5bd0ed5257496a5c7c69b1d0c322ab57e4252a4cab085fb4b836b04b22893464

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 336B
Sample260718-pf5qpsev7z
SHA256 5bd0ed5257496a5c7c69b1d0c322ab57e4252a4cab085fb4b836b04b22893464
MD5 2bf8754eb5fffc58ea5ad6583d1b5d99
SHA1 bee38c4067eb3a7a65abc98c2221d711f41edc08
SHA512 b450fad52fb3eb42225d5f9754ae92bd22976a8a78a1f7301d31b14d59ae7347b429b7a9cb5fd7088e23aa1570117db8c3c8ac9e0c46412f462970ad6abf8b15
TLSH
T1F8E07DFA9811867691329B3032DAF3435112C6CA568404DCF18464EA46FDF5DCE8B1FE
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4900	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288506452291333"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{D0101399-DCE7-47FA-9220-D83BDECA4E46}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4084 wrote to memory of 5076	4084	msedge.exe	89
PID 4084 wrote to memory of 1668	4084	msedge.exe	91
PID 4084 wrote to memory of 4900	4084	msedge.exe	90
PID 4084 wrote to memory of 1668	4084	msedge.exe	91
PID 4084 wrote to memory of 1668	4084	msedge.exe	91
PID 4084 wrote to memory of 4432	4084	msedge.exe	92
PID 4084 wrote to memory of 4432	4084	msedge.exe	92
PID 4084 wrote to memory of 5968	4084	msedge.exe	94
PID 4084 wrote to memory of 5968	4084	msedge.exe	94
PID 4084 wrote to memory of 5968	4084	msedge.exe	94
PID 4084 wrote to memory of 1588	4084	msedge.exe	95
PID 4084 wrote to memory of 1588	4084	msedge.exe	95
PID 4084 wrote to memory of 1588	4084	msedge.exe	95
PID 4084 wrote to memory of 2864	4084	msedge.exe	96
PID 4084 wrote to memory of 2864	4084	msedge.exe	96
PID 4084 wrote to memory of 2864	4084	msedge.exe	96
PID 4084 wrote to memory of 3144	4084	msedge.exe	97
PID 4084 wrote to memory of 3144	4084	msedge.exe	97
PID 4084 wrote to memory of 3144	4084	msedge.exe	97
PID 4084 wrote to memory of 4648	4084	msedge.exe	98
PID 4084 wrote to memory of 4648	4084	msedge.exe	98
PID 4084 wrote to memory of 4648	4084	msedge.exe	98
PID 4084 wrote to memory of 1780	4084	msedge.exe	100
PID 4084 wrote to memory of 2136	4084	msedge.exe	101
PID 4084 wrote to memory of 1780	4084	msedge.exe	100
PID 4084 wrote to memory of 2136	4084	msedge.exe	101
PID 4084 wrote to memory of 1596	4084	msedge.exe	103
PID 4084 wrote to memory of 2808	4084	msedge.exe	107
PID 4084 wrote to memory of 2988	4084	msedge.exe	108
PID 4084 wrote to memory of 2640	4084	msedge.exe	109
PID 4084 wrote to memory of 3888	4084	msedge.exe	110
PID 4084 wrote to memory of 3888	4084	msedge.exe	110
PID 4084 wrote to memory of 1628	4084	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffdce05c188,0x7ffdce05c194,0x7ffdce05c1a0
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,1587836928956236830,13719632515696509149,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,14914598418804716711,17679559938231559674,262144 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2708,i,17033040415939349063,16022569822303419784,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=2700 /prefetch:13
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,6581375409877480855,2113160601619878993,2097152 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,1528610570138284832,10182370334628871143,2097152 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,10095231586885614927,1950954694183517177,2097152 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4436,i,9142482993416555942,4323095662659744400,2097152 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:9
