a9b41bc951f56a2683e7317ab3ff2b2e735539b54fbb4bc17b99cc03d510b60b

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260828-ph8kdahn91
SHA256 a9b41bc951f56a2683e7317ab3ff2b2e735539b54fbb4bc17b99cc03d510b60b
MD5 45b59cc3faccf269516ecf3d5fd03de1
SHA1 de9263849575dcc3005694c53d77b2041638633f
SHA512 619413e068b88099d0ab11049a6350f6bd586100eb30a6da340ca7774a9226827f5ba75f45b443bd0a32ed7b87fe71ee2619751f3f4021f6f950d40cfd61626e
TLSH
T1FC813025E0C100079537E261A972A79AFF714243930B4A907ABD36A3EFBBD5149B36DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3516	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323932659404790"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{BB3389A4-2B6B-4E64-9D60-0C7F9BDF56D2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2108	msedge.exe
2108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4984 wrote to memory of 2232	4984	msedge.exe	89
PID 4984 wrote to memory of 672	4984	msedge.exe	91
PID 4984 wrote to memory of 3516	4984	msedge.exe	92
PID 4984 wrote to memory of 1664	4984	msedge.exe	93
PID 4984 wrote to memory of 672	4984	msedge.exe	91
PID 4984 wrote to memory of 672	4984	msedge.exe	91
PID 4984 wrote to memory of 2784	4984	msedge.exe	94
PID 4984 wrote to memory of 4164	4984	msedge.exe	95
PID 4984 wrote to memory of 1664	4984	msedge.exe	93
PID 4984 wrote to memory of 2784	4984	msedge.exe	94
PID 4984 wrote to memory of 2784	4984	msedge.exe	94
PID 4984 wrote to memory of 4164	4984	msedge.exe	95
PID 4984 wrote to memory of 4164	4984	msedge.exe	95
PID 4984 wrote to memory of 4772	4984	msedge.exe	96
PID 4984 wrote to memory of 1984	4984	msedge.exe	97
PID 4984 wrote to memory of 4772	4984	msedge.exe	96
PID 4984 wrote to memory of 4772	4984	msedge.exe	96
PID 4984 wrote to memory of 1984	4984	msedge.exe	97
PID 4984 wrote to memory of 1984	4984	msedge.exe	97
PID 4984 wrote to memory of 3152	4984	msedge.exe	98
PID 4984 wrote to memory of 3152	4984	msedge.exe	98
PID 4984 wrote to memory of 3152	4984	msedge.exe	98
PID 4984 wrote to memory of 5264	4984	msedge.exe	100
PID 4984 wrote to memory of 5728	4984	msedge.exe	101
PID 4984 wrote to memory of 5264	4984	msedge.exe	100
PID 4984 wrote to memory of 5728	4984	msedge.exe	101
PID 4984 wrote to memory of 5912	4984	msedge.exe	103
PID 4984 wrote to memory of 1152	4984	msedge.exe	107
PID 4984 wrote to memory of 2832	4984	msedge.exe	108
PID 4984 wrote to memory of 2880	4984	msedge.exe	109
PID 4984 wrote to memory of 5012	4984	msedge.exe	110
PID 4984 wrote to memory of 5012	4984	msedge.exe	110
PID 4984 wrote to memory of 2108	4984	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x280,0x7ffb153bc188,0x7ffb153bc194,0x7ffb153bc1a0
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7612082047707779931,13157616577659897873,262144 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,18356427165209138802,12947389946968830526,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,2459380831155191741,5483653216243318519,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:13
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,17692920686339334741,12466852912298203361,2097152 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,13384000337975719473,16221503435736249581,2097152 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,9191052317164898910,10908794121661367559,2097152 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,13547618778173770745,7845504284009477219,2097152 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:9
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5220,i,244840926305995030,16455709091676714185,2097152 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,15832165929030006427,13295359099673845948,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,10665795339898565535,10306429664092416655,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,9692067593160224046,7919282462891536992,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,9692067593160224046,7919282462891536992,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,1304901680062086214,488085022087258658,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9561933385953438081,11824277285211610851,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,10736578063781398456,2000655968808649088,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2096,i,4566809986426422493,7652244222737552335,524288 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3140,i,17360729325982502682,417064021988489599,262144 --field-trial-handle=2192,i,10446914941606922505,4854847049032435543,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 dc1acb2e581123ecf1d9b042dfa19c1dd5f5ff67fadb331841d48a8b78eea7e3
