89ff4ca6868f1957c8a1cc21a2e69cee41d766ec4301bb13699a4bdbb254f703

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 141KB
Sample260809-ws75xsbm6x
SHA256 89ff4ca6868f1957c8a1cc21a2e69cee41d766ec4301bb13699a4bdbb254f703
MD5 dd385fd03ae07564ac21f8cfa13dbc7c
SHA1 4d03bf5425561e23c5d06192f2d4346d5fda1639
SHA512 2aebdcc4adeb1dabaee4579b9e67bb422d4eeff055ef69a598e4654803bd9c63123b5e739f426500caaa265b40e31bbff1a8962a4bfa0d6a47ab72e2699f42bd
SSDEEP 3072:91zPP9Nu9XX2dMLjE77BZGvPNmz5dwo5VMmz5dwo5VJ8j2:71d6jE77BZGvPcN/8j2
TLSH
T1E2E33B72844CE1BF329667DEB03DB319668B9538CF4348A27BFE414C97C1D83696316A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1224	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307727427471052"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{933A7C71-4EF3-4AA1-B29F-247F552B5F82}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 5664	4368	msedge.exe	89
PID 4368 wrote to memory of 5888	4368	msedge.exe	91
PID 4368 wrote to memory of 1224	4368	msedge.exe	92
PID 4368 wrote to memory of 5888	4368	msedge.exe	91
PID 4368 wrote to memory of 5888	4368	msedge.exe	91
PID 4368 wrote to memory of 1944	4368	msedge.exe	93
PID 4368 wrote to memory of 1944	4368	msedge.exe	93
PID 4368 wrote to memory of 1196	4368	msedge.exe	94
PID 4368 wrote to memory of 1196	4368	msedge.exe	94
PID 4368 wrote to memory of 4184	4368	msedge.exe	95
PID 4368 wrote to memory of 1196	4368	msedge.exe	94
PID 4368 wrote to memory of 4184	4368	msedge.exe	95
PID 4368 wrote to memory of 4184	4368	msedge.exe	95
PID 4368 wrote to memory of 4124	4368	msedge.exe	96
PID 4368 wrote to memory of 3676	4368	msedge.exe	97
PID 4368 wrote to memory of 4124	4368	msedge.exe	96
PID 4368 wrote to memory of 4124	4368	msedge.exe	96
PID 4368 wrote to memory of 3676	4368	msedge.exe	97
PID 4368 wrote to memory of 3676	4368	msedge.exe	97
PID 4368 wrote to memory of 3036	4368	msedge.exe	99
PID 4368 wrote to memory of 1108	4368	msedge.exe	100
PID 4368 wrote to memory of 3036	4368	msedge.exe	99
PID 4368 wrote to memory of 1108	4368	msedge.exe	100
PID 4368 wrote to memory of 1968	4368	msedge.exe	102
PID 4368 wrote to memory of 5584	4368	msedge.exe	106
PID 4368 wrote to memory of 1496	4368	msedge.exe	107
PID 4368 wrote to memory of 5372	4368	msedge.exe	108
PID 4368 wrote to memory of 3088	4368	msedge.exe	109
PID 4368 wrote to memory of 3088	4368	msedge.exe	109
PID 4368 wrote to memory of 2976	4368	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffa0b8ac188,0x7ffa0b8ac194,0x7ffa0b8ac1a0
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,15644510854905359912,15132182321830779674,262144 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,11145616614199977852,6017699918829305124,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,4491355491462973234,1062070911618172794,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:13