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3764,i,11808903387677044938,15224679130762289853,2097152 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,7375479289657411845,5116398871981566993,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,16013582901267884872,9576895667209659766,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,4500761486621429913,2674542304387484262,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,4500761486621429913,2674542304387484262,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,14048193995241010205,10742303508337536529,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,4430390320084310641,17269818252889120928,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,2330566989306303140,900718372759094,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,10664930610692054697,17265511916076742479,524288 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,42807965957904438,13926466919154694839,262144 --field-trial-handle=1892,i,16889592272903094345,18011828709075998695,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 24571902a307cf903242f8602937a40a1829bb9dcf199175ad49f5eb480a29f9
MD5 e2c2fabb634d5580f150665a2bec0c93
SHA1 5ba5195c5e9128277c7f40b940220539d258de3b
SHA512 0f4f6c3b87e1809b414af5847220b809e36f2ccc2bc0c25f82efa39795bb29819f8d577d8058fcb5864b964b4f4568c6afe2168341f32e422b0986b7f98da624
TLSH
T14F41E9D40BE90AC2DBFC8EF520E1A6DD33F0D49E01176E8064422E700B0AF9691D2973
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c133.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c133.TMP
Size 2KB
SHA256 43da12651ec6737b3eed324898556b77472ac717008abbbf57f8e4b5a2790184
MD5 efc44f9ef9fb7bf7915928ae6de4679f
SHA1 35cebcb4d19bfd189e9052d5cb0a1f372c63837a
SHA512 5e04e47b037bd17daddf38175bbb1282d80f3b6513c1a3fc5595acd1d453cd7df7601904f6c9ea5e9bbc2aef414da9ae99fe0c4f2dc53e89f2c1cff1dcfeb0fe
TLSH
T13041F8D40BE90AC2DBFC8EF560E16ADD33F0C4AE40176E8164422E701B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e11b8204625577917d329f346a4e9719af4f947cb954c740c4cb03a89cbd1cd2
MD5 a31400b0792f3d9d28c8cc6391df6ec9
SHA1 d027962503513b37ee9cf73226009de04bd57391
SHA512 9f3bfdbf5ade293ea36c7e8b95f1477815ef3bb29a66ef0d1fc8b3e2cb6b58e5f8d732252bd4987f7129fb4c37aca31fdee6e872bec9bada1d035fddfe35a22a
TLSH
T1F941BEF7C7E8863D890156F0AB147E2BCE1D0915432C3D6AC9E4AF1BA7E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3d42291e74a8ab6cb7a780dd37221d1e236285041136af14254c80dc1ea4dfd4
MD5 7d80e33504ca6bbfdfb1f84c53383381
SHA1 4fc753aa3d99d40b70735b7fb7eeef998325af69
SHA512 e3895df1472d845b923fb273c627f9f24a8347f35b3d2814e165ba53dcbd43564dde14de96680c9ab2bc116437d37cb6df77e4da5b007f08f82543b039a629e6
SSDEEP 192:sxR7R+b8/fXsi1oArIDde5lSazoD8p4k/g6+WNIYCyuOx+GmIgIJ:sxR7u8/fXseoArIc5lHZ/5IQxss
TLSH
T13632B8166E28993B9CC7E20DBB55BF53D6F95032A1942E48FBFC861C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4b2afabed341bebbfc50a4bbf0139c1683f689028ecc4522510c5720bee56df4
MD5 e1a0fcd8f6b55e78380dddf05b7881aa
SHA1 65a9c5114327bb3e1c46cf593e0130c0bc03c22c
SHA512 4f98df22707a3f1da35b9a998ee8d5e3e4386c0e86623f1bd8cb2f736e0a987514ea54ec706e99dffd0fd7811d362ce4ad2fcf063debfe84ba4278d2a18c70fd
SSDEEP 192:sxRwR+b8/fXss1o1rIDde5lSazoD8p4k/g6+WNIYCFuOx+GmIgDuJ:sxRwu8/fXsgo1rIc5lHZ/5I5xsW
TLSH
T1B142D8166A289D7B9CCBE20DBB55BF53D6F95032A1942E48BBFC870C05E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 851aab0047f82998121d1596e4492d6a908ff1fc339a51738ff8a40bded2a1dc
MD5 47af2381b8b1ef5651a7ad34395db17b
SHA1 ee309d764f7de85e7aaf60d02ebf7ce213ff8f1c
SHA512 1d33508648d4f76095914d9d4d1015bb125890183cafe64d5823dc35f4cb0bcfbb8a416e815f21e00741621f7fed5fb37cec51b20984b346323f0f65e66eebd4
