b07e4b3754e8f4a0592ce4cc986e77472b075a055bba8401f14baef749750304

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 01:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 53KB
Sample260804-bsnq3aag44
SHA256 b07e4b3754e8f4a0592ce4cc986e77472b075a055bba8401f14baef749750304
MD5 919ef1b849d02b5657829931ead18edd
SHA1 5e98522b80d2f7adbd376868a51913e4ed543987
SHA512 8d1f5bf3839dfeef804b77a0f195b345ce98ab2414897f788f5cf09331c432e1f68feaba4b5fb384267c2fd99ac56d26b43f7fd39a9ac23b5a78dfcf4bf9adeb
SSDEEP 1536:ttADP4DG8zioyHDv1uS/Ey+81yK1YPWPubvb/:ttA7AG8ziLDvR/Eb8wwYP8ab
TLSH
T15733CFF21E43B94F683B5A45788BBD0E23E95227687F20F5C9336F1005AF70A585B889
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3480	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302802964553593"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{3195937A-2CA0-4928-BA06-437963384FF7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
200	msedge.exe
200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe
4764	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4764 wrote to memory of 3396	4764	msedge.exe	89
PID 4764 wrote to memory of 3916	4764	msedge.exe	90
PID 4764 wrote to memory of 3480	4764	msedge.exe	91
PID 4764 wrote to memory of 3916	4764	msedge.exe	90
PID 4764 wrote to memory of 3916	4764	msedge.exe	90
PID 4764 wrote to memory of 4908	4764	msedge.exe	92
PID 4764 wrote to memory of 4908	4764	msedge.exe	92
PID 4764 wrote to memory of 3548	4764	msedge.exe	94
PID 4764 wrote to memory of 3548	4764	msedge.exe	94
PID 4764 wrote to memory of 3548	4764	msedge.exe	94
PID 4764 wrote to memory of 4116	4764	msedge.exe	95
PID 4764 wrote to memory of 4116	4764	msedge.exe	95
PID 4764 wrote to memory of 4116	4764	msedge.exe	95
PID 4764 wrote to memory of 5948	4764	msedge.exe	96
PID 4764 wrote to memory of 5948	4764	msedge.exe	96
PID 4764 wrote to memory of 5948	4764	msedge.exe	96
PID 4764 wrote to memory of 5524	4764	msedge.exe	97
PID 4764 wrote to memory of 5524	4764	msedge.exe	97
PID 4764 wrote to memory of 5524	4764	msedge.exe	97
PID 4764 wrote to memory of 4224	4764	msedge.exe	100
PID 4764 wrote to memory of 5348	4764	msedge.exe	99
PID 4764 wrote to memory of 4224	4764	msedge.exe	100
PID 4764 wrote to memory of 5348	4764	msedge.exe	99
PID 4764 wrote to memory of 4888	4764	msedge.exe	102
PID 4764 wrote to memory of 2868	4764	msedge.exe	106
PID 4764 wrote to memory of 5672	4764	msedge.exe	107
PID 4764 wrote to memory of 5916	4764	msedge.exe	108
PID 4764 wrote to memory of 1216	4764	msedge.exe	109
PID 4764 wrote to memory of 1216	4764	msedge.exe	109
PID 4764 wrote to memory of 200	4764	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb7c4ec188,0x7ffb7c4ec194,0x7ffb7c4ec1a0
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,14999195616374645345,2546025924652821963,262144 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,7118072869869376317,3713170236519362917,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,1380928202818594156,11744740046686880830,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:13
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,3896142220257962504,2035412670385424831,2097152 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,16726003494670507950,8753749980954687558,2097152 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,7567566364362272948,4069542975988861917,2097152 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4428,i,16352764171488747607,4110196039530368820,2097152 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:9
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,2640914199143786832,3371738708789390916,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,4623155928582122457,1050551874272818436,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,7298551652343831339,5375788924175833376,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,7298551652343831339,5375788924175833376,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,17018631744010595617,6789684497975181003,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,15336648964294382557,3530218353957094066,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:14
