f77d265471f9818816abe59c24d8ddfe153697c51c9d18e2a4d716a32b00abf6

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260822-pgpe4sgp3t
SHA256 f77d265471f9818816abe59c24d8ddfe153697c51c9d18e2a4d716a32b00abf6
MD5 c4751665e24513cd7becd8bc4d6df503
SHA1 f81613ad1cd6d1ee79223eb6814f114be4d9c563
SHA512 1b7212187e4779bafc0b84ccc79cef89de1fee623bfe2be7da6d7c77437d33b3966cba9aaa4a6965c08c9536ee0e62e8f2bc973441f31a09dc59f79b18f53bdc
TLSH
T11251E7A768422C2C67768068EEFAF31D9291542692504DD0B184288B4DD0FB6E5EB177
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1512	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318747021600483"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{AE2D19B4-F744-40EB-95BD-3C74270413FC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 4460	4568	msedge.exe	88
PID 4568 wrote to memory of 4520	4568	msedge.exe	91
PID 4568 wrote to memory of 1512	4568	msedge.exe	92
PID 4568 wrote to memory of 4520	4568	msedge.exe	91
PID 4568 wrote to memory of 4520	4568	msedge.exe	91
PID 4568 wrote to memory of 3152	4568	msedge.exe	93
PID 4568 wrote to memory of 3152	4568	msedge.exe	93
PID 4568 wrote to memory of 3152	4568	msedge.exe	93
PID 4568 wrote to memory of 3316	4568	msedge.exe	94
PID 4568 wrote to memory of 3400	4568	msedge.exe	95
PID 4568 wrote to memory of 3316	4568	msedge.exe	94
PID 4568 wrote to memory of 3400	4568	msedge.exe	95
PID 4568 wrote to memory of 3400	4568	msedge.exe	95
PID 4568 wrote to memory of 2040	4568	msedge.exe	96
PID 4568 wrote to memory of 3336	4568	msedge.exe	97
PID 4568 wrote to memory of 2040	4568	msedge.exe	96
PID 4568 wrote to memory of 2040	4568	msedge.exe	96
PID 4568 wrote to memory of 3336	4568	msedge.exe	97
PID 4568 wrote to memory of 3336	4568	msedge.exe	97
PID 4568 wrote to memory of 5088	4568	msedge.exe	99
PID 4568 wrote to memory of 2576	4568	msedge.exe	100
PID 4568 wrote to memory of 5088	4568	msedge.exe	99
PID 4568 wrote to memory of 2576	4568	msedge.exe	100
PID 4568 wrote to memory of 5840	4568	msedge.exe	102
PID 4568 wrote to memory of 5432	4568	msedge.exe	106
PID 4568 wrote to memory of 5992	4568	msedge.exe	107
PID 4568 wrote to memory of 1232	4568	msedge.exe	108
PID 4568 wrote to memory of 4324	4568	msedge.exe	109
PID 4568 wrote to memory of 4324	4568	msedge.exe	109
PID 4568 wrote to memory of 4912	4568	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffdbc48c188,0x7ffdbc48c194,0x7ffdbc48c1a0
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4781120936278014928,14166449492807199797,262144 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1880,i,2188776091850490388,13071923711778500927,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=3204 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,8632334524672778292,4824022419748707981,2097152 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2224,i,9048909104348168807,7582594620971821310,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:13
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,8684080883993177736,9807719471294358599,2097152 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3876,i,10473805160571704279,14560054318919215436,2097152 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3888,i,12860478692788769257,6906313296157195718,2097152 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:9
