1abb99bdb994dce0d2ab785e3f67a18d4b6e4702490e621403fa64ed6c9dd359

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 02:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample260804-cqhbyabd78
SHA256 1abb99bdb994dce0d2ab785e3f67a18d4b6e4702490e621403fa64ed6c9dd359
MD5 5cd87de5a25d50dc7612df1f68898fb4
SHA1 fed0f60f428e54c41d0143cf2e00bff0cc5057b7
SHA512 a28c4452930b0bcddb23a4f9865894f1e5c30bf7cfe3b2411d8f78707a7a2bb54b3178f4929070527098c3838c2956c915d450557711c7c22a81b93b78edf437
TLSH
T1ED31236F8C4E9EBA43101982F360B29EB05FDE0FD5C198A688B7027166E17D4C54D053
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2440	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302834266681868"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{4FB74833-8821-435B-8959-1EE031C458EE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 1560	2868	msedge.exe	88
PID 2868 wrote to memory of 5732	2868	msedge.exe	89
PID 2868 wrote to memory of 2440	2868	msedge.exe	91
PID 2868 wrote to memory of 5732	2868	msedge.exe	89
PID 2868 wrote to memory of 5732	2868	msedge.exe	89
PID 2868 wrote to memory of 976	2868	msedge.exe	92
PID 2868 wrote to memory of 976	2868	msedge.exe	92
PID 2868 wrote to memory of 4540	2868	msedge.exe	93
PID 2868 wrote to memory of 4540	2868	msedge.exe	93
PID 2868 wrote to memory of 4540	2868	msedge.exe	93
PID 2868 wrote to memory of 4588	2868	msedge.exe	94
PID 2868 wrote to memory of 4588	2868	msedge.exe	94
PID 2868 wrote to memory of 4588	2868	msedge.exe	94
PID 2868 wrote to memory of 2692	2868	msedge.exe	95
PID 2868 wrote to memory of 2496	2868	msedge.exe	96
PID 2868 wrote to memory of 2692	2868	msedge.exe	95
PID 2868 wrote to memory of 2692	2868	msedge.exe	95
PID 2868 wrote to memory of 2496	2868	msedge.exe	96
PID 2868 wrote to memory of 2496	2868	msedge.exe	96
PID 2868 wrote to memory of 3564	2868	msedge.exe	98
PID 2868 wrote to memory of 1556	2868	msedge.exe	99
PID 2868 wrote to memory of 3564	2868	msedge.exe	98
PID 2868 wrote to memory of 1556	2868	msedge.exe	99
PID 2868 wrote to memory of 5628	2868	msedge.exe	101
PID 2868 wrote to memory of 4924	2868	msedge.exe	105
PID 2868 wrote to memory of 5916	2868	msedge.exe	106
PID 2868 wrote to memory of 5600	2868	msedge.exe	107
PID 2868 wrote to memory of 1800	2868	msedge.exe	108
PID 2868 wrote to memory of 1800	2868	msedge.exe	108
PID 2868 wrote to memory of 4768	2868	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffbb0f8c188,0x7ffbb0f8c194,0x7ffbb0f8c1a0
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,8949940861813641032,16478744324091210747,262144 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:2
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,1154768887747071215,522524267290895869,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,5394554701163858561,15894276757770038172,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:13
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,8195542402707425526,10796067191966408980,2097152 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,12393152625267152668,5662893911030656971,2097152 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,13749915690401900713,13496243883003642597,2097152 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,18201293047959575958,939720707753595205,2097152 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:9
