73198b0d676560cde4d4478496f8167cd9aacd289e9f25a562430e21aa4cfa1d

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 00:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 64KB
Sample260823-aps1ya1ekd
SHA256 73198b0d676560cde4d4478496f8167cd9aacd289e9f25a562430e21aa4cfa1d
MD5 d0f1ad3e7ff11c8da1a4f6d9b892d0b4
SHA1 0b02ec34f7a90f719bc1b77e57d1c4fbcd0c0d2d
SHA512 160aa2e72a92b82a4c0c1ed9a525cd2ec67ee238783058583875e612414a878b9a6f6846e0ad0f6393d28313584fa1e934b8799754c75041a929d80d66162f9c
SSDEEP 1536:rgfAO6OfrmJTukyMjZNv5jt8GDbMhO8zE0x:v5+a+
TLSH
T10F534AA461F83632019380DA69AB4A083871C707D81BC514FBBCDAD50FD6D94FE6FA9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1396	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319182256110530"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{B028B276-EA74-4900-A499-708A74EA5541}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe
5220	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5220 wrote to memory of 5812	5220	msedge.exe	88
PID 5220 wrote to memory of 1396	5220	msedge.exe	89
PID 5220 wrote to memory of 2928	5220	msedge.exe	90
PID 5220 wrote to memory of 2368	5220	msedge.exe	91
PID 5220 wrote to memory of 2928	5220	msedge.exe	90
PID 5220 wrote to memory of 2368	5220	msedge.exe	91
PID 5220 wrote to memory of 2368	5220	msedge.exe	91
PID 5220 wrote to memory of 248	5220	msedge.exe	93
PID 5220 wrote to memory of 248	5220	msedge.exe	93
PID 5220 wrote to memory of 296	5220	msedge.exe	94
PID 5220 wrote to memory of 248	5220	msedge.exe	93
PID 5220 wrote to memory of 296	5220	msedge.exe	94
PID 5220 wrote to memory of 296	5220	msedge.exe	94
PID 5220 wrote to memory of 5768	5220	msedge.exe	96
PID 5220 wrote to memory of 5768	5220	msedge.exe	96
PID 5220 wrote to memory of 5768	5220	msedge.exe	96
PID 5220 wrote to memory of 4812	5220	msedge.exe	97
PID 5220 wrote to memory of 4812	5220	msedge.exe	97
PID 5220 wrote to memory of 4812	5220	msedge.exe	97
PID 5220 wrote to memory of 5296	5220	msedge.exe	99
PID 5220 wrote to memory of 5296	5220	msedge.exe	99
PID 5220 wrote to memory of 4572	5220	msedge.exe	100
PID 5220 wrote to memory of 4572	5220	msedge.exe	100
PID 5220 wrote to memory of 4280	5220	msedge.exe	102
PID 5220 wrote to memory of 4356	5220	msedge.exe	106
PID 5220 wrote to memory of 3716	5220	msedge.exe	107
PID 5220 wrote to memory of 6068	5220	msedge.exe	108
PID 5220 wrote to memory of 3064	5220	msedge.exe	109
PID 5220 wrote to memory of 3064	5220	msedge.exe	109
PID 5220 wrote to memory of 4452	5220	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd1e07c188,0x7ffd1e07c194,0x7ffd1e07c1a0
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,1941315781293362389,14119564884137584622,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,12605899874093484883,17606422959234407923,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:13
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,6334548927284480038,17201270875149960080,262144 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,12768103195788438588,4762293966056242628,2097152 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,1487447396867850401,8051655352240121879,2097152 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,1565476553614586019,14080467489012868691,2097152 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,9638887343431712678,16902557202924219044,2097152 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:9
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,9585195867990853912,10484370851465710568,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,1815455803205388891,9472534195894976029,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,17831294702192926928,13410078730247718086,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,17831294702192926928,13410078730247718086,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,3714506252784570326,14234586439557871207,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,15649875209217354421,744791331042093988,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:14