SSDEEP 192:sxRwR+b8/fXss1oArIDde5lSazoD8p4k/g6+WNIYCyuOx+GmIgDMJ:sxRwu8/fXsgoArIc5lHZ/5IQxss
TLSH
T1D532B8165A28997B9CC7D20DBB55BF93D6F95032A1942E48B7FC861C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 36d2cd7f9f8d951a3a6234cc08c8195df563e2223903741e6686c2f1782377fe
MD5 c50a0d4859614b41cba813814e30f893
SHA1 ab90fa1b6f87adeeca9c125a7e3df06d85a44d76
SHA512 cc88b85e673a459529a68b03b321d7b2040fbd13edd3b4f55a9c2a74257fa282f387e547c2a66e2da231a5d46359b28da7f3dde20072e83df8c6ae2d46df2e92
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvuroZSU:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VE
TLSH
T159B2EA2B600DCB7F5F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3b6777e553f1918b520f6039c341abe0fa2cf0e488577f7659be70fec3551f50
MD5 2b2559466c31c9989ea3cf0add1077a5
SHA1 20ec37d8507f5dd8636327be3cc878426a3b4346
SHA512 7ff05b4cae7399e4270320f7b2cde3621e22f63e305065ab91ac6e3d799aa7b76ceb752a4d5f199a2845d0d270695b045498dc5b9e8f220d991f1462328f6643
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHFSr/VPTXWbAOgHXK42gZXc9lnpkz3pDjX:CbEBVj5JAdSp9/EgTK7j6dJOHFSr/VPd
TLSH
T157917191743A0240787DB91D8278892BE6C270B3341AA56B3FAC41A61F67E475FFDDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c4d77d06-d7d4-40fe-99a0-8bccc56542f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c4d77d06-d7d4-40fe-99a0-8bccc56542f2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 1d68d08b7cfeb8f356b4d98296f04e74dcbe078f502a47cd0d986a79d6f7b5a2
MD5 0eb6c350067168760cef8d24b504f934
SHA1 18a72ebdc06cf13d2df1e4b065b774c71eece491
SHA512 33ffbb3fe39f66d21040c0c0ad0ef2de720bbf3c7cfeb99a69b306812b6f92d45437212ff528368262358356a1489cd11c0f6deee348052b249d042711bf3985
SSDEEP 768:3rv+4UNbd73jFbQVLJp8+p3bd66j+4BRv86aLIWz2bwClP:3bsbp3s38+p3Z6n4yB0w6
TLSH
T13913BF72E8A899339CF6C644B2877A437FB4416386C11A94D9CD6B4D419B1AE230FD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0b1b2e20e2e4650ac8181817bc2361f4d38210c5b23c15ed8ef7125ee2a74f76
MD5 4a2c260ee51173bdd8521b432203c5a1
SHA1 e364798cd61172a9a0e9d283b63c11a28ddda6df
SHA512 e8ba8029abda7e0ba1d98e6692d0e15c9d2eb36e27aa80b71d9af9bbcc63a87dfd9435eb09981f6eee60a3a9c2b7fa266e96552e67a8bfa6fc81a6e45bd9b040
SSDEEP 768:7rv+4UNbd73hGbQVLRp8+p3bd66j+4BRv86aLIWzBj:7bsbp3jP8+p3Z6n4yB5
TLSH
T1F403AE72E8A899339CF6C644B2873A437FB4516396C01EA4D9DD6B4D418B1AE230B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 06162e4c92e643f246e281e12e383e31be34b96baef3a72e3796b3c106196c20
MD5 950bf8e46f92f05c4dc2311aad6b0b87
SHA1 32e6f5b5651eedbb5e8feee6e46263344d92c09b
SHA512 db209d5492a103a9eb504946fc771343f24dfd733be06adb859fd16c393e7cd98451b7ca502b475bd82b875eaaddc118ca93f1482a618d4bd2ebe474e322cc51
SSDEEP 768:rF1j+9132wgXGbQVqp8+p3bd66j+4BRv86aLIWzb9Mt:q913p8+p3Z6n4yBb+t
TLSH
T1CE039E73D898CA779CE6CB54B69A37439EF442A3C6C06D94EACC6E0D01871AD530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 299f339ea28440da5f0324742cba6b86768fbedb81b2c69e3083b1392d079005
MD5 9bd391d31a746c6a2d64b6e29682390a
SHA1 43ab86d431e9abcfc51469c5dff5a86a39d3caf8
SHA512 2066413d0aac03b2261292a0b79b6cd6aca3f2e4103b15f37c5e8f110423c0167fed54e9255bfdc04ef6c5d4da15971bc138f4f842a1a4e5f593f594b53f8f62
SSDEEP 768:Irv+4UNbdD3PcQVTNp8+p3bd66j+4BRv86aLIiH2bwCl1:Ibsbp3jL8+p3Z6n4y90ww
TLSH
T1DD03CF33E8A899739CF6C648B2467B433FF851A396C10AD0D4DD2B4E419A19E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79613b86-d3e1-4d46-8d0c-86a7025ad40e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\79613b86-d3e1-4d46-8d0c-86a7025ad40e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download