9caccd0211e6e894decf6d226dd90c3a8213c8f3d953e297d100551dc98ef8ad

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 18KB
Sample260807-ws3kfa1cmf
SHA256 9caccd0211e6e894decf6d226dd90c3a8213c8f3d953e297d100551dc98ef8ad
MD5 03da39a1218478980e3315a2856d76b5
SHA1 b7a270760438bce92ffce1c4dc51b5a876387fa0
SHA512 bac70ca19a2d4cc830dd50452e37e584efa82bb63b49deb68006b8d7b6c50f6a310bb7580cc3cfbcf92c9795e477da60a57890df517165f7d8dc2de989583107
SSDEEP 384:qx4h74ZIts0OOyA1Rg0RjX8Si0izZ/m+yT01h1F+L1dvzUmi9oAZr0106pKd5PQP:qx4h74ZiBOObt8PzJMgXgwRW
TLSH
T17C928B6BBCF5E4924345C841A730A615FF82D99BCC093817FAAE164A9FD4DB28903B4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4896	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305999231676321"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{8DDCAD6E-C82D-4627-ACB3-406BC7224584}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 4932	3448	msedge.exe	89
PID 3448 wrote to memory of 1028	3448	msedge.exe	90
PID 3448 wrote to memory of 4896	3448	msedge.exe	91
PID 3448 wrote to memory of 1028	3448	msedge.exe	90
PID 3448 wrote to memory of 1028	3448	msedge.exe	90
PID 3448 wrote to memory of 2540	3448	msedge.exe	92
PID 3448 wrote to memory of 2540	3448	msedge.exe	92
PID 3448 wrote to memory of 4984	3448	msedge.exe	94
PID 3448 wrote to memory of 4984	3448	msedge.exe	94
PID 3448 wrote to memory of 4984	3448	msedge.exe	94
PID 3448 wrote to memory of 4812	3448	msedge.exe	95
PID 3448 wrote to memory of 4812	3448	msedge.exe	95
PID 3448 wrote to memory of 4812	3448	msedge.exe	95
PID 3448 wrote to memory of 236	3448	msedge.exe	96
PID 3448 wrote to memory of 236	3448	msedge.exe	96
PID 3448 wrote to memory of 236	3448	msedge.exe	96
PID 3448 wrote to memory of 268	3448	msedge.exe	97
PID 3448 wrote to memory of 268	3448	msedge.exe	97
PID 3448 wrote to memory of 268	3448	msedge.exe	97
PID 3448 wrote to memory of 5176	3448	msedge.exe	98
PID 3448 wrote to memory of 5176	3448	msedge.exe	98
PID 3448 wrote to memory of 5176	3448	msedge.exe	98
PID 3448 wrote to memory of 1048	3448	msedge.exe	100
PID 3448 wrote to memory of 1048	3448	msedge.exe	100
PID 3448 wrote to memory of 5828	3448	msedge.exe	101
PID 3448 wrote to memory of 5828	3448	msedge.exe	101
PID 3448 wrote to memory of 4544	3448	msedge.exe	103
PID 3448 wrote to memory of 3604	3448	msedge.exe	107
PID 3448 wrote to memory of 4188	3448	msedge.exe	108
PID 3448 wrote to memory of 5776	3448	msedge.exe	109
PID 3448 wrote to memory of 3156	3448	msedge.exe	110
PID 3448 wrote to memory of 3156	3448	msedge.exe	110
PID 3448 wrote to memory of 3648	3448	msedge.exe	112
PID 3448 wrote to memory of 3648	3448	msedge.exe	112
PID 3448 wrote to memory of 4116	3448	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe69c6c188,0x7ffe69c6c194,0x7ffe69c6c1a0
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,1045843854419295712,5873528018099361788,262144 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:2
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,4066192838341814911,706365523982252755,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,4670740731405267301,10760677668488256142,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:13
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,766302134679210476,10911267379178068826,2097152 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,13830299992544145053,9125816141688990682,2097152 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,2728557175244066849,14439180480769534766,2097152 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,11175035353233221966,15301357953044547401,2097152 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5320,i,3373167935504901370,8164224338432507284,2097152 