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,5736638433761471588,13619852892743342828,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,14268491835510995120,13506295763001476492,524288 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6644,i,3942354398792031658,14582345787893010746,262144 --field-trial-handle=2652,i,17696226347452998599,118767787860508383,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9133b5bec7db63cde86a908d686d223cc11290ddba403001118eb74aa5ab168e
MD5 c8fc8567f3e76d63bdabdd99db73c734
SHA1 58189a4e95e1a458764378ab14118c821f5fee14
SHA512 818f6fca31a0babf8db0f0994795ea766325fbab105662ec449ceabe8325cdf3dfe0524036bbef13ff9335d96a51e8a5a027f31f5cd9f39a7a011195ac577751
TLSH
T117411E5C833CDFCDDBA409B1BCF0D6843ABED8DE0307AE50D4A46BBC4A46B844991193
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599c36.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599c36.TMP
Size 2KB
SHA256 e5ffd00b876cd254b32101953e234b04523d93fc7ba87c0e6632d1474d5f6a06
MD5 8747702385fbb58190b72b63c6d9ba01
SHA1 3c5edbbefb9953637351d20a404b6d93b8f40ce1
SHA512 dac31fbac7f59a1a8836caa3ad043a3aae056126275613914e081795aeb886e8e4d6b5b5be51b1f9a61a88fecf5db0598585055093e0a0a82803dba2fc04d48c
TLSH
T18E410D58833CDFCDDBA409B1BCF0C6843ABED8CE0307AE40D4A41ABC4A06B844991193
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ed94a6b233b416deac21ad6e8f6a2c6ae9666290d91689befe4575649f6ddcd4
MD5 f24556497cc8ae0efbac563783fb014f
SHA1 019bd46421395aac1fd7eecc6a843c26115e5649
SHA512 2f880f42e059522c13fe09e454ef2ce70ae7b247122fb8757b6b69e64afd517531a3ff7b47d9d2e23761b8fe3c03f9cb23444eb7a9a9aa82e0dbbf87d0b9d62f
TLSH
T1B131AFF783F4857E891196F4AA14AE2FCE1D0515432C7C5AC9E0AE2B93F34B1E04165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 59edaa51cdf2856c1a3026fce322aa91da1247dae15e3c156c0b72a4f34534a6
MD5 3cd403708efda67ccd1cc291c6fa65ee
SHA1 22f5de6b66a090b6427fdfe6c042ae7c7e73aef0
SHA512 1846487bafa19fc45e216557a5dec32cd004709f3ee96fe08e04cc128549a8fe724175b926a7430a9582e0e95a6348fbfedb838f037980735a2f1e1cbdc71dc9
SSDEEP 192:sxRMRRyM/jK1Ml8wbT/fXsWUXprQ5uzoA8p4B/g6+WNIYn8UnGhifG3IgDQJ:sxRM7lT/fXsWUXA8/5ITAslI
TLSH
T17852E8056A34697BCCDBD20DFA45BF53D6F85573A1901E48AAFC9A0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 27cc919d67a263a72c26ffa90b974fa53a16ebe37e55a44d1c85aa7e0a42c1aa
MD5 e01da14f6023a5affdb0334f84a2b96d
SHA1 04c25727b0c087bcd4beadcdf68103eaffa969b0
SHA512 ad0751c33aedf4ef4882fe4bc3d078f8a2b380a27f949ce7cbcb51b1e06b5ba33845e380eae57e1ad61d3011a26e1222e9eaca40aeffc95e1f5d9847ecb7a1a0
SSDEEP 192:sxRzRRyM/jK1Ml8wbT/fXs8UXprQ5uzoA8p4B/g6+WNIYn8UnGhifG3IgIJ:sxRz7lT/fXs8UXA8/5ITAsls
TLSH
T1F252E9156A34697BCCDBD20DFA45BF53D6F85533A1901E48AAFC9A0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 70d5b2541c4735b121f383302ba99ccaabea5afacc055bd2daa0b933d9c1ce84
MD5 ad499006f01ab045f3be162f1afdda1d
SHA1 83fe94848866e4036c5e96f726c3241385e70f20
SHA512 c6524f538dd45e8a9d1a67432be3639877ed210080fcb85de86de8659077e1eb040b01b52c16fe0f8fb00f520dd11f10a631bdfb978f638f79f02a3ce149c2e5
SSDEEP 192:sxRMRRyM/jK1Ml8UQRbT/fXsWUIprQ5uzoA8peB/g6+WNIYn8PKnchifG3IgDyJ:sxRM7q5T/fXsWUIAC/5IT66lC
TLSH
T1EA62D815A6246977CCDBD20DFA41BF53D6F85573A1901E48AAFCDA0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 86283ee0056e60bee77ab700ed4e896fb86bdc1b69deb83ca8fb79a455139ee3
MD5 277897957845e508995e8850a95592df
SHA1 adfd06c060f401e666db69be63c3fa664a12fbb3
SHA512 04efeae9624c247b016dcdf1efcdb68b88b87d509621fc8132827d89f8bc42ff6709132a39b0f92f8e07a03f2ad55f4b6038582d1c6d26711d5f53442b7a6da1
SSDEEP 96:KRwBUAyeSIWWLbgIIK4Ng6Icoob6AFHjsJ9rhhdW18qgjbK4igtbcx50HPoHpm36:CwBUAyeSfWLkIMNg6noob6AFHjsJ9rhW
TLSH
T171911151317E02403C3EAA0991F99C1EA3C178E23564B42F77E902E64F66E438EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