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,17171854387062544919,14932109381063804204,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,2040800976789286425,3694693491669587094,524288 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6424,i,6083656530495418572,374622515405511740,262144 --field-trial-handle=2004,i,14482203345469600256,880835782351593600,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

7682861d-bf6c-4339-b749-ee044aa6a3e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7682861d-bf6c-4339-b749-ee044aa6a3e5.tmp
Size 11KB
SHA256 ea1f943d7f452ac8913a9ae62b00428002c9ae284bd96d60ebb08adc53512112
MD5 f742538ee8f7bcedbb7178ae3ca6e7b1
SHA1 eca567ac5cc464c21e44b4d6dd9c2c846a54130d
SHA512 0eb435e9d8374444ce2a2315ae1a10b72639368030164cd8d9af748e5513d9e3d13c30943d3b12edb68cd07612699031d95bfdfcf02f0357d6ad4021daa649dc
SSDEEP 192:sxRNRNb5/fDsJWvYCbjzoA8p4u/g6+WNIYE936GqNIgIJ:sxRN/5/fDsYvPSX/5INys
TLSH
T18232D7156928A93B4CCBE21DFB56BF53D6F91033A1901E18F6FC961C04EBADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 355ac6fcb6af01fa75b77a6ef98fa082c74b162c518a488108142cbe6bb19a5b
MD5 ad768b0c272ad25a02b1aa579cd0f69d
SHA1 7617db09538d3960f083dae58da2d575a2bc862e
SHA512 970c77a920b7215be56e371a57635ba338351f7a73d32f8f22490ff329ab48884562d6c1877fef4464879989a54390c11ec4b0ed2c92bd5a177958fe68677a49
TLSH
T11961C674432229D1F7A499BA20E51294FBFEBC96A1072FD5D1409D31428EFF465F18E3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a389.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a389.TMP
Size 3KB
SHA256 5e3beca96bcd725f5bd19a5f1d130ffa5a2e0a7be8fd3018d98bc454aa719412
MD5 ce379f5d0fdb6af2fe92032c2cc7eeff
SHA1 e575d38cc5aeab9137cf9b9f196139aa49d0b1b1
SHA512 fbc7f609df0f0699442376362eed7e32dba66f6533f1190d6b2eed3c88b3a14e1a4789bdc324728adaf677868e94e18c26f5dfda529ab161fc741fbb46ec5d2d
TLSH
T1E9619574431229D1F7A499BA21E51285BBFEBC9691072FD5C1409D31428EFF469F18E3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e48820a-4e8f-4eb9-be4f-2b23786e72c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5e48820a-4e8f-4eb9-be4f-2b23786e72c5.tmp
Size 1KB
SHA256 686477c467909345c9ad7cb63544f870ee5b5595669aced99007cd901702f21a
MD5 bcfe5fd69710f6ceb87b0a930d03418d
SHA1 a24c59f6a1b1c4299bb0dd7f10312a75ac721149
SHA512 9ff8a3025e3dace4dc92373358957a352b0a807f5bff2702634027ea6d768e8e951c16ef7179b328d6138549baae62b1e8a6c4362d03388d6ed6cd49ae55c38d
TLSH
T1B841ACF3C7E4866E890156F4AB146E1BCE2D0915832C3C6AC9E4AE2B93E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fc4eeaa87201684307bc5d964ed5c28f729313625e1b976562d537bd47073b23
MD5 ee0c4728b2b5acaa4f091a5592c7a5f1
SHA1 21a650c903999e8649bc1dd4c4b5613f93175aab
SHA512 380e57433e2783c026452ddf6570450cfd5c38603ba8ccd1e8558b469d486175508a0b2ce18ce027d81bc33d3987e9dc239516de2bad51fdf9744ab85d5c5dfa
SSDEEP 192:sxRORNb5/fDsjWQYCbjzoA8p4u/g6+WNIYEu36GqNIgD1J:sxRO/5/fDsKQPSX/5Iayr
TLSH
T16232E805A928AD3B5CC7E21DBB55BF53E6F9503361901E18F6FC961C04E7ADD620340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2efe4172a2c8d08971f258b16a3f115a2b89590e0b564d8cb0d7be94040ae8cb
MD5 382ca069e8d772797ccc3e983b2787dc
SHA1 f8dbb970209c0f5be9ebe3ecca99907b46f2d8cf
SHA512 fd8f31e67200c90189b3f7c5c7aaa4153bd7619740d9a618ddba8cd421ce369f2226a95a1545443038f43b20b4a5f15ec7973597f43333cf6331c08d3d7edd96
SSDEEP 192:sxRORNb5/fDsjWvYCbjzoA8p4u/g6+WNIYE936GqNIgDzJ:sxRO/5/fDsKvPSX/5INyB
TLSH
T1AD32D706A928A93B4CCBD21DFB56BF53D6F91033A1901E18B6FC961C04EBADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0d3f118d0c82ba548833d5f478a8cf1d086188b7ea52d5fc918a5e42102ed192
MD5 030de18c889025ff0d9b67a58eb84d17
SHA1 2e540ba6bbf7d4e8501babbef0cdef71bffb72e7
