b4c31c37c8acb598667cb42d0d6f1288d62950b1c354b2c4dbcf938ae9824adb

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 41KB
Sample260721-pltwdswarc
SHA256 b4c31c37c8acb598667cb42d0d6f1288d62950b1c354b2c4dbcf938ae9824adb
MD5 bc999e9ef04f8de222b8a3610fbf34f8
SHA1 e2cf612f68d9219fdc50f7c7a70f0c631352071f
SHA512 b4c0c387337a23f6fe7f945e6ccf468f195f5d27367d6c77f9495c3ae7f855f17bb198c122a3fc326d3ddb46e9c5e0a76d222f3ee4a4690da843ea13de1e7cda
SSDEEP 768:lqqZdypU2+KWNR0xlMzoDEEy07gFZaW71KTvGIYQhWo0sCOaN:lhyp5+KWNR0HMTEy00PaW7UvGIYQhfaN
TLSH
T17E13F7B2D18C1437364F63A99162B729F5BDA624CE019768B1FD616CDBC0EF611B320D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291104353713403"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{6FB345BD-2BCD-469D-AB1F-707CCAED848C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 3808	2040	msedge.exe	90
PID 2040 wrote to memory of 4604	2040	msedge.exe	92
PID 2040 wrote to memory of 5688	2040	msedge.exe	93
PID 2040 wrote to memory of 5688	2040	msedge.exe	93
PID 2040 wrote to memory of 5688	2040	msedge.exe	93
PID 2040 wrote to memory of 2252	2040	msedge.exe	94
PID 2040 wrote to memory of 2252	2040	msedge.exe	94
PID 2040 wrote to memory of 6684	2040	msedge.exe	95
PID 2040 wrote to memory of 6684	2040	msedge.exe	95
PID 2040 wrote to memory of 6684	2040	msedge.exe	95
PID 2040 wrote to memory of 7080	2040	msedge.exe	96
PID 2040 wrote to memory of 7080	2040	msedge.exe	96
PID 2040 wrote to memory of 7080	2040	msedge.exe	96
PID 2040 wrote to memory of 1472	2040	msedge.exe	98
PID 2040 wrote to memory of 2452	2040	msedge.exe	99
PID 2040 wrote to memory of 1900	2040	msedge.exe	100
PID 2040 wrote to memory of 1780	2040	msedge.exe	101
PID 2040 wrote to memory of 1780	2040	msedge.exe	101
PID 2040 wrote to memory of 6320	2040	msedge.exe	102
PID 2040 wrote to memory of 6320	2040	msedge.exe	102
PID 2040 wrote to memory of 4688	2040	msedge.exe	103
PID 2040 wrote to memory of 4688	2040	msedge.exe	103
PID 2040 wrote to memory of 5332	2040	msedge.exe	106
PID 2040 wrote to memory of 4908	2040	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ff8ebaec188,0x7ff8ebaec194,0x7ff8ebaec1a0
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,14656408787376452425,1767343803921963120,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8700905972534912197,4789201291062261331,262144 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,317063601164980085,9894069088238374013,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:13
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,6853227119264770946,12620091642950382701,2097152 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,7855186665426544561,14365720549999784683,2097152 