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5380,i,8916121092149398564,13789632076722361844,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5388,i,13235673268760606371,11725411669481675521,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6004,i,3200652145052498462,11777518212134378025,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6004,i,3200652145052498462,11777518212134378025,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6640,i,2567971438375524421,15082425041308855775,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6644,i,12359775378395192037,6577849771798789059,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6648,i,12487986570453440699,10119511016888759630,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=6776,i,12097026683290897316,14102300177300373030,524288 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:14
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6488,i,13160270895256749640,13169722449556523981,262144 --field-trial-handle=2676,i,9456657100669241669,11414630167096638170,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9e7a242edca6f18f406f9579dc896d3352cba92ef4e64902bb92b08a076f1f7c
MD5 9cb6567fe6a50039b50865f534dec0d0
SHA1 7370d6431a50f8140bf0fcf28f173e3a84b9eb03
SHA512 214bf5be3b387053472d93c8491671e9eff6c98f0b5e9c46812838310d0f3ede21dec950902224f78b6099e1baf864a15af54cf42a0210dc973be1260e4e32b8
TLSH
T1BC4151D117A135D0DBE88EF15AE2BADD72F4D49E25075E501008EDB08A8AF2690CA87F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9730.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a9730.TMP
Size 2KB
SHA256 20261ba5c28b069a23cf056bfe2115757c9123232586803d0a91e90308f2c861
MD5 e25a23dfb64fd71adb49cdb729052ead
SHA1 e7c8629d65b456d0bf0887a1b1e2c423de93c074
SHA512 067f7f13b53f8be74df4e6c7a0f618b3311bba7869c21a458546fc7785ac91dc70dc4ddc418910332f934b2a4fa4e23ed6aca959f3cefc689acd9eb07ba2e656
TLSH
T1C14151D017A135D0DBE88EF15ED2BADD72F4D4DE25075E501008ADB08A8AF2690CA87F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3a44fb3423bcfe4a10b4276c11379fec1eb93a883869c3f84d15c3ec612b4569
MD5 702911a4a2485a16118c73cf2bcc0a20
SHA1 41e1ff92f0b02431ac02f09f8476cfcb56958197
SHA512 b22c4b4d3154f0ef0022a75408d77bb699aad60f9db2624af8d7847f3d6051038801a21dc7c44452984fd839b4049361cd2e4058540785226cc3aeb03730b45d
TLSH
T19B31D3F787B4857E9A0196F0AA14AE2FCE1D0515432C7C6A85E0AE27D3F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5b0334c4b962b888bfb6e6dc962efb1a1f24379230ab25bff4ac956a605dd7e7
MD5 d823d4a4486e1b1eef33ee3516ca145b
SHA1 55618d22bf549ed99c1e5b25d8ff75e5f0092623
SHA512 2b93ec7d6e69e8fccf1da5fd11096a807d72692fa2e9b721e6bdd297b604123efd7b555df70d5eac049c1d872271db2e5383b816d97cdeb9ee2c613296b8685e
SSDEEP 192:sxRHRObh/fRsqR3V3AtuzoA8p4i/g6+WNIYZFLtrrGVIgDyJ:sxRHuh/fRsqRl0H/5ISiC
TLSH
T13742A7156928AD7B9CCBE21DBB557F53E3FD5032A1901E48AAFC861C14E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a893661cc7802f69a182e10721146725e725fcd1ea3ea92a0e2453ee21c3634d
MD5 a8dbd31db6a9509d66bf88bf69b81f80
SHA1 a9f6e889d806be318be1aeefef2dea4c5bcf1627
SHA512 fa529fccae55de1a810347ade16ef76f51e9298c5f3f8086004641644ca77e867226f9127565ceca10b9044df513b03f025ec1ff1ad798780845913fde60f2ba
SSDEEP 192:sxRERObh/fRsqK3V3AtuzoA8p4i/g6+WNIYZFLKPrGVIgIJ:sxREuh/fRsqKl0H/5ISTs
TLSH
T16632B7166A28A97B9CCBE21DBB557F53D3FD5032A1901E48BAFC861C14E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 65d8c3a69659ac0646542b193390a13a8d5afbde5bbc30d6660a518f2a5a1117
MD5 52d43151eec0a71bbbda1b0db5744ef0
SHA1 875ba8fc907b322c124ed817de2ecf9b4a0759d4
SHA512 7426f4d2f9f7e5f89a030095c556d2ea5f446bcfd259a72f7141f43047301757eda4607840d39093a7834f32459a681c02b0dd4fa37cf658d4608b718d33f29a
SSDEEP 192:sxRHRObh/fRsqK3V3AtuzoA8p4i/g6+WNIYZFLKPrGVIgDQJ:sxRHuh/fRsqKl0H/5ISTI
TLSH
T1EE42B6166A28A97B9CCBE21EBB557F53D3FD5032A1901E48AAFC861C04E76DD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5d2345840f66ccadd197c15471d34746318e9a2143265d59f495416085c236b0
MD5 d8d90fdb098f65f509d90f419274c6c1