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,17755194228523342829,7858411231963913992,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,17353343225905867541,6063407499443624818,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,17198489709709624875,3184583594943807012,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,17198489709709624875,3184583594943807012,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,10154538280367168281,56923887058014804,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,3716288571090029327,2376345911756557645,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,5509892606532132621,5544984775538871937,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,5284458884007960947,7889039295304399752,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=812,i,7817043037628959602,1886144579879463893,524288 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:14
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6660,i,15692010667596123097,4655169510126025284,262144 --field-trial-handle=2688,i,5083426196418897699,6361385052729446734,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d5e01f572f200ae0d9d64d79018ae3bde45ebb286bc5bf50a62989856dced547
MD5 01f48c1fbe8ccf941841ff8734c129a3
SHA1 577248a196b207fe2e3a1315a5d217cfc6b0f71f
SHA512 baec84017a6e59e94e80c73714d4fec85916d9266f02b870d61660cfe34dc3a7ac847221ae594e9534f37e2b4b9db895127fbc895e83d5a7a319308fab679fa3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7f:fwUQC5VwBIiElEd2K57P7f
TLSH
T15BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

3aa67414-5dba-4b6e-bda2-32a52e6a2748.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3aa67414-5dba-4b6e-bda2-32a52e6a2748.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6349cd444463b8356084fe9c7090ace30fb5063c23c4fb6406a0e3bd9eb622a0
MD5 9bb81f93273803fab8a81ce68e84b5ad
SHA1 fcd5e7852e37b10cd11d3bf361201a571c7058d4
SHA512 98bd498cdcb4cfff9584e1a6eb1471c35f6dfd0d90b443aafb2610edb97414d6e7bf79f84c932bd91ef55af30e78c7f6321b4a4a43b0471e86f876476cece731
TLSH
T19F61EA58F3652AF5E7A48DF290D8548A36F9B0C5C90B2F193D402E7067C2F65A0DD823
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a8918619-53bf-42b2-9a07-900dd9d36c15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a8918619-53bf-42b2-9a07-900dd9d36c15.tmp
Size 4KB
SHA256 0ece6c345f842a7d8632948e3566743a07ebbfafaeb6772cdd6baafd92c6e125
MD5 cf115d4af6bbe6875c2815dbe3cec7fc
SHA1 8a46ad7192cfc7f63e2a4d6f8f78858aa01d6deb
SHA512 bd4bd18f14fb813555ee836e3246cab84c38326c97d100345b4c2ce2dafb845caaac919faa7e7fc19394030fbeba0ed1a425277843cb6f92dcb7736c77a1818f
SSDEEP 96:DY7OUObAFEeUUUzVhUaDeiKBSVwr4XEHzQe6vGwrup:D59jeNUoaDeiKEVwr40H0e6vGe+
TLSH
T12B918AB7C3D8867E881156F05A247E2BCD2D095A42283C5789E8AF4FA3F2471D20259F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 36dd7fd2811e5097177d457cdf0babd870e5d26b63b57a6f74d7edd38931e0e9
MD5 92aef60135f029960459e890dbe47652
SHA1 b7a272d6e9c99bf89631ae0ea5167e58b029ae85
SHA512 2d449bfcee9dbd9da6b0e172513e260458d5f998f6e6700b4333d9d4e0ac5c9474c6d022ef101e80814176cff96c13ebd35b5659b23d5be0cbafb20380b71a90
SSDEEP 192:sxRpR1yM/jK1Ml8wbuf/f1sVh5YCbNzoA8p4M/g6+WNIYE9E7G72RKIgIJ:sxRp/luf/f1sVh5PA5/5Iiis
TLSH
T1F462E9056A349D7B8CDBD20DFA557F53D6F95573A1901E08AAFC9A0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d97a99611b88b54fe03dd98bd6b7e5ae3df43fd207c9a4741b0640dff292a551
MD5 14751c64931379cd59ec530a9e3682c0
SHA1 31447199313cd8f886167e45b55a821b6cda1874
SHA512 850b920218dc9b4da26609fcca808a6a676539dc7eec40808afeb25b5a259eab50c94bc4a1d81d476eecf8a39dd8ea8f42c70c6eb7927059060cb6bca9dc1d08
SSDEEP 192:sxRqR1yM/jK1Ml8wbuf/f1sUh5YCbNzoA8p4M/g6+WNIYE9E7G72RKIgDbJ:sxRq/luf/f1sUh5PA5/5IiiZ
TLSH
T13D62D9156A249D7B8CDBD20DFA557F53D6F95473A1501E04AAFC9A0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 255bf55f6567bfffcc2f76019e15ca85cf44470efa763841958e666e74b83a39
MD5 e94330a66b5154af15fc2f6b00cfbdef
SHA1 8332e2bcfc2a5e17038c68b9ab0d1d1d93b8d560
SHA512 1ae2a1f03aae909ddfb271a2136acda2b25582c98463ac07d4452a4a18b5b1ffacad313be918cbaee44710a6c8806b28cd141424f3a2d2821d53734726c7b032
