa4dccd800678ac
SSDEEP 192:sxRxRvyM/jK1Ml8wbv/f7ssO+KCA94/9zoA8p4o/g6+WNIYD986S2GSVIgIJ:sxRxblv/f7sb+Z8fR/5ISS+s
TLSH
T1D352C71666245D7B9CDBD209FA55BF93D6F85433A2901E44ABFCDA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 07a868d63c92a13369d873553b12b3850ad5e4299b6ec2d67df89c0483b6c2f3
MD5 11dd9d3fff5d1905c9e2d7f282b023b5
SHA1 2cd930c56c6d3d73eb1c3c70971176b92311efa8
SHA512 e68653f84a6dd34d0197780fac679ca1b90df81a7705e120d6a8076655b18b9334f1444a61d068df7c23336bed41e731dd99696278200ebea1f386ab9a93713d
SSDEEP 192:sxRCRvyM/jK1Ml8UQiIbv/f7svO6KCA94/9zoA8peo/g6+WNIYD936S2GSVIgDWJ:sxRCbq3v/f7sG6Z8fr/5IXS+W
TLSH
T1DB62C71666245D7BDCDBD209FA55BF93D6F85473A2901E04ABFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3563dfe2c3f07b0ddd21b1106cf93b65e9859a26288701d6a913846a0b90222b
MD5 73f8cde381540c42793a71abc1f0089d
SHA1 d355a578ea0372bda392592a3cf2b55a0574adfb
SHA512 e22f6b07e3fc69cb3509e3059ba472d00f1c95f0bd947ed825104ffe3f415bcbd33d685520214be7b7fb95c83077bfaa005c64fe1f4f7bb4782970d71edf0ef9
SSDEEP 768:aW5WP0Wg/XfCf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyc1sgro/0DTxl:aW5WP0Wg/XfCfu1jazysr/0T
TLSH
T1CCC2FC3B140CCB7E4F844E6DED29AED76DD801CB9B988D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc80cd78f55050f9d3cfde17bdce6eba463ce680ebe3d0d7e0e3ebbad18d2796
MD5 a00d47fa87b6e6e36c693a23561a1be4
SHA1 d46650a8e2da4294912fa549cad2553d8b64b9fa
SHA512 7033d29cb274cad769288d0768dc44438fe6dc27040d163093662b5c290e03bbaa8d6368377449f87935e344a59dc0aeef194bd85268c533e51b90f37a94d1a2
SSDEEP 96:KREFw0Oy2UWS/fg8UK4Rg2Uc00/uUJHoZs4q26gWeDzgggK41gCgcwgziI9mUKHh:CEFw0Oy2rS/I8oRg2700/uUJHoZs4q23
TLSH
T161912E41B13A2291787E750891B5AD1BC6C274B37029E52E3FE915A60F76E034DFC6CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5aa53a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5aa53a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 26e1575f1294f620376c7423d80e89116e79032caf61c691abb38a86f6c282bf
MD5 434b57f6e23786f875e16a117ccae734
SHA1 a2b37a3cd6b184e578ae5f1a7e88e867ee16acb0
SHA512 fd801fe6285181d448e8beb4d2ed35eb36aa85a074a734cb4c1e7461c03f88c6a9f17e43784d4520d9bb279cf5ed62aece382ebd7a18515901de9bb89443201e
SSDEEP 384:MtNn/s3n9SG38NSF+f6si2GRWZlf8hyEGB5R/fUMy2rEoajo4cdR8eHhVODjYPNq:Mj+993QSfGi0XrEnjN3Gac1FnO/D
TLSH
T186E2AE362DA59DB38CEAD786B5037742AEF0465386C40EA49BDDAF0D05C76EC130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7f126ad3ceb8c20d550f64c3fde4f0e882dc4733b5ab097d65464e24c5e6fe92
MD5 f93fa8c91a6ea24943fe51c2d100ca58
SHA1 504b9579a078d16629c9ada954c3af3a740ea0d2
SHA512 436cce37d918a3e260d0e35ee35609b2941a0e18b572581319d0421bde65fd3646b0020eceab5fbc6fdf485c146c08ec8a787de44d8b0b35cefb6be21abe47fb
SSDEEP 768:arv+4UNbdz3USUGi0XrEnjN3Gac1FnO/D:absbx3USjXQnjMakO/D
TLSH
T10F03B03279A89DB38CE6D285B0477643BFB4165385C40AA4DBDDAB0C059B5ED230BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 8954cab263e64d5e1216c20b7312cb27443a1f97b46b23e901354e3d05cdbefe
MD5 646e31deb1a0de14c24688ca98850483
SHA1 321734c2f8689e16a320e26b0bb6a85669fc48f2
SHA512 a5dbf2283f35549c0871dcfd147a87990658c9a40b8eed2dd39480c4039d9a35552ea7046c005e88af463c65dceb96e7370449cc9d537ebeec27311fd15e61a4
SSDEEP 768:xF1j+9r3Bwg+SfGi0YrEnjN3Gac1FnO/D:Q9r3+S8YQnjMakO/D
TLSH
T1FEF29D326D94CDB79CEADB85B6077642EEF10293C5C44AA49BCDAE0C11C72EC130BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 789cddfa25e90f4eca7e966ced3944050576efecf6e6ea35e282d6d118a7e44a
MD5 831af1fbe569ee750bf1615ea8d1982a
SHA1 a4ce6767c096a06948af53fb64153d37dbcd9e5a
SHA512 a34850be63ef6f9220e6f6e9e945d52ab6438c06aaf97ead667a796bea7ce7fe4b0bd1788dedfdddbf93cb127c59eccff9a4d236688087e91074422ee55d811f
SSDEEP 768:rrv+4UNbdS3tmi0drEnjN3Gac1ZieVH1SCz:rbsbg36dQnjMaVEH1V
TLSH
T15703CF3269A89EB38CEBD3857147B6037FF4525386940BE4CADD6B0D029B5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7722362-bfef-4570-bdda-c4f0cf1e582e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a7722362-bfef-4570-bdda-c4f0cf1e582e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download