860908d39ccee3bcba61f66e9ac45fc353d59a7505f50705f35852bc1ee6d17e

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 06:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 567B
Sample260819-gxd1bayamd
SHA256 860908d39ccee3bcba61f66e9ac45fc353d59a7505f50705f35852bc1ee6d17e
MD5 5d1127a12da0c303f6a7800622559b4c
SHA1 442fc9b7e8dfc5b2f551a73e6b8118bbed22e5d5
SHA512 9455da7dfb9e648462b7b1e523b7f81ddf78dd0c777e30b54356e86319a2ee20cfab4f89f10a465645cd34326b629c12fce8dcb0a285811936cb18822eb9b151
TLSH
T139F052DA89A300418106D1612EE572085FA3A54F23838CA03EED32118F803239A833DD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4676	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315934542933287"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{937546BE-3463-426B-9C71-B884870885F2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1860	msedge.exe
1860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe
2944	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2944 wrote to memory of 5848	2944	msedge.exe	88
PID 2944 wrote to memory of 1924	2944	msedge.exe	90
PID 2944 wrote to memory of 4676	2944	msedge.exe	91
PID 2944 wrote to memory of 1924	2944	msedge.exe	90
PID 2944 wrote to memory of 1924	2944	msedge.exe	90
PID 2944 wrote to memory of 2020	2944	msedge.exe	92
PID 2944 wrote to memory of 2020	2944	msedge.exe	92
PID 2944 wrote to memory of 5756	2944	msedge.exe	93
PID 2944 wrote to memory of 5756	2944	msedge.exe	93
PID 2944 wrote to memory of 4488	2944	msedge.exe	94
PID 2944 wrote to memory of 5756	2944	msedge.exe	93
PID 2944 wrote to memory of 4488	2944	msedge.exe	94
PID 2944 wrote to memory of 4488	2944	msedge.exe	94
PID 2944 wrote to memory of 4260	2944	msedge.exe	95
PID 2944 wrote to memory of 4260	2944	msedge.exe	95
PID 2944 wrote to memory of 4260	2944	msedge.exe	95
PID 2944 wrote to memory of 1084	2944	msedge.exe	96
PID 2944 wrote to memory of 1084	2944	msedge.exe	96
PID 2944 wrote to memory of 1084	2944	msedge.exe	96
PID 2944 wrote to memory of 2792	2944	msedge.exe	97
PID 2944 wrote to memory of 2792	2944	msedge.exe	97
PID 2944 wrote to memory of 2792	2944	msedge.exe	97
PID 2944 wrote to memory of 2640	2944	msedge.exe	100
PID 2944 wrote to memory of 5620	2944	msedge.exe	101
PID 2944 wrote to memory of 2640	2944	msedge.exe	100
PID 2944 wrote to memory of 5620	2944	msedge.exe	101
PID 2944 wrote to memory of 6024	2944	msedge.exe	103
PID 2944 wrote to memory of 3088	2944	msedge.exe	107
PID 2944 wrote to memory of 5996	2944	msedge.exe	108
PID 2944 wrote to memory of 4720	2944	msedge.exe	109
PID 2944 wrote to memory of 3920	2944	msedge.exe	110
PID 2944 wrote to memory of 3920	2944	msedge.exe	110
PID 2944 wrote to memory of 1860	2944	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffc4b38c188,0x7ffc4b38c194,0x7ffc4b38c1a0
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1936,i,2566722281508990266,7047757513845613199,262144 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,10046336186799019143,16458588525092251331,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,2202803377086461961,10564736980417537659,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:13