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,2630065893040851475,6374960323681383617,2097152 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,7830576124459827274,12486674806472463378,2097152 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,15012479969793601828,10248721020142929535,2097152 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,4053131314181154810,1459952958719291210,2097152 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,16572363106462287303,9740169232459406408,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,14672971459090520879,18159248148470524560,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,11663999008136086669,2080279464881468507,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,11663999008136086669,2080279464881468507,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,2570084832734845413,14335882348937172854,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,7569255512171967004,11425819585753190243,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,12089758219059620145,9807951070994306446,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,18146723380641414677,12307168032552639089,524288 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,7019860980578251057,11092516163803951595,262144 --field-trial-handle=2616,i,1570785191427724815,8383157150632521518,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 70ec916fbc4bdc762d303a32b425b3e0261fdf5d4861f31961987ba096c316ad
MD5 996e8e432c1af85dbbc9617643df9f45
SHA1 d0195d75db411ad1a86b9c76c84c53d5dbfa292c
SHA512 e3b70f66cf03c6c9999788962930b9cabd2ecfa0b384ab514e85ba204c430600ab36e315c9acc46dffdc31af52289db2f445b572d3c1a4cf9868b5e4604b5b6b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7m:fwUQC5VwBIiElEd2K57P7m
TLSH
T1B8B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5b70548743dcf7505eb684490f1aa92aad89397fef388c03a5a969ad536e4546
MD5 fce3084b6f8fdd4ca79f189eaa9bb9f0
SHA1 ef0ab2f9b52ec9ba86c5fd2b8b68bd6754f4a17b
SHA512 0fc1e7f9f6e2838c1d54cd6555f7f896713a36693103b52284a22614b60a7ee3e95c15ed2954b257b55ce519f23ec948b9745b2fc25846aea65501f9df22f627
TLSH
T17F51934033EA2AFAE72845F6D59276C9F3F184A429072F60D2971D790BA2F085CF1257
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ce3508a6dd434438241aba7732b5726d986f76db6ed51064abc180dd0a998d1f
MD5 cca1b6254785827754cadbc4f2ffd21a
SHA1 66137e5a55fea1e6ceac0843a7bcebcd679e3275
SHA512 6c70a4dbb89e85048a1baae7606cc71996dbf5b8668254c5d7397611d033dfd0cc40c0d315b5d61688f45e3f141fd91201420332e3251738ea666daacac623a4
TLSH
T17E61CDF7C3E4877E891552F09A146E1BCD1D051A422C3C5AC9E4EE5B63F24B1E1016AF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 689faa0d185831f5df9d54699928d0128d58b3f7a2aef8672775958d966fefe5
MD5 b069e61d3c7c6fb0d5a7ea504f100365
SHA1 4852ca329d020d693468a70f8169024b334fc486
SHA512 9127c48109a19041c4ec88d27bc9ac0165f03edce87209936474f6a488226a700de587ae2e382304bf4365c8f14decd962eba4f9f57d08c68659cf6618f53922
SSDEEP 192:sxRoRMyM/jK1Ml8wby/fPsOiEYCbuzoA8p4M/g6+WNIYEsDLZpGCVRIgDZJ:sxRouly/fPsOiEPTx/5I8ZjX