SSDEEP 192:sxRqR1yM/jK1Ml8UQsbuf/f1sUs5YCbNzoA8peM/g6+WNIYEw97G72RKIgDtJ:sxRq/qauf/f1sUs5PAn/5I4iz
TLSH
T12F62D815AA249D778CDBD20DFA517F93D6F95473A1901E08AAFC9A0C00E7ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7177e607b9e2ab5c4097cd3b0e821cd88b03f57bfd5ed080b1ce8bc85c6afb78
MD5 2d8efed9d51b02715da6315dd59da9fc
SHA1 e3c4bf47944edbdd8393d0a6d3395e7de0a69b7a
SHA512 d7858a5a9bb726d98f64406beae1ef115f089190fd8512ab88bc123a90ffad8036673e9ae0ea4dbf240fde48512eceefd3d04934b35910db40a385fb2e6c812b
SSDEEP 768:40D76DrQD8f0DbWgQ6DjfPQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVw0DjGQDL6W:40D76DrQD8f0DbWgQ6DjfPQDFu1jaj0V
TLSH
T146C20B2B540CCB7F4F844EADAC29AEC66DD801CB97984D9447EA890C03C77EF521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c3a057be76dffd478e57f9b6e1f385b352030123301d88abe98bd5578677689e
MD5 075ebe80966b0abd13c6c92269ae2f36
SHA1 b5758a3fc22c2d76400213784b0c9063eccc057e
SHA512 180c178bdd8b78cd8671836e5082489c12f01ecce71649102058247cab50acab87552d2c1a569e165f5531c07739f415970d46d3664f134ef7397e68759673d5
SSDEEP 96:KRCnCwCVCRCnClCVC5WChCOCUgCZC5K4CQgCXC5cCfCXCWCJCVCKHI5MYtHbPWDD:COjyuIQAhQVuu+zgsFGONcOHHI5MYtHm
TLSH
T181912A14717E43603CBEB648807E981A8682B5B63318E63FB75941E14F6BE139DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe591999.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe591999.TMP
Size 149B
SHA256 b35da2f0f9bb46571bb66d2c33beeedef9f80d8712f1943d0ae332c12bd5ff0d
MD5 748c035ea3430ec0b2e521d6ecec0600
SHA1 c3310eee00b2a49d0a953771ee2ba0897f747053
SHA512 09e31e2571e442126b2c23933b3c6c81b56c1053af5d2d2eaa8e93288a8c023c897cafd9d8bbe2248e0f1e37f91377617c267938fb92410052f90f7d3b11c116
TLSH
T1D1C08C578632A0262B3099A1B020228C988BAE885CC8D8FC8005B096207A32280022A1
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 187658ec0f7038a684b746d607f9059951ffcf3a81c5e7a473a6a03c86d8c966
MD5 89dd9901f0cff8368f258c995180cb35
SHA1 c409d7642b0e8ef89be67391cc925a8d89b16a75
SHA512 6a24b2374f7c379b0107222b4121e4a293687963aa4cc2cb39bcc1930ddf1c5f4dec8c25b76f87c9e7617837cd569ceec61aaacfeccb53cc10d43776ad0db9ab
SSDEEP 768:Y93DbI1ifDTd+ZyweX6+qTko0u229a4vsTxtf:Y93DbIxgvVTVKa48Z
TLSH
T1CDF2BF71F8709D7359EAC7C8760732475EF55223C3C82A889DEDBA1D055B56C1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f52194facdddd8eda2f40cd0b730dc7a68b635a2b8ea9781e7100df898116c2d
MD5 681a688154670ad17f4e0df7763ce0e7
SHA1 f7cbf41cef87deddd3599d81b753fc6f7cc66198
SHA512 761b9057c36e13e227af184c1866213d74aa4a37891880377c8dc7f595d24bc2f543384b94373ca91a770be09de1e2f39b82fce8225db990aaa6ef0f210a3f99
SSDEEP 768:2O3IbI1sfDTd+ZyHeX6+qTko0u229a4vsTxtf:2O3IbIXnvVTVKa48Z
TLSH
T10FF2BF71F8709D7758EAC788760732475EF55223C3C82A98DDEDBA2D015B56C1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f4759ddb875af5b681754020f8ac423011ff725754b73b2e03c8e670c80ebd84
MD5 39fde42423db5713f28653ebda9dad8a
SHA1 052b462072d17e7599e8a47be1fc15c610d7a993
SHA512 5f8ff0e60e759d0ab762d6b7e91c6c8ebd6d4613c7eab53434c4722b803640557039c5d51c36af2727ddb6dd8d55a8a7816ec77ab84ef19c0ae352fa1c55cc20
SSDEEP 768:293IbI1sfDTd+ZyweX6+qTko0u229a4vsTxtf:293IbIXgvVTVKa48Z
TLSH
T18BF2BF71F8709D7358EAC7C8760732475EF55223C3C82A989DEDBA2D055B66C1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2a99917076323cffc14e4f6e0973609d30323eba08bff73de24333b114f2a45c
MD5 5a1da33a0765a15d3cea5ea0e9ffed34
SHA1 3557ec74022c16ae10cb1ef0058582c32ae6405f
SHA512 9e92672650d46b518810b9467dd470383a1c353f81bb68a4188818024b269ca373aa79d8f90c125a88238c1a5e5be636dbc6cd35d948781f168ffed541b39c77
SSDEEP 768:prv+4UNbdG3wcJDTd+Zy3eX6+qTko0u229a4vsDZeVH1SdW:pbsbU3K3vVTVKa4sEH1h
TLSH
T13203CF32E8648A778DE7C788724B75472EB92163C7C40B90D8ED6F4C465B5AC270BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bff06e9-26f7-4a34-8ea7-5bcf0c55f6ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4bff06e9-26f7-4a34-8ea7-5bcf0c55f6ef.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download