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,1038485914225696803,16088699924274090426,2097152 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,9764082662341143103,11962216099926691772,2097152 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,11614576721187552533,5759956597723476843,2097152 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,10023097734752615944,10326838376262795249,2097152 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5368,i,16973301929789650691,2557428459395003425,2097152 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,16757923521622572,12135109565673203097,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,12142733368748456129,5516844032098118795,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:14
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,5846646020503071996,9238357468433691209,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,5846646020503071996,9238357468433691209,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1116,i,14098810957012235201,16796784061763845339,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:14
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1184,i,13825164980021235400,10573987899454621898,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,10123506805051120877,5369563268069011650,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,17072889078238340019,1898376600745845295,524288 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4808,i,13922650560655251575,17320076415346265777,262144 --field-trial-handle=2760,i,14875885993419275472,18268018727230319310,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 22af2bf4459c3c7c3e57be37943652bcd5222de363da42beeab780cbd4a47421
MD5 3d74c98b49ddefed12a20b2d59273c93
SHA1 795bb91e4ab386bbbac46fe4de017b1066036b36
SHA512 9485c9828f7ab797ad76e106d71f6ec7a8bee9d4173b7c6df058d86a9de9202b06ed72a50f40d2e2ecdb51046167f4946ccb48223c7b8b5a00bf802f946721da
TLSH
T1905142140322AAC9F7A14FBBF0D09266F2FD864B05476E9A80725F351E0EF4C5ADB023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599159.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599159.TMP
Size 2KB
SHA256 496868c2d269c3723fa89b2412648c6c942dec2d426f27f4335657b00940395c
MD5 d263fee6c0c2165149bf72c1fc2fe9ec
SHA1 eccb3a7de64a833a355bcb9e7df7ec3c9e2778a1
SHA512 0349e0e45d2016e7659c8ce920b3ace7a96dd39306c41fbebd95522ddd1705042bb7b5708d0c83beab3a3a7fa8d4dd7e16a8c3e0d99878f8f1b293219d398353
TLSH
T1635121140322AAC9F7A14FBBF0D09266F2FD964B15476E9A80725F355E0EF4C5ADB023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bc64979-8def-4c2c-b193-f132f52bea76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3bc64979-8def-4c2c-b193-f132f52bea76.tmp
Size 1KB
SHA256 31cbc764ad72e78d4b5b0b433349ba84f01b045a32591d1158b1ea8b5c941727
MD5 1f04d1af0163527885bd3ad70a20d514
SHA1 a762820432f9cb7ea55ff2d0eaa2f049c1176a70
SHA512 588d512763bedfdcb8c6a7826c7353c03e1b857e047857a3029805ede757ed5e73c729b331d699400f90cab44bdcd4cdef709d37269cfa6e7505ab97aa122c12