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,4489112267165861486,10226374654242490112,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,1050472951996111416,2892967745466574265,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,1304831575532036566,16790433704118966832,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,1304831575532036566,16790433704118966832,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,9504253259529344761,10840842552642323390,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,1124246010903117793,1810514556826678252,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,3898088639975262652,6955342648152927058,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,11727195213149152910,3349158376321157085,524288 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,1008435204029112692,18374521947777556447,262144 --field-trial-handle=2736,i,17361712095112543112,10231577803710973599,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

21fcffc0-cbf2-4705-a37f-e82133f80a2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21fcffc0-cbf2-4705-a37f-e82133f80a2d.tmp
Size 11KB
SHA256 adf55b5bd1ae3a53c7ba5259a1184098421e46f65238e49e8f922a86190d12bb
MD5 9e6716f4a136f8918ce5fba1e16a8588
SHA1 6267ed8e347681d2623cf3ff74c5653cfeee6f91
SHA512 c9d437ed2940fac4ac995925460b34ab36a0ef5c5fc103c03b3af36f5b220a190768b4e4e3c8f9131635e3631a1bdf66c49cbcf092e19504d9ddb51c2b460964
SSDEEP 192:sxRyerbgf/fRsGiV3AtxzoA8p4O/g6+WNIYZFLKmGMIgIJ:sxRyePgf/fRszVFb/5ISRs
TLSH
T14532C7156E28A93B4CCBD21DBB55BF53E2F95032A1901E08B6FC971C04EBADD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a80ff4d86091f8bd001083815c389423715830e3264b5a1801608e55b7eef589
MD5 770c187b265f9c5607c71f6f34bb712c
SHA1 61c98f895757179d0c2289ba0eab4d1e0e994234
SHA512 3eb1ef44105cdbf5cf763749db826d14c13d1f88d74402e4f40ed7ea08ba26671632b7ce7c6c2f2b0c32dfd298d1479d17d72aa2c9ad4af1260f4591bad972bd
TLSH
T1CB51524683F996EDD775E2B512E286B43EF6BC3A83031E12A058ED33890AF1B50D0017
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1ffd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a1ffd.TMP
Size 2KB
SHA256 72a9ce9de145e003fd457c72ecc80bcc944ea12792f93b69036beb847a96f1c6
MD5 3ce7d966e06375a41e8f6a3949aa1d59
SHA1 0f67962a81d8a3de2849c770a977dc2182accc58
SHA512 59565fb80d4728ace463624f67ce1159c1f656cca020d61d3836955cb586cacd8623c3cb19428f54d5876b4e583f57acdd2d185426918e0e29963572a6138b33
TLSH
T1E751634683F996EDD775E2B152E286B43EF6BC3A83071E12A058EE33894EF1B50D0017
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 29b775deb37644c318ee13575a36b3eeb8db32746b21f3368562cde17a8593f5
MD5 219ddc5cb1943f72aca4ea694e063d62
SHA1 046a0bdb8466b6500646c7039e3ded9ed9cf853f
SHA512 5fb2b2e162fcfd0ab8bdce7a2e1e73b3e51d74a235ff8508ea374a0a9c58c12f46a5b4bc9ccd3b78c1b78e0b9a77a147100df9c49680583ccb279b0f6ff067b9
TLSH
T151518DF7C3E8967D8A0156F4AB152E2BCE1D0916436C3C66C8E4AE1F63F28B1E14059F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ee8ce695-7b25-4092-bbf2-994280812cc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee8ce695-7b25-4092-bbf2-994280812cc1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e2a429797c1bc4b124e78c68a8237db3362bfc5be103e5cf66bb6e86f1e9a0d0
MD5 092cf8d7042aa7fa75804dba2329edf7
SHA1 722c73cdc3f671259ab53e1968682420ca6580ee
SHA512 4444e10182b08a42eb28415f417df68bf921b3f6f875296cafecf5d220215419c902b6873ba4c9834c28fa96ba5bdeb2ba832a0d511d6822755792a04cb8e23c
