aa5cf143dd12115b17a6251d3da962150ce8cbe470d7c749f38a644b2d53228d

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 18:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 786B
Sample260807-wwf6ls1dnd
SHA256 aa5cf143dd12115b17a6251d3da962150ce8cbe470d7c749f38a644b2d53228d
MD5 f4c13ce1dad566264bae9453eef1a358
SHA1 42e75a7052cd8cb39b73d4d1036545c76bfcae33
SHA512 ee93bd4402c652412bf8adb9f782a452b0b0655ecb850439498ad0a3a808fd117eace1ddc1b4564dd98625a3629f8de5cb047c75e61a7fbad33896621d7136ab
TLSH
T1B701107B2A904C64023121381B6AF51DE26731136A48896EF9CD8B17BF71301C9F3ACB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3952	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306001768155501"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{AAF0EBD4-D131-4B77-AF0A-12238AA60F63}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1992	msedge.exe
1992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe
5428	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5428 wrote to memory of 408	5428	msedge.exe	89
PID 5428 wrote to memory of 3952	5428	msedge.exe	90
PID 5428 wrote to memory of 5424	5428	msedge.exe	92
PID 5428 wrote to memory of 5424	5428	msedge.exe	92
PID 5428 wrote to memory of 4712	5428	msedge.exe	91
PID 5428 wrote to memory of 4712	5428	msedge.exe	91
PID 5428 wrote to memory of 4712	5428	msedge.exe	91
PID 5428 wrote to memory of 2764	5428	msedge.exe	94
PID 5428 wrote to memory of 2764	5428	msedge.exe	94
PID 5428 wrote to memory of 3332	5428	msedge.exe	95
PID 5428 wrote to memory of 2764	5428	msedge.exe	94
PID 5428 wrote to memory of 3332	5428	msedge.exe	95
PID 5428 wrote to memory of 3332	5428	msedge.exe	95
PID 5428 wrote to memory of 5348	5428	msedge.exe	97
PID 5428 wrote to memory of 5348	5428	msedge.exe	97
PID 5428 wrote to memory of 5348	5428	msedge.exe	97
PID 5428 wrote to memory of 5960	5428	msedge.exe	96
PID 5428 wrote to memory of 5960	5428	msedge.exe	96
PID 5428 wrote to memory of 5960	5428	msedge.exe	96
PID 5428 wrote to memory of 2824	5428	msedge.exe	99
PID 5428 wrote to memory of 2824	5428	msedge.exe	99
PID 5428 wrote to memory of 2824	5428	msedge.exe	99
PID 5428 wrote to memory of 1108	5428	msedge.exe	100
PID 5428 wrote to memory of 1108	5428	msedge.exe	100
PID 5428 wrote to memory of 1544	5428	msedge.exe	101
PID 5428 wrote to memory of 1544	5428	msedge.exe	101
PID 5428 wrote to memory of 1760	5428	msedge.exe	103
PID 5428 wrote to memory of 848	5428	msedge.exe	107
PID 5428 wrote to memory of 4356	5428	msedge.exe	108
PID 5428 wrote to memory of 1904	5428	msedge.exe	109
PID 5428 wrote to memory of 3616	5428	msedge.exe	110
PID 5428 wrote to memory of 3616	5428	msedge.exe	110
PID 5428 wrote to memory of 1992	5428	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd1712c188,0x7ffd1712c194,0x7ffd1712c1a0
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2004621124887375701,11268044434890237756,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,11928547459941041852,9115686674987339616,262144 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:2
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,7243170406928540747,3737589000838112219,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,7643776261834053796,4453030482047207958,2097152 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,4760466362895316346,18035743777747925169,2097152 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16640249727642144574,11362928550602921176,2097152 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,13632880345729234311,4602565900922776746,2097152 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:9