TLSH
T18741A1F787B4957E8A0196F0AA14AE1FCE2D0515432C7CA589E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f61e86ea-3142-4840-97d4-201f5b235c2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f61e86ea-3142-4840-97d4-201f5b235c2b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3e16df4064373b0e57a7224268bf7936da711e15f9bf3aebfff9ea9030826114
MD5 08a5106eeb47fd272c46b75567535fbc
SHA1 e0d2e8bb7bc8b02339ce08d7744de156f3a90409
SHA512 5a7e0ee9a45a77e6351aaac7cfd703a1ede18f8abfc83fcc73f93e95e2171693aaf32f5bce4af20f0a5ba137d8a3b5ad658bed221c380854d7dd0fe12bf1a65a
SSDEEP 192:sxRmmRVbI/f4s4UqrDde5lSAzoD8p4j/g6+WNIYCN2uOQ+G+IgDXJ:sxRzjI/f4s4Uqrc5lpK/5ImQQ9
TLSH
T17632C816AA28A97B8CC7E31DBB557F53D7F95032A1942E48ABFCC61C04E6ADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b726444cd9350c01a4eb9daad2a4c6353d6ef562cf51be09e6a0b2522fb2100e
MD5 d0649c5c6717628435d88a37baedfade
SHA1 449cde1f6b03c0a4a00c8a353f14cef8ba423a56
SHA512 ce1bbbfdcc7db256e8c61e18f9670a6d119ea4ee4bab6a6d60e5e26e92a894e7b4fd061f40afc290d56dbd77c7d1faa522d6242cb392fd7d0c231d6780993fef
SSDEEP 192:sxRNmRVbI/f4s9qrDde5lSAzoD8p4j/g6+WNIYCN2uOQ+G+IgIJ:sxRAjI/f4s9qrc5lpK/5ImQQs
TLSH
T19832C9166E28A87B8CC7E21DBB557F53D7F95132A1942E48EBFCC61C04E6ADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 6c032683ab3fcfc386d9fc96445ba1d7924c81a74c1e33930cfe41f6f1d10c4a
MD5 81186b35f5a961aa4d2b37fbe9b60b12
SHA1 ae327198f3934677d4f9fe9965417d1372921714
SHA512 a0d179b762b67ecaeddd9c0ff713d1c87085f8cb3f58bc10697246ae6fbe8fdb1dda32fa9137d7805b4e980230d0a6ec4b135d3d8b01cce47f33190c1dcaf312
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvtroZSX:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vq
TLSH
T115B2DA2B600DCB7F4F800AADAC196FD76DA802CB97589D5047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d4f6914a080502a74ccda630b50e7851d504cfb6742f07f27ae897c62c980c79
MD5 ee283f4db4325420c8e7877f2ed4fbb6
SHA1 e331e03a9a062b75376d74bca6c00b95815ba011
SHA512 6d2fb0e2dfab4fb1f40aa679045443854d044e202802237a9b035a18f2c2c596cd89ec5b92388b32db104afc41a3371f7d4233c510c2e8f3ea2b22b6b170a497
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHN6zn9Xr/WzoWgv/K4uD8wKpuCuV+Ko:CbEBVj5JAdSp9/EgTK7j6dJOHN6zn9Xl
TLSH
T18B911701347B02453C7F6A0C817C89AAD681B063342EE96F7F9445D51F6EE856EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c1dcd6cd-afe2-48b5-8c4c-b7bb2870c200.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1dcd6cd-afe2-48b5-8c4c-b7bb2870c200.tmp
Size 11KB
SHA256 65f0bdcae04231842c7e61e2dfc0cfb1efd6d0201f84fcc5d63431a1c2bdede9
MD5 9b32c327caee4190017950b73fc52fd7
SHA1 5ad387808d86fd6d544b9a131cbe54f74b17ad6a
SHA512 2639c8ad86dd7b2ce77b9628042f335983e7ddf9d05ce8110176714bb31658ea22c5c31348a8d78fbf16d6a56e71fd01d586de09f336154e20b861d85073bc07
SSDEEP 192:sxRmmRVbI/f4s4Uq7Dde5lSAzoD8p4j/g6+WNIYCWJiuOQ+G+IgDpJ:sxRzjI/f4s4Uq7c5lpK/5IRQQH
TLSH
T11D42C815AA28A97B8CC7E21DBB557F53D7F95032A1902F48ABFCC61C04E6ADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a0daf9832019351280415c07eda8dc18bdfe90ea015a0161fe92ea26ff5b2d4c