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,13668719188248997149,9357480389067055786,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,13064235310432352934,13172955075998316896,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,18194805363080716290,13574609744451455710,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,14917277152687809376,10067247649035996073,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,16388493223559730661,12063827413091893463,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:6320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,11943939359725446100,6784967649484145258,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,3306602513801935686,14597516814410263958,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,3306602513801935686,14597516814410263958,524288 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6048,i,9103838012980195313,1462266240776835990,262144 --field-trial-handle=2632,i,573908762548230576,15182573303475974875,262144 --variations-seed-version --mojo-platform-channel-handle=828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 34f2794981955571f3f8d9864b4613f32fc573c584a765326ff62d3e304b9829
MD5 c6e91e3d6475085ee1507e2e344e5e84
SHA1 33b20a80f49cb4f0f3e6c303df2f75dfa5c239d7
SHA512 47b711fdfbaae190dea2fbf3084cf36c1f0fbfb1d75facba8fa7559e11b872c711a098fe8da29afab5b88098efde138662e1d537fe75091757486343ac0770cd
TLSH
T1D2F0F9AAD821AC3719FC1B1870941B4BE755135B3B41988F3B3C821D4FB463B474681C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000038
Size 34KB
SHA256 00ac21afbf0717b4406a5be832456e7a7cd12436306b7bd36da294715718f31a
MD5 c0daca89e9aae196582ddfb462599c13
SHA1 a08b252e2ddde06e8f41d47cdfa83e94dd1371d7
SHA512 849ff0cf6f5039629cb71568106b71b9b99725742eb1224c22d157e11725c1653fa0fe0a51f9e536392e508f4ecfeeda981a66ac34c0c38002bd3ce5d54fc1da
SSDEEP 768:K+/ZHuieGNwLKwEm6mJlr/ETjqm2pxRlq1wLLDrSG8KDc8z1z+m:KShpeGyLKBm6mJJ/EvsRlOSWpKDZ1Sm
TLSH
T129F202F96EABA3811C827759290333A0EB2490EA8DD30775F6BCE6BD5B210D141262CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000039
Size 29KB
SHA256 2403e1a1abbaa8f911da32a55052a95352a23250d3caf33cfd9246e4084fcac2
MD5 fc3a54126b60aabb257a03ee7368bccc
SHA1 2a52d4a13d6025b116c7e2670d8f15b00731100c
SHA512 9ad6ed709ca7da4609e33758d4fcfeede77b7a56f5f8fa2919073695baf49211fabf6905be9ef778e0a060cd11260d0e6eadf4fc0f056dedcda23140640a6622
SSDEEP 768:v8oH3TFQ/RFGRvWIjStaNFCQ063vrSecl8Ba5n:v8oDF6RFGg/QX3Dlclt
TLSH
T19AD2F17215819C2128FA6EA095602547C17CC539C78A7AAC837DA452FABF92E0339E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003a
Size 63KB
SHA256 2fbe9f79c4dbf5b2eccbc41a979ecc8b2bc104fa76d001d15a38e36df2f516f6
MD5 335ae7646a69be7bf9eff5922615f89b
SHA1 b4c66f60d89b3c9c38c35f6b7b82c796f4a72cfd
SHA512 2c41e3dfb8d27c0b74b07493474430997bb76d065b518f29f16739ca0899883761875bc44811e64f4c494b1ea2d1b38752ebadea0825b8641f5fc067ed68da1d
SSDEEP 1536:z2PdUh17aZ20vW/3prSJ0rOetW3maS/7FqvId7nDA:z2lUr06pi0KEIvI9nM
TLSH
T126531211DBD3FB80C4D55B2DA9A44ADC0D671B382688D242E3DFC1B60EB5E4452EED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b
Size 254KB
SHA256 41b8a4f54af93134d8b4b49d239631c8195a720edffaec43c0e817cb9d1300a4
MD5 83af79a15653e6b2f335e889063af512