SSDEEP 192:sxRDerbgf/fRsl3iV3AtxzoA8p4O/g6+WNIYZFLKmGMIgDSDJ:sxRDePgf/fRsYVFb/5ISRc
TLSH
T1AE32D6156E68A93B4CCBD21DBB55BF53E2F95032A1901E08B6FC971C04EBADD620790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9654ce3f47457f6c516e189b29680416ced9aa4fb843def46e6da5f8d5e98ef3
MD5 e33aedb489bb405a895378a9964437ce
SHA1 f89fec0fc597e82875dd7713bada412b24c8e853
SHA512 3f070e5869ab15cfcf9d2b5e1a82ad8545c7ffb8f655bd2c276abae937a6c79248fbc7e012682ceadc7a8ab360de67441900230d9c10b85682ba33811193e60d
SSDEEP 192:sxRDerbgf/fRsl3ip3AtxzoA8p4O/g6+WNIYZFLDmGMIgDSFJ:sxRDePgf/fRsYpFb/5ISSG
TLSH
T1C832D7156968A93B4CCBE21DBB55BF53E2F95032A0901E08B6FCD71C14E7ACD620350F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 113f81f9c21bbbbddf078400781ee9212c474ef1d6c5d4640d16b838d7966261
MD5 49828f40fd1f171be73895da69ced491
SHA1 43daff29fab5bce0ea3324b606991ff437aae5dc
SHA512 429a94493585f2210c41510f72b6c007fe2b56ef4e5e569ae65b9bd44dbb8f0ff7a2fb83bb7e4535cb942bd943b890071a37a2f017ba1703e7a83e4bce6c9892
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGjArocD:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0V8
TLSH
T115B2CA3B640DCB7E5F800AADAC196FD77DA802C7A6588D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c5627ee6-e455-4207-9c48-2e67f90d6c27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c5627ee6-e455-4207-9c48-2e67f90d6c27.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6ddaa5df5a741e0127d3e57947626fc9f6794a88b572eec9df35a44bebdd591e
MD5 629b3bedc32a19c90555c7c5f7e0e728
SHA1 6e7b93a70b00d9b11044176d2fac39c916cbc90c
SHA512 bae389c841f35f8a302af8697ec29ee4797fb667ad61e645b6f5a1b71eb9be870743647e63a6a0df59e10899e36d77501a0e4912a60e128b7304e7c2ab242e3a
SSDEEP 768:Erv+4UNbdA3ksd+LeSFOUKVtvX4fouOToPvB2thtA9VAg/r:Ebsb63Jsnnwthtt+r
TLSH
T1B503CF32A8AC8977DCE5C298720BB6432FF0505355C40BD49EDE2B5D068B9EE570BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 22f240e0c0a1f769fa127a2167a185aad8b1ad572075441f836fa4e41904ab95
MD5 2c24aa47ccfeea69cca01cf02908a8b1
SHA1 03bf196b4460b7cc2986a8cf87e692fbb69aa5b4
SHA512 b0810f3a32b8e0b477c0cf32f0aab6b0b9d25653f7056d175952c313995d3a67298d6ba93c6120a7426f393c4a8bb914982e4bce1f506a282703e7fbc9c1a8d8
SSDEEP 768:ZFQW3Kwg4rd+LeSFOUKVtcX4fouOToPvB2thtA9VAg/ojKgqmUlX:YW3esnnwthtt+fgRUlX
TLSH
T18403BF7298988A7BEDF9DBD4B20A72425FF04053C5D0ABE4ABDD6E1D014B9DD430BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 536950c1a89434d1922bb64945ae29916f3318a1df520af68430f7396814116c
MD5 180794e01a0dc26dc4b23f3b36c6323a
SHA1 3e2153cde67b37ca6620f7db24ee96fe23700792
SHA512 dec2e714a5028d22834fbaa0acd7fb0387d84f2839edc6e671549bc0e97a8ebcb9e13293628d22a78655a6625334f116c490bf3e517f70029dd857b392708637
SSDEEP 768:Fv3hrd+LeSFOUKVtYX4fouOToPvB2thtA9VAg/ojKgqmUlX:Fv3Ysnnwthtt+fgRUlX
TLSH
T165F2D071A8A85967DCE9D3D8720A72431FF0901396D02FE49AED6F1D054BADE470FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 983e71b6b7a88f4599ab323660b5c86d33a1314744ea5f773c3ff531ef7538e4
MD5 8c51eab7e6634b1b9311d8be081ffcef
SHA1 d15b5ac37cb17b10c8ac76eb9de9830d27ecc39f
SHA512 a41cf92aba646929557e0bf4424530700d9f1903db815517e85b511df5de177a69ca15ea21405e56669a5cca6bfe5f1e7016b8af501268793917f488bedbb953
SSDEEP 768:grv+4UNbdH3j++LeSFOU5X4fouOToPvB2thtA9VAwbeVH1SlX:gbsbh3BsnnwthttOEH1Y
TLSH
T18E03CF32A8AC8A33DDE6D388710B72473FF4515396900BD4D9DE1B4E069B9DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download