MD5 17b611ae4756b0c35e0f9b60e7aff529
SHA1 02459b310e453de2810e744c97999804dddc889c
SHA512 8f6d719e9d338128bccb6bb43e9f1af345dd7e6a61798c5cc286153ee66aeb78e895a20ed9e7713eae66f4c2cbffc745e0bc1f7bd8f3f9cbf2314904372b70ad
SSDEEP 768:hrv+4UNbdD3FpeTNp8+p3bd66j+4BRv86aLIT62bwCl1:hbsbp3CL8+p3Z6n4yP0ww
TLSH
T18D03BF72F86899739CE6C644714A7A437FF8519396C10AC0D8DD2B4E40AB1AE630B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 25e6e7bd93bac95cd9d723ff5191c09b3ebbe34cc9de9c9e31ec6f5d038755d3
MD5 5cd22bc9559a0d202ab4ceb3bd51df2d
SHA1 5c3d8f6499e515540a406c610c6bed4a20ad0e0a
SHA512 2491b938992631cb47da12e7ab1de11fa00db40b69c71a48204f368b841acd61fad32d9bba02b856895c928b06506419c2874a89bea4b4a4dd0cd866397bf5eb
SSDEEP 768:Z23OcfeTbp8+p3bd66j+4BRv86aLIW6f5uw:Z23OL98+p3Z6n4yEf5/
TLSH
T11FF2AFB2ECA49D735CE5C748B64A37036FF4915396C42E9498DDAB1D00AB2AE170B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8196d17695c4aec6e149326b6e23977ac7e77965a9900d422542439bc7d1be07
MD5 93909697b2f55e4215ba3f1b26bd97f5
SHA1 122f0a998839197ba0a2d1c85a8ed35fbba76c2a
SHA512 6009bb69325046cc4b911bb221d1763a9c0c209ba0caa110f400b0a8fc7ed1a3850303ee15ef3a65aecd06bc0692418b6949f5cbbbfd2875d1f5fc997cfb98ae
SSDEEP 768:Lrv+4UNbdx3/feTKp8+p3bd66j+4BRv86aLIW6AO:Lbsbj3i08+p3Z6n4yEP
TLSH
T14503AE72F868D9738CF6C648B18B36437FB8915396C01AD4D8DD7B4E41AB1AE130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 f5971f83eef8e48b3886d52f88caa5ded1e18fbf8efe40d02c9dd9faeb4842b1
MD5 94563e4b0e5db3b91ac1c44591f765bb
SHA1 69633de99a3f89404d02c549c046c3e87110de57
SHA512 2f93f198349d99b71bb4e75fed343729e91c368dc0b767386bc50698fdfa271a2659b9d5b2b5b1b5a5d3025069be5e22d7ab2fe84f0846adde2bc5ee94e6ffa2
SSDEEP 768:h23dcfeTbp8+p3bd66j+4BRv86aLIW6f5uw:h23dL98+p3Z6n4yEf5/
TLSH
T173F2AFB2ECA49D735CE5C748B64A37036FF4915396C42ED498DDAB1D00AB1AE170B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 bffa272f13bc034a8a98d58c20f799dc65e9ccb2f7d9ea3c40fd3872484f7bd1
MD5 cd8e25ffcf3b3f7cf8175a9041dd9ffc
SHA1 cf0fcc448f778825b9e90ad53388ae18a86152e9
SHA512 4cc413f688b0afa08b8902f2c17b832e43e0735245247f7950a5cee81079d508d8bc8cc5a6291226350e2051661c486f36229952573555af46ced10d3e07b555
SSDEEP 768:1FQF3mwg5cfeQp8+p3bd66j+4BRv86aLIW6f5uw:UF3IW8+p3Z6n4yEf5/
TLSH
T193F2AE72DCA4D9779CF9CB88F64A3703AFF48163D5C06AD4A5DDAA1D009B1AD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2549efd80c51e6de5ed3189a1326d803c3c3aac30ae94488dabb6125cdc276f3
MD5 975473e8740b0daf99bab6eda97f1f80
SHA1 beaee722deed970181da0f2c11360eaa32e6fcd4
SHA512 51b7326362c58a2edb2526bc93733fb336ddc15648fccfc4a3355099b6ff431ec3a08f602c4da7ae0b54c106fbc64d0d006019ec17e69c65edb4d2e5245c9fba
SSDEEP 768:Irv+4UNbdD3mc/Np8+p3bd66j+4BRv86aLIif2bwCl1:Ibsbp3hL8+p3Z6n4y50ww
TLSH
T12A03CE73F8A899739CE6C644724A7A433FF851A396C10EC4D4DD2B4E419A29E230BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a08667a-ea3d-49d4-b360-f195573eb137.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2a08667a-ea3d-49d4-b360-f195573eb137.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download