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5348,i,16736766967226993449,4031241411455828652,2097152 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,1552028903963764424,1184828526161511134,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:14
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,5608724591852851616,3915187193285942043,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,3950962126862388360,12049245615361801485,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,3950962126862388360,12049245615361801485,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,16687742854881050242,5351891277427113630,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,4290427060722819555,4657023061220880853,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,5958516482752022524,15872543400211603687,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,7706608372112916555,12112234648475608762,524288 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6588,i,17355872639714675108,11887176606105101292,262144 --field-trial-handle=2908,i,1658578843062805994,5292213438210966627,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 51a1e7b3cc3f49a7b3d89f21758e52431d714b5b0dfd4a378fbb14d4fd6005a6
MD5 ce2924a3ee28a3d28211375d43163580
SHA1 999b20b082e91cd5f9ab8b213f9725a24a5b58ed
SHA512 2ce3e696efe85c4eef62fd8ed1d2b3b48066c973a4b5986b90ca9edcfcbca4f11613f710afa1c677eca249c5da7e2aa812125a980c3913c5530f76c621c504de
TLSH
T156612A74337E08D2C3606CB590DA545ABEF8BB71C547AE52A8C4EFB40911FC4A1E94EB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5917b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5917b4.TMP
Size 3KB
SHA256 ea683e4be7463f46804de205f0e0bac860657ee0ac087589f71ae0903b27a30b
MD5 cf367e322b30e6034874b67b6b76fb2d
SHA1 6de4069b67f37b2a222fa683ce76351586206c07
SHA512 f6798c2fb642e74b6c48c79ef9c34ea7cdf56d0b774679fb82a3e054e53992dcbff0a99f689cb30c120ebd301963a5a1955729124b9f625f93cab259033cd9fd
TLSH
T154610874733E09E2C3606CB1A0DA5456BEF8BB71C147AE5198C8EFB40911FC4A1E91E7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 456d2015cc078a9f90565e990b4de0a364d76220118b2d0690bef4ee95281e35
MD5 20f35059d56886117f49042c7532581b
SHA1 011a628fedc6f265716cb39038573eabca66c3df
SHA512 593c28bf0cb917f2f6c0fc747e28869422ec9b91f0f8e37e30fca86fe86c591db3d10f7b86adb48decf34dc865215c6fd2fd89f89c4fbb8350afe4dcbc65dc5e
TLSH
T1D75189F7C2E8C56ECD0156F4AA146E1BCE1D0929432C3C2AC9D4EE5B93E34B1E641A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9075fe2f7ef365a0952c48d6c403064679b560e6d2d787e1d601c3f4105250fa
MD5 ec5688a59c27f985d1a7cc280f281e5a
SHA1 6f8c5fb43f059167c00b3590a9351b1b124eb160
SHA512 15ec18518c91f63c066c6f54d319910f215f5d8e3bad875af59b6bf698d21c90eb430d1d29eaa81829de79795e65cb4f3140d95d5aa1a7f0c77bf7de2d9beeee
SSDEEP 192:sxRFR6bv/fts6oHm2Sm7aKbzoD8p4fx/g6+WNIY3Ld+GsIgD1J:sxRFuv/fts6o2Gq/5I2Gb
TLSH
T1CC42D7156D68A97B9CCBE209FA65BF53E2F9503261D02E58B7FCC60C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7cb8ee436c86e5e339e490039f783025f6c0f63926cf795caeb4dad2e723a0bf
MD5 fb77ee53177a9c2bc5a935f588753774
SHA1 e4711a12689e9cdaf8a35dbe6ea4b4f8affae422
SHA512 adde50ca13d1d83c87a545ab9c6fd713fef8262b8d13a08230dda957d614a3500fa19601f441b902919c241cf3d3b73f17a01b58ed82ca4afd3c09ed0e11a666
SSDEEP 192:sxRFR6bv/fts6qHm2Sm7aKbzoD8p4fx/g6+WNIY3BLd+GsIgDzJ:sxRFuv/fts6q2Gq/5IA5Gx
TLSH
T12332D6256E28A97B9CCBD209FA65BF53D2F9103261D02E58B7FC860C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 de4731fe170e13b51766f50a03ff0314cbb5ed72f97304bb049cf2ac6504bd4f
MD5 792ae0df39a0c0f08df8882196b34b52
SHA1 3a5ed1263a9824d63c35801993eaaf0a3f47912d
SHA512 00a77e816028bc93ef55697bbc6643a9ac10067234f8d001f4618fbac26ef5a9fad19f59985621f59b2d3917b0e22de5cf73ef598d52d3a2276268af401d9485
SSDEEP 192:sxROR6bv/fts1qHm2Sm7aKbzoD8p4fx/g6+WNIY3BLd+GsIgIJ:sxROuv/fts1q2Gq/5IA5Gs