SHA1 c2f17966ae57bace596fa9c60d14d299f261ec38
SHA512 b7c7d42e6e725fd8b886e7b4631c03a225e9ae49d57ac3bbb3b73410c51b0f9d9ad56be81b3bad706e77c6aa5272973eb0b3529c8c5f44a01bcd7e42811b3486
SSDEEP 6144:Fhp1iM9EKWKkq1YH+4eWTIPcJiw4rJmbrqRbvR:FJ98DH+47dmcnqRbJ
TLSH
T1DC441225CCF57F23A29157865EAA1134E25F178515FA466CD3272A6BC8A3C7322CFCE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c
Size 118KB
SHA256 13b17858dc02130403064bae0d228f332006f02357fa477e1e3a6c9e0c998e5a
MD5 cfec67e6db623f0c8233164b641a7cb8
SHA1 4b0bc77085d9314f134156c51508ffa6900b3e9a
SHA512 e08ede4bb018406232271bf2a35e71bf0f6bb91df98564e425240135a3e425501ffe35d5c1dcba5b4c6528efbf4ff203470337eafa3d4eb64387bb7aae848931
SSDEEP 3072:hjRdrHJS6up6HppSLJ6xJ/Y5ITQLwhJYrOocIVHbN/P:hj/rHM6up6HpwErOISwhJYio55bFP
TLSH
T1B3C312E0F40E6E40560063E79B01821FB91BCCBED79D7289A7D053606CABE958E5BCD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4db9c44e840571b85fd7bca683bce7d612f30823182de522a470d396dc9cf8e2
MD5 4ea30543b794dd32b0a71e35c6a2d71c
SHA1 5d93ef38ea0c5e033281bf9d955897d32e769d43
SHA512 18b0d91968b03d3bc2429a5ddcbcb93b15287c1b4a6337f5096520f3866d913053413b7e7869f0ce8d8e4bc2ddfda23c3d0b13890b5b8c2447e2d04a077d71fc
TLSH
T10A41BFF783F4866ED91196F0AA187E2BCE1D0515832C3C5AC9E0AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c552cec671592756816bdaefbf534314d25f5147e66b75a94e7a27f09ff02eb1
MD5 970eb24032e9db5742fd67af8aeeb984
SHA1 3d8379b93340da97ce5e973930a994ea8440a596
SHA512 ae3b6dbbfe3e8a0e677bea7eeca6d408715fffa189a7384a6ac0dbdffab1bfba92ea5acb653f0e5a97e9b2b0f6183dfe7a852638b5b6566ba393b45c33bbd302
SSDEEP 192:sxR2RKyMqZjK1Ml8wbL/frse7NRZkWzoD8peH/g6+WNIYcC4ClsGQfG9IgjRJ:sxR21lL/frse7N/kK0/5IW4gsGQyjb
TLSH
T14E62C915AA789D3BCDCBD219FA557F53D6F81173A1905E44AAFC8B0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 5dc470595b07eac568513c0496cc0f6255c63f7ab2d0fe0976070ef593b52c1a
MD5 c7eacffbb6b5118677eaeced9e4240c8
SHA1 42c53e41b46152ca19e99a046d29a850d63a3231
SHA512 dd5e06d2217d13833909556f9ffc9d01bb7ba19511d762af0422e6d4cd91dad7f1d130f1154a019642ff180914cfa1ba2d157cec347d9057bef6d86dde05d4f1
SSDEEP 192:sxR2RKyMqZjK1Ml8UQHbL/frsR+NRZkWzoD8peW/g6+WNIYcC43lsGQfGxIgDtRJ:sxR2nq7L/frsR+N/kKF/5IW4VsGQQRb
TLSH
T10562DA1AAA748D7B9CDBD219FA957F93D2F81173A1501E44A6FC8B0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d563f023ec10c8dc2e440ec7039365da5a626f8f884cbfbf1461ae02031a99bf
MD5 cf60eecfd0dfaf364d5de27a4d95fda8
SHA1 99a51547a750fee4765c895d052f8b634401c74b
SHA512 adb753300a99a683507c20e5310eec49a21da06ab7dee5a28bd14d41ca576c767e1a1432fb4dda5e3bf67c831f10a81800e6cfc3742f878e96d6f2e768ecb054
SSDEEP 192:sxR2RKyMqZjK1Ml8wbL/frsR+NRZkWzoD8peO/g6+WNIYcC43lsGQfGxIgDtRJ:sxR2nlL/frsR+N/kKZ/5IW4VsGQQRb
TLSH
T13762DA1AAA744D7B9CDBD219FA957F53D2F81173A1501E44A6FC8B0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 174b7d97fb80633462accb656ba471e3a8f36a8e38ab885dc26ad0dfa36d96f1
MD5 77f62b1fd9a0424d6c02cf1af76fed82