SHA512 339fc9a568d97d0332a755d3929883a18cfe1b4022f615cd4fb9506f02138eaaf5e310c8c0404f8fb3a4111e64c08ccdabee8a6036a4019cbb1928c2d51b9e9f
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVk:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoV
TLSH
T1F8B2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 27d41943700bb2240033c311f626167f55aa6fa402ba81f9eb8d44c214871af9
MD5 108ed2cb005c934b5dd397f4ce7f4990
SHA1 9469b5144e7c9531004066391182939fabcc978a
SHA512 02732ff9489432e0e385cb978b26d2cfe0d96fc4abf4d7e15854e1f2739696a7e1db3f6baf6435342286989c68668cbaec09bd32a283f338b6e37ba2d920f46a
SSDEEP 96:KRVCbvlfjHWLQeg3HK4LURlTp5FWtC4gNFK40gjFcrzKtZ+WnyKos+3EboECaauJ:CVCbvlfj2LQ/3dLURlTp5wtCZNv0gjaI
TLSH
T1A3912E00707F92403C7F6A5C91B5891A4283F4A3781DA5ABBFA905A64F67E128DFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 ab2741e0239ef0f2de394a11218748be20cfc056a78b4df9ff4a1bec9071958d
MD5 cc267776caa63e16cf90d75a71b94c11
SHA1 566ed7271db82b7ce726e1c57938f1a47f3231e7
SHA512 68ef8e739c06d76b39ca6a0dbc16a1357adbac7343232d392c25cb342b779d142046fce046357a167b109b948b847ca9b383d749d3e75e2e5577b23c3556f88a
TLSH
T194716140707B9240387FAB5C81B99D1B42C3F463741EA5ABBFA805A54F67E028DFC8D9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3de5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3de5.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8dbd9e905d5005040482b6af71d5106c8f8ef76a5f6a4b6cb0a1d60a666022a5
MD5 a20d1a9e347d2e6d51da4ccf444db04e
SHA1 6a9581b5f3c086ca21a877ce88647cb7ebe3fdc9
SHA512 13e51f7fe80f18394aca0339c458081aa311a695e478ca1380198f67e507e331877010fd0d22f75d7aab041c3a7980378b0b8b2ac470145cf2388e9677977492
SSDEEP 768:7m3JmmwDTd+ZfIgeX6+qTko0u229a4vsToTojKgqmUWhOG+:7m3nfIPvVTVKa4FfgRUW8G+
TLSH
T1F9F2CE31E862997788F7D7C1B24B364B5EB54223D7C82E50A5EDBA0D054B66C230B93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d90004978a949a6cf18926483f35e87917ffee0c7ee71a8d43befda008337f62
MD5 a3bbf2aee1de6a88c0c093b198bbbd77
SHA1 9e34c29118a8636a5526d76a4efd0efef3671c9f
SHA512 fb07dc57e66adfb3bf4669a9a1cc8ad1085467681cf7ebff3e74238e417cb0ff2f72b0e1f316b048319cfd561f3355ea48fef510eb5cdcf1e721bb3d7ab9c19a
SSDEEP 768:tm3WmHwDTd+ZfI7eX6+qTko0u229a4vsToTojKgqmUWhOG+:tm37fIqvVTVKa4FfgRUW8G+
TLSH
T1EFF2CE31E8628D778DF7D7C1B24B364B5EB54123D7C82E50A5EDBA0C054766C230B93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 edd49d68ac3b4838056112af849fe6f078083606218e51613a71efb678d0c0cf
MD5 ae72d4d992f43541bc69e14af7352dd3
SHA1 b4a33ef7747751ec317c7b030ed747e99ce250eb
SHA512 0519a0a8ada4608c9a62486ba2b82c68b1a35825bc67a236d35e7b6a324a5a77c7b13f918793af51f361819665b4f3e2d2799aefaddee7a91ecebff08981b15b
SSDEEP 768:SFQX3nwgBmmwDTd+ZfI2eX6+qTko0u229a4vsToTojKgqmUWhOG+:pX35fIlvVTVKa4FfgRUW8G+
TLSH
T12603BF72D8A1897B8DFBDBC1B25A324B9EF54173C6C86A50A6DDB90C01476AC130FD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d712f9f0ae1f60f04db633c69aa8653d7c75fefbea578854b0dcf3e63a327d3f
MD5 cd6263548c969eccc5eddb814ab052a4
SHA1 16d1d978d5665340f94f3df7ff0998ca495ab0a7
SHA512 b0be3ff3d3c55aa0bb4f53d5d7094d9e02f7b152f18e8350f6c2e211855ab4d7762924bff738ab6e8d17e8d5328e356334c037932335b9ca7e40e3972136a696
SSDEEP 768:prv+4UNbdG3JcqDTd+Zf3eX6+qTko0u229a4vsD5eVH1SdW:pbsbU30fGvVTVKa4AEH1h
TLSH
T12D03CF32E8A589778DE7D7C4724B754B2EB91163C7C80B80D8ED6B0D069B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a041d1d5-6ae0-4e6a-a894-ce737a76eb4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a041d1d5-6ae0-4e6a-a894-ce737a76eb4a.tmp
Size 35KB
SHA256 c7f23e40e95954ac4875d5eee848ad4bdd2e07c80645a9a5a4d86d1dada218ea
MD5 3baf25f7bdff23cbb38fddf8e83d5dcd
SHA1 1c93cadbf4185e6f561e5acefc59619e9e7a1342
SHA512 41a72ea66d25bf698a1a78c851889ca32c6cbd7cc499ddc75ae3235e331cfdc65d962f5072b9ecd090ed3a257e6a95da82a5fb8f67f956f211fe2d0b277adbd8
SSDEEP 768:Rm3WmmwDTd+ZfIgeX6+qTko0u229a4vsToTojKgqmUWhOG+:Rm3IfIPvVTVKa4FfgRUW8G+
TLSH
T1ECF2CE31E86299778CF7D7C1B24B364B5EB54223D7C82E50A5EDBA0C054B66C230B93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download