TLSH
T1E862D805AA34AD7B9CDBD209FA517F53D6F81573A1541E04AAFC9A0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d07d7a9e072e4daac5d21ea2776554e29b50b5b1c587e1a6bb67a68559aa39e7
MD5 1fa3bf1b0814470df7ca16f308ffbfec
SHA1 264bf7dc1f44ddb4d0faec13be080c41afa5a8be
SHA512 9bd4e7186ac572286ed6d68c76f8fb990715d8d4163eaebaa5fd9b94ca90d2c3335a3d63c2cb7b575bedf9476a47c97db78b08ce04dee7976a6fa74d294a6bf6
SSDEEP 192:sxRLRMyM/jK1Ml8wby/fPsgilYCbUzoA8p4M/g6+WNIYEgzLZpGCVRIgIJ:sxRL2ly/fPsgilP1x/5IyZjs
TLSH
T1A752C8056A24A97BCCDBD20DFA557F53D6F81573A1901E44AAFC9A1C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 634cadccca6ebcfb2c325e673160f57a8db7fab926b07cfed2885735fe18c143
MD5 3bafc607aaf29869cf35782e4785be58
SHA1 a3919533eaa9e4d446328086c81e2e32d1aae696
SHA512 e0ec51724fc462bb9171067e03e710d844d917cffa621d9d7c80b01622d109a83cba1f5c2c053af642a78e737847dfb4eb43da79efac573c93f46163a85349d4
SSDEEP 192:sxRoRMyM/jK1Ml8wby/fPsOilYCbUzoA8p4M/g6+WNIYEgzLZpGCVRIgDHJ:sxRo2ly/fPsOilP1x/5IyZjN
TLSH
T11A62C905AA34A9778CDBD209FA557F53D6F81573A1501E44AAFC9A1C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e7385c6f08ac3b9171f01f98e8c6176ca278c3030652212c0a5e672ea63cd9a5
MD5 bee70e5a35a2b8968d0071655ced5dd0
SHA1 ecdc6f646f4587221538b31890912a288f92d01a
SHA512 3620f1109465a1ecf139a60cec1ceea828a2e108823f8e5a93310c75ede85a99e52ffad4928d62b8132e82d4a567110f7bf9b2cdaaabc127b2a67680f4d0f4d6
SSDEEP 192:sxRoRMyM/jK1Ml8UQTby/fPsOiEYCbuzoA8peM/g6+WNIYEsDLDpGCVRIgDZJ:sxRouqny/fPsOiEPT7/5I8DjX
TLSH
T1C362D805AA34997B8CDBD20DFA51BF53D6F95573A1541E04AAFC9A0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 70ebd45eb111d52dbcb9719b78a42cf8f95997d647ba9d2c3efc29bee6a209fc
MD5 e8fd8b78be492e8968681c375697f7a1
SHA1 85aeadfd8e483c4cd7d25df51a068a7b66bb9f70
SHA512 b9a3b5c17a859ab91ec2abcea32c55b6e05b42a7ab98218c88dda4227e7b14669af61321a9b4e1646f737bdac53d14b0835daefb932483c0cbd344722825a5c7
SSDEEP 768:40D76DrQD8f0DbWgQ6DjfPQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVw0DjGQDL6M:40D76DrQD8f0DbWgQ6DjfPQDFu1jaj0D
TLSH
T1F7C22B2F540CCB7F4F804AADAC29AEC66DD801CB97984D9447EA890C03C77EF521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4d2ed795abd4f4bbd573f9eba0b0c9c21c223a8acb6a5ffca82dc699469a6f1b
MD5 8e9140bee3247d7b14cc39f0e4eca437
SHA1 e8c07a3b4204b24bd0238e31783ba88b63f74c9f
SHA512 b7c6712b028076d21ee05c4a27aac3c60638d45bc517b127e22a3601ff02b016e563a92ace70fefbf5951d311a935456ba3e02523ccaa4effc868bc04accd024
SSDEEP 96:KRgBg+gPgrgZg7g/gLWgPgMg6ggTgLK4gyggdgLcgBgpgkg3g/g4H5WnjRzHDW32:CgBg+gPgrgZg7g/gKgPgMgrgTgxgygge
TLSH
T1979168D0707A42C03D3EE51D81B8885EE28178A33059E56B7BA851A11FA7E438DFDCCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 970a78b22492a8e3db39e9a89bf6d834281282e9ee04043226ec553511c68e9f
MD5 1669cd0c42679c9b64f778bd68f9ec35
SHA1 915a401a1eb3fd4ccdd677ea3f9bb044a9d6d59a