SHA1 8f897c1139af4bf803b33689d17edabf273e8ed3
SHA512 13acb042ca07a14abcbf8d313698bea3c357fd61f60b5e33915b0f91bcc021ab136e965adccd076b8134ac8f2ec9d7cff718e1939c6f9bb4e7a81d08f04edfd6
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGCrocm7:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VL
TLSH
T13DB2CA3B640DCB7E5F800A9DAC196FD77DA802C7A6988D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8e01311b7210986437a15df732837554b622429277712ead2e5dba79a9183150
MD5 23850db95e774af26b0b250ec7f0ed46
SHA1 c1df796521946f1e49a2583495b0128f535a728f
SHA512 e5608448facd5a2589b9d7f8fde0cedc5bbceb1c187e65c1971f83d43bef33543e6db8a8329d918f47e5d69f458da2bd80d75b5a50115515a44d1be0444e0cf1
SSDEEP 96:KRiVAE+imkWivPgMkK4BgGkckEP+k5HWLa2Q44eWIdFgWeK4rgEec+W10hQgKt2V:CiVAE+imbiv4MYBgGLkEP+k5HWLa2Q4L
TLSH
T150910F01707A22407C3E7A1C8174882F96C374F23459AAAF7BAC55A51FA6E064FFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b2f1b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b2f1b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 477a4919bde51f5eed57a8981923da6405092ebf88819a41fcdd20a3b822becd
MD5 7b47945a57dd8fcd5cd28a40c5a74fec
SHA1 f95e83d668614aaa296f0ef33254b75ed922518a
SHA512 f3d0aa9d5e6b9131faef4aa689200664ea2637385a16df4668ff087ffd2f0447cdd0db0ec482feb15de4ecb4d1806748353b95cdd98fb49f2ce375a4b3fa832f
SSDEEP 768:Crv+4UNbdH32xP+LeSFOUx+IX4fouOToPvB2thtA9VABreVH1SlX:Cbsbh3S+snnwthttBEH1Y
TLSH
T1F003BF32A4AC8973EDE6D398710B71432FF4925396800FD49EDD2B4D069B9DE070BC6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 37a463582c899948751175422d89ace0d83fac9656e3dd158f5180e051ee37fc
MD5 4b7598792f5bac687cc0959a438465e4
SHA1 c642c0ce3fef0a80d76006bfcb40d13747b2f4e9
SHA512 682c9d3dd0582f1f81cdc0fb92d6b4672f1129f8b153ac91b206f68b8b89671fe979a40d5bef2ea3c36f445dd1d694aa739565f8f40c385ed09409d801d3a9f1
SSDEEP 768:xP3YTx1+LeSFOUx+MX4fouOToPvB2thtA9VAgrf/N:xP3gSsnnwthttKf/N
TLSH
T157F2C0B2ACA94CA3DCD9C3D8720A32475FF0815396D45F849EDD671D059BAEE070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a2860b937978a80c8be2449ccaf24d8bacec07a4d0aa70d05c9a5fc7088316f2
MD5 b0094dcf0ab756a3ef76e92fcee53b35
SHA1 5383ab1cce1585c62e7087c6530c35bcca7e6c96
SHA512 e4949415a560e0608c064a7d06d75acf62ad01c03588b0e54f5d05d395d8af582207e8d5da690b375bb4d380316b9e8a359c60547a056aee1f60bfa947c80049
SSDEEP 768:GP3PWx1+LeSFOUx+MX4fouOToPvB2thtA9VAgrf/N:GP3MSsnnwthttKf/N
TLSH
T168F2C0B1ACA98CA3DCD9D3D8720A32475FF0815396D45F849EDD671D058BAEE070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 491a062a4e1c581d917b459878b1a312a162e76e34de6f553b40d6571ae374e5
MD5 b45821e4302021e9bb9e2d1f10b125c0
SHA1 3c01851a54c12125d8ead22764cf05a1097bec9f
SHA512 964fe9e4f92b2797ff160ee66bf9414ebb11dfcc43d6670d539fdc533fb2887d283f5056604d2fa299a05f459730808e061ca68e00d8cccfc2b180126a011bc9
SSDEEP 768:qFQC3FwgdWx1+LeSFOUx+xX4fouOToPvB2thtA9VAgrf/N:RC3uBsnnwthttKf/N
TLSH
T166F2AE7298988977EDEAC7D4B20A32469FF04153C5D4AF94AFCD6B1D015B5ED030BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 da1302aec4f7ff92e072c32e1588a1c2e637b2073b4795348c55bb0d48db10ab
MD5 5c6a989c9f9f2a15cd3676aa41b30134
SHA1 48f83cef38eb0e17945a6d53a24ca49ccfdcacca
SHA512 a649b5ca81aa931402a732263f2aac7cda9c9bb946a6365e424923e9fff733cb627c653e32f33a28255d8fc17a27a08066a267e5bc556f24a9f6a621677aa52e
SSDEEP 768:grv+4UNbdH3CEP+LeSFOUxbX4fouOToPvB2thtA9VAwdeVH1SlX:gbsbh38snnwthttgEH1Y
TLSH
T19303CF32A8A88933DDE6D388720B72532FF4516396900FC4DDDD2B4D069B9DE470BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88688294-4479-4a9e-9389-a895950b12b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\88688294-4479-4a9e-9389-a895950b12b0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download