SHA1 da1cb67bed5839544f764e9247bd71ee10012ab5
SHA512 4a07f4a5e577b32b5a10583c33d5dfc9cae3c1f7fd47ea91666c8280028cdcf100fa520de776c3495cfe07c07c8a8116b1e0b2136bbe81ef467093891308f556
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9fFb:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRU
TLSH
T14EB25D51713F4680383EA90C9178D82F96C2B4A37519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 1747a5e18f71d72e9a609e31e835179ad9a7dffb0dba7e0004172541e1e31d7c
MD5 4640d5a03edfa869c21f6d7e8eed109d
SHA1 9e7900da22c1c409fccf60625304b2ca527c84ff
SHA512 5c09f3a3677d5fda360c5a9678048d362849ca240450198ca1deb0553dec6adc66e6647c86b81ed025ac8cfc875f08f294a0d91b2c90df05cc572d76b2144e17
SSDEEP 384:n7iF1tNn/s3n9Su8NLW8TUNTUlIRUPvuTun1dEqfbzG3+3YEi3rW5XQ3T8LEEIzM:WF1j+9TQWwgquC1jG3yYEMQXQ3W
TLSH
T1C5B22A36E855CABBECE74ED9B60A3646DEE0515389CC5AD4DADC6E4C00CB1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 766b82b0d69035152287ca5b0f14b81a9a68a126e7fc087cfefd4174e4bf38cf
MD5 47404b2b7261a0fe4f13f0cbd42d1aa1
SHA1 ecb12b16cc7636541c6bfd8f741a758262272882
SHA512 05f0e1136f117738b46580b1f12d33106a7ed5aa299539e335394534e93befe18c3460d43606b5698e37e00d7b5d9541a885c7d97531cebce35ff785e0e00f87
SSDEEP 384:n7iFEtNn/s3n9Su8NLW8TUNTUlIRUPvuTun1dEqfbzG3+3YEi3rW5XQ3T8LEEIzM:WFEj+9TQWwgquC1jG3yYEMQXQ3W
TLSH
T1F1B22B36E855CABBECE74ED9B60A3646DEE0515389CC5AD4DADC6E4C00CB1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 253b64e3ac13fcfadaa49b88be462f76e5f6611ad8c6afd4853164564aed26fa
MD5 450b11cd1e37e6b292e9ef2a73b2a809
SHA1 c6d6a438f00445fd266a9cd9e1c57ef2610fab22
SHA512 be305a99ec945fd9fd7df13abf9d979fa671551d779c2ef5d6a1fbca4c95c8cb439fb4c83a35cd17c4c064123e2fed48b9d2b68ae93d0cbe478af069ca40414c
SSDEEP 384:nsiFEtNn/s3n9Su8NLW8TUNTUlIRUPvuTun1dEqfbzG3+3YEi3rW5XQ3T8LEEIzM:XFEj+9TQWwgquC1jG3yYEMQXQ3W
TLSH
T1B5B23B36E855CAB7ECE74ED9B60A3646DEE0415389CC5AD4DADC6E4C00CB1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 11d9a7f0cf0d48ac1d1734f57ea3f5fa70f4abbe3a2187d779e3c828cbde7457
MD5 ca26f0ec5a64227d84dbd96b8ad707ec
SHA1 4ca9e341d172cbdb5a48f15f30cd614fc73e2623
SHA512 cf26205cc75cb7e39879301b4c7c1b84edc19d8762789210944faafd17570b875ad1ac97a553cd6bc1b9801ebc4616ce571abf9474ac32619f87f0c204b3c5e5
SSDEEP 384:naiFEtNn/s3n9Sq8NLW8TUNTUlIRiPvuTun1dEqfbzG3+3YEi3rW5XOObjI9G6wQ:RFEj+93QWwg8uC1jG3yYEMQX29M8
TLSH
T122D25C36E855CAB7ECE74ED5B74A3A46EEE0415385CC5AD4E6D86E4C00CB1ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 894153560edfe529cb59bb625932d4aa415d4dc6e6d325c50eb84e9fc680f689
MD5 c61c7b1466b6ce7caa7ab8e13a04a2f8
SHA1 5a4b7880d73207b095d89142f4eaeb9c897860ed
SHA512 12bddf147315d61c77021353359dd67dd158b48f7eb91c909984ee3f3421b8bff681c253ce8a5bbe2d2d5ecc41c0b09d4d1abce53fadbf4a63e2df251bb972d1
SSDEEP 384:nmiF1tNn/s3n9Sn8Ngs8TUNTUlIRiPvuTusREqfbzG3+3YEeL8OObjI9G6w7ZV8p:NF1j+9SXswgUu7XG3yYE8829MW
TLSH
T19FC25B36E859CEB7EDE64FD9B70E7A46EEE0516384985AD8DAC85E0C00C71ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download