TLSH
T13932C6156E68A97B9CCBD219FA25BF53D6F9103261D02E58B7FCC60C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 eb4f40916d589fb435560966ca6d7f76178df44265dd533247cbda4d7e2ef42a
MD5 1a9cf00551390c30e635d8e386679c6b
SHA1 831f7c7ee5fdac1838e32ad5d45390ab38eda144
SHA512 9bda31f5ae32ee0353cf1f486b7053c8b777a62e6270ebb931a8b75b44b51d8b0da639f6007acedfc8b92c7fe665dab3a536ddd969a83e130f2f15240f280488
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTLroOL8:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0VF
TLSH
T1E6B2D92B600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 d9566a00071083ca034d1956243c08f22fc0740fcb85d29695c196cdccb1f1f8
MD5 9010eeb4453ee7331e5177ca30a7c1dd
SHA1 b597a2b9873b54726c6db3b4a3555d30f2d19c97
SHA512 a046c488fe20a7a6b110f9d66374a61616e92a5e006cdba1836cda6c09b8ad13e90ea88fa1764386db7d7d7d27f062373d74413fbe135ae4c248487457112f8f
TLSH
T198815392707E12503C7E690CC175C8AE868274A73618F52F77A819E11F6BE038EFD8C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a4d8beed21d2966fd0060bd23caea887bd5dfe8540c7d9159f219efe3b9de7e0
MD5 db52a9087621c1a821dde1bc7cbf2f76
SHA1 b9543e45371b92cf010a0c35dcdaab24c9c72fc8
SHA512 751f595bb8fac0275516c1d15b2b747da36c3674599a35b16763013bf67edcefda2820ce2127dce19c369a779acc8b8e079ce3fe710275e6f139a16c7045e425
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsH8dIsGK+MW6XXg0MK4Zg+MccsXW8RyQAKE:C1i7PF/DWrwfX9mgpct1o7zsH8dIsGKz
TLSH
T1AD916492707E02503C7E694CC175C8AE868274A73618E52FB7A819D11F6BE138EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ce40801d-e502-44d0-8161-ec58f963dd94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ce40801d-e502-44d0-8161-ec58f963dd94.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e8a8c8e0f004f1c4dd1b41d30f1a8d33f16f4e0ab99e182bbd9f422a027ed828
MD5 3d342365c26c00126224049684cbd295
SHA1 f569f2e2653dcff99201ce832a8ff041a9be97a9
SHA512 519f1921c80cdb0d35ac9f79e6f1b7f8bf1092a89571d16a162d1f379e6c66bb0b26e3b85c24a4ba67db91f1bcb478f86561247900b547ec0862a32bac5c8314
SSDEEP 384:GZcIk38NWFBNFPT+cHGfd+UJfRXOVyS5YfPXIfPXbHFd9vShCiDBTayppFJlmqJ2:Uk33fc+wfZOOfvIfvJ3vShCQRktH
TLSH
T180F2C070DCB5AD7369E69288B7463753BEE55133D8C4174CDEDC5B0D01836AE2B0B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 99ed319f447a775e9154d12b51456c7e93a3579f1ccd945cb3c85b353d9ae4d8
MD5 b078763f30c9d1215cab4f96af26351b
SHA1 dacf2964d9f9b8bded961b2c1b47f4095fcf91d2
SHA512 501ce11824777c81392acc45634d5ad7c594e12558e116a0d03440e4c1e584455a906669dba03538064571251929ee37ce9207673b50cfa292d32a5f111b964b
SSDEEP 384:bZcIk38NWsBNFph+cHGfd+UJfRXOVyS5YfPXIfPXbHwd9vShCiDBTayppFJlmqJ2:Dk34fc+wfZOOfvIfv83vShCQRktH
TLSH
T171F2C0709CB5AD33A9E69288B7463753BEE55133D4C8174CDEDC5B0D019379E2B0B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 4e2cb9ef44a1848367d5c10cebec1c1a0e86ae8370bf3d78d74772ac8111233f
MD5 3a33931de8bea84f15457b50672781cf
SHA1 ee1490ec98e6839bc82f3add259f8eaa14f2fe89
SHA512 c7c743a05c6ab0b9706c6e031f0b7c95ecb4a056e99ea9fef507923374539f957145392fb833fd7a681f3beb1f9b62486f7ffc066f8f453e3b4ef9ceb611419b
SSDEEP 768:gFQM3hwgwfc+wfZOOfvIfvB3vShCQRktH:TM3ewfdfQfJ3vSYh
TLSH
T13E137CF188E79932E9AE8347A77D2E02ADBDD163F4845658B7C8490CCD422BFD70B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a948f6b9700e46b425eff9fbf88af0099d75573fb2d43aa99fe44ab415cdcf5b
MD5 b1335a4027bb3a31555607879e5fe60d
SHA1 d4c10d5e9715bddb701f1961f9831fecbfecb1ca
SHA512 cafe22f237dee30c76bb3f064cfb5f1df89a32df5c422121b0550237b06f507a697c17de2ebdaf02a67584b49e602e59e061469494d2837743224863b412622d
SSDEEP 768:Rrv+4UNbd43kxkc+wfZOOfvnvShCQtx2bwWV:RbsbO3k4wfdfvvSN0wO
TLSH
T1AE03CF32E868A9339DE792487646BBA37EB85173C8C54744DACD0B0D029369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download