de2b5f07-0ca6-4d95-88cd-a058bb242a0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de2b5f07-0ca6-4d95-88cd-a058bb242a0a.tmp
Size 27KB
SHA256 36014a8a4940a3a7c192dd3cb98aa447d9654d0d339aadd2e79806d6f5b8470f
MD5 3ef3fa60d4b756e11c96385d66d5c583
SHA1 12086acd8cb9db4105d34e3f228ecd113d7e312f
SHA512 6e54abe1fb4496892f8303218b1d233da117aa0a30696b8d925033664f67f8d351931788e0dbdd0310c030545a3ce66e445bd39c6ec8e227fc16719866173582
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YkroSh8q51:wGedp6WgoufDMu1jatVYvgr
TLSH
T1D5C20C2B640CCB7E4F844EADEC29EED76DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

534c267b-f052-497e-8d63-8382c83b43d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\534c267b-f052-497e-8d63-8382c83b43d6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ffc31faaffd76ec3d6f55d735de1c4911e8b443d74a66d030d9842b6b0d7da95
MD5 25858fcdc7d904bbd6bd27ff708252d9
SHA1 9aa8ac7be46fa75565e750fb293ab6f565a76b23
SHA512 ce31fda0dffb841346121a9a63c97b5a33966d8e4c70cf7c874d1be2284c43742090d2dce54330858da368bc897e65fa0d2e8c220fbb82b3ff5495bd2bb90263
SSDEEP 384:pZcIO38NCKo4GePQe1CJDZNfNoXOVSUUWXnFLXoabtoETRzcoXfK86sfxEZxxsI+:hO3+FCDZIO0WhT9Nzc4ReyIsP3fRlem
TLSH
T1EDF2BF72AC78DC63ACE9A385F6063602BEF4911782C86E8499DD6F1C054B6DE131FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d4e807a061625128fbde45f6385843ce70d4a72641bf93f661daafb9303a93df
MD5 77d0d8b111064514a5b9e2110b2789d2
SHA1 56197108e507c276c917c726544e51d2b98031b1
SHA512 ee0cbede94edce8b647fa3f8334d3f19e24b93e6196af1b44b1f8c42295ad56724ee3f042b69d8e1ca81d09c4ee1a43bb53460ff0afeca7e4b5047736272c035
SSDEEP 768:Lrv+4UNbdd3+dCDZIO0WhT/Nzc4ReyIsP3fRlY:Lbsbb3p/tc44bsPfzY
TLSH
T1D503BE32F828D973ACE66284F10B75137EF4511B82C92A94DADE2F5C064B1EE131F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 faafe6a755d75b5330c190a8e42797b45d1584001951684a070c0e70a36076e1
MD5 6fcaab01facdcc2b8f30bf8e7e290637
SHA1 e3961ec61c10e5651398f27052f5eb4a568a9f3b
SHA512 e2190a318c0f04aed6f8ddb31cc0925d5f432db46c7ddd4d5ec9e9bd875b2c8404c88346f2499b788a1ad01296c6a88659ad1c22e1d7e7d3e4e932d8e3b275f6
SSDEEP 768:prv+4UNbds3HsDZIO0WhTLNzc4ReyIs23eVH1S5D:pbsbS38Ltc44bssEH1Y
TLSH
T1DE03CE32E878D977ACE66686B10775137EF8911B82881A90C9DE2F0C4A4B1DE031FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 bb7408ad9dd4b21800b1a9e0e94e86b80158dbee4068efc73638429bb93ffd66
MD5 dd86acdec3dd25360a6df3b7a5bd95fc
SHA1 4f92bb811c2db3ae819693f4a35b0691a6ce38f4
SHA512 be98390c529e76e3fc2be711e868290c59721f271dd1c1419795da78a81a366a43a1250c27cdfdf75a8134f38df6c97bd9817778a31b61e3325234b774cb801c
SSDEEP 384:XZcIO38NC9o4GePQe1CJDZNfNoXOVSUUWXnFLXoabtoETRzcoXfK86sfxEZxxsI+:fO3pFCDZIO0WhT9Nzc4ReyIsP3fRlem
TLSH
T18AF2BF72AC78DC63ACE9A385F6063602BEF4911782C86E8499DD6F1C054B6DE171FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 73014593702a2e0c2d50d745ac01d747d6cd94c34f55c739e2e307381410ccb7
MD5 990cf0bc5d1535b76b53d7a60cb61f0a
SHA1 ac32344af6c39d50a804039325f492cb4bde4266
SHA512 1df96698ae7469280cd31269c5f922a32ba590740a28159b24b6ccd2d80d3405dc69eaeffd3672cc7bcbd9403e135a8d4f24a01bcd6436452b5c5e9b069af9ba
SSDEEP 768:IYFQ53lwgvFCDZIO0WhTFNzc4ReyIsP3fRlem:I753AFtc44bsPfzem
TLSH
T168F2AF729C64C977BCFAA785F60A3202BEF19127C1C9AA949ADD6F1C05471DE031FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 71dcd11c62dca54e1ecea52e1dcecaa3edc4f99bd15e91af8174c9fdb75bf19e
MD5 9822d211a811323fdea4686ab4ddcc6b
SHA1 afd317d0226b6675b9c406d850741134ec9bcca7
SHA512 c444806093251832ec3448a73bf4b2b3369b5dad900ae2fc2fa87242825c2900b3fd8cc1a148fef3cf743e6810214b65c3ab80f17c96411c1dad6c020264d0e1
SSDEEP 768:6rv+4UNbds3aPDZIO0W/Nzc4ReyIsX5eVH1S5D:6bsbS3ktc44bsJEH1Y
TLSH
T19B03BF32E8788977ACE66785B50B76533EF8912782981BD4C9DE2F0C4A4B1DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24beae64-ce96-4be3-ba97-7821ce9a0d86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\24beae64-ce96-4be3-ba97-7821ce9a0d86.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download