SHA512 8ad1e6347426e57d127e0119255a64ea2efda3ad3dae62810884def5ceed78920bbcf4c3bc0df310c9950aefba161c559cdeda61bcaefb711f05441645967c76
SSDEEP 768:Nrv+4UNbdw3E8X2zDTd+ZXff0weX6+qTko0u229a4vsTSEr:Nbsby3E8zSvVTVKa4jEr
TLSH
T15603BF31F86499734DFAC684B20775436E7521A3C6C81BA4D9EEBB4C025F1AC270B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 695d2d23d23950a0ae0d48665be6619cc28850dca48f0d10e5b65de7abc0e638
MD5 d14a09b7e18430ce8d061e89b5a9bc15
SHA1 6562bc06acc4226e6e816d5a94be29116e96ef9f
SHA512 e0a8b62b47d2f139d1ab036bda3c6a5c44af1cc682088722107b5b44883de1bd336e940ccbd01a50d19d3ca2e8c4effd1b5b6a1724fd9fd11ac775aae64138b9
SSDEEP 768:jr3E8X8zDTd+ZXff0weX6+qTko0u229a4vsTS2ewBKZO2U:jr3E8VSvVTVKa4j2evZPU
TLSH
T11CF2CF30F8659D734DEAD684B21771075EB511B3D6C82FA899EEBB1C015B268170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 76d624f8d6c203c43793bf08f2a49697d23b755dc8bb2a953816b9644cec33c0
MD5 40da9bc573c150c93ba24e20539862ed
SHA1 be0da6ad0f1e815864c4539e0465c0c00dae2c38
SHA512 cbe88018c2e11ba24f0c16b713735dba874cee548a75b79810a7fcc26bf81ddcf8f64fd2c23d9c62062e63ae43dea4ce2af311a4f90dde7921d273003244a77f
SSDEEP 768:SS3/8X8zDTd+ZXff0meX6+qTko0u229a4vsTS2ewBKZO2U:SS3/8V+vVTVKa4j2evZPU
TLSH
T152F2CF70F8619D734DEAD684721772075EB521B3D6C82FA899EEBB1C015B26C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4426b11ae0b4faca35b31d43a2b8b50b18a9c84ec67aa5c51e3be890767a6933
MD5 a2993c68ee7d0dccd570f8a704de3f16
SHA1 9e0dcd7408ee293540869bea6a442b3209a4468f
SHA512 34ec70d622695ad25c93dc3ed804497f5856de6e9a20ec2118e35e81f2db6ffdefa668a4ba592e16539ac56e12560669b5cb5b6042db254e2ff13dda56571fbb
SSDEEP 768:Cr3/8X8zDTd+ZXff0weX6+qTko0u229a4vsTS2ewBKZO2U:Cr3/8VSvVTVKa4j2evZPU
TLSH
T182F2CF30F8659D734DEAD684721771075EB521B3D6C82FA899EEBB1C015B26C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 6e4959bf99436e34dff1cfb6c3458464e08969c18b846786df27ee74fc9a2c5b
MD5 dde66eab0b7fe9ebc4f95e90ed99c6b7
SHA1 ca9210816d999e317d3458b2d10a7b1eba9d6b46
SHA512 02b17ee2269add58bd5b06473f030e020e401a64249225e3ac16acf4141e590c318418346d8a1a1fc0b488fd3fd8689d5f99fd28c6cb8759cddf614c218769ad
SSDEEP 768:srv+4UNbdG3/81DTd+ZXff05eX6+qTko0u229a4vsSSeVH1SdW:sbsbU3TLvVTVKa4gEH1h
TLSH
T18E03BE32E4A49A774DE68684714771472E792163C7C80B94D8EDBF4D025F5AC270F93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a2efe682369976e9b5c3fc70f7706b9de11da5c4b4c95b03970f89044a7c5567
MD5 8e1c03af21d5fbc1aea06e3a76484c05
SHA1 1f7ba737c6b495fb6b0440901c2c1f979dc028f3
SHA512 25156e260f5fc478ebe95b13a32c689b4e09c798fe2fd86645d9a0849e50817c88dd8cfed39787d906ee194ef063d0fb59b6759e254e77e50fc135d6993e6154
SSDEEP 768:prv+4UNbdG3rkVDTd+ZXfIeX6+qTko0u229a4vsDCeVH1SdW:pbsbU33vvVTVKa43EH1h
TLSH
T1FA03CF32E8A58A778DE6D784724B75473EB92163C7C40B90D8EDAF4D025B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0aaccaf4-c363-4a1e-8977-71307dffe78c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0aaccaf4-c363-4a1e-8977-71307dffe78c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download