MD5 1a39035834824ade418e6020980370a8
SHA1 1095bb212da22514abeeaf28cfdd103f88fb7f33
SHA512 20b3c820560506abfea88a052d12b096a11779c014302b971fee3739d185a6c86bad014065168fb1240ec18e41f988930ba330710ab5d52b58a71bac4eca6434
TLSH
T1F051712BA3F62DD1CF600CB2B2E859C83EF6C4A9205B5E106108AE73C919F50E2D1077
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594d7a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594d7a.TMP
Size 2KB
SHA256 919371c41797df1f2e14f042c3a726e9efb324504976c73dcdbeedd819c9d957
MD5 7b2950ccd73f5f4762635915fca1c491
SHA1 2ca3264b959db724687a7635103273eed6f96238
SHA512 8c474db2cc0666c2325b3fb96cfdbe3cac7921b47bb1173535d6c0157fd5700015c58c279d227f3fd917bf8deffbc0ac0b682cf59789712b6366d1c976c45c21
TLSH
T1A651532BA3F72DD1CF600CB2B6E859D83EF6C5A9205B5E506108AE73C959F50E2D1077
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6001967bac4f04621c520d45ee7e1a1d4e49c9fa648c143ff4a70273233c4b0b
MD5 f224b408cbcf34ada5d102ee87bba22f
SHA1 9871dafa09c18e2fd78202d1d98ebec376105866
SHA512 5a769253c3ebb49773e1f29949c3cf10298dbc930e2daf7652629b25bf17f3af2e3f74e0c8b55308a94bf573db060fd1873f1ac6a55d22ab231f98ed17323ee9
TLSH
T18A31A0F787B4857E8A0196F0EA14AE2FCE2D0515432C786985E4AE2793F3472E045A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fe3685dd58ab5b46959527cdd4f5ae858fe65e07ac20b72e3d1ab11455120825
MD5 40ca31c5684f411c6cc5764fef3144a9
SHA1 c5fbff74adba0386aea016fc365e4a16542e72d5
SHA512 0acc3ef9563987b87eec2c32c671799bff19ca204ec76fe868f167b4422c0e3235e049b2886b4b08c8c3af2621c91af575a59551135cbcbcbade5cfe21878d92
SSDEEP 192:sxR+Rpbi/fhsGL3AtozoA8p4r/g6+WNIYZFLK0S+G8IgIJ:sxR+ri/fhsGLCe/5ISCCs
TLSH
T12E32C8166E28A93B4CC7E31DFB65BF53D6F96032A1901E58B6FC861C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 afb57fec069c24df2777f77fed09511a45aeda6811708e888daea9281c826777
MD5 3be7db3ec207d100cd1bcdb2952de9d9
SHA1 0205cc93092352735713adcb99bef1c6587eb4f3
SHA512 5be9ba62a6deaa0e815ea9f9c5e064e83b88b6065e306a7511eb0a43e86ac8bb8e0bcbd30586bc5b798481e6312bd8466a211d292300884e315bb1fd5f5ed9f8
SSDEEP 192:sxRJRpbi/fhsUL3AtozoA8p4r/g6+WNIYZFLK0S+G8IgDrJ:sxRJri/fhsULCe/5ISCCB
TLSH
T15B32C8166E28A93B4CC7E31DFB55BF53D6F96032A1901E58B6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 97e078c9d79450965d98e8e45d39b7cb655272975243c9c79c660ed0c2a83ced
MD5 474c563886f89d8682ad04e92c3d6ba9
SHA1 3fb03576e53ca2d8aaff69c8aa91d197f3f4169d
SHA512 184a4059a7d822ba8b5691e13ae09c704af47906b8c26b1d82261df249a5dbbb9d37d6155d68a7309a17100c0cd9baf84afd12aa708d785d92d5ebcf08207bc3
SSDEEP 192:sxRJRpbi/fhsUo3AtozoA8p4r/g6+WNIYZFL2KS+G8IgD9J:sxRJri/fhsUoCe/5ISSCr
TLSH
T12042B8566A28A93B5CC7E31DFB55BF53E2F96032A1901E48B6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3361e8dda5ce4b5cb0b7eef057f2a31d9f5f79d14a4fb31e4d21dc499aff9240
MD5 f163826ed4b0a4bf9ebecfc1bfca167d
SHA1 ed686f17f6a17c45c7a8b8d0465fef49c47296f9
SHA512 e335e6908eb07194c2d45ef9a28f9705acecaf8c8e467b90693f30a602dca691389c353ac930e8cd1e4ef54e0f82479bb05f6a8d06baaa9560983644473db5da
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGrrocmA:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VH
TLSH
T189B2CA3B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

7feb1af0-d880-4917-a9c8-9c0ac5249db9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7feb1af0-d880-4917-a9c8-9c0ac5249db9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7241eec1c3de34b9fe38db63d4f8a1ceb75837fea43357434ff73b905d2ea28d
MD5 eea6427e7b258157f0ad062c82042b58
SHA1 bec0b81510d1fc442ae14adb17313d78563a2ba9
SHA512 8127f6e7931fecfe977152f2c9f31d7ef896b871948f4a551136518bd00a5b8efabcbc44ff3557ae353876e8a9a52157e1e0a4985fd80d4e986a7c00b72b3903
SSDEEP 768:gg3WkFoD+LeSFOUU+t3X4fouOToPvB2thtA9VAg0VyLvTO:gg3viCsnnwthtthibO
TLSH
T1C1F2C0B26CA88D77DCE5D394B30B72475FF08123A1D41B846ADD6B1D059BA9E070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 469604d92932718feaba41865f9e8f77b03702b4b71710dfd061174d5a5195f6
MD5 941dabb3389d547f8c444135fc968103
SHA1 ccfdd9eec0d54a77be776dfd8298ac5a54f2d6e9
SHA512 593b9f003d5264667d3d10d0d78272136b00f457dc0b097eace874e781278dda595df1d53cc7b8b6591336405b4f9966160c6240fc2b795a5cd38f6064b09360
SSDEEP 768:/g3hkKoD+LeSFOUU+ttX4fouOToPvB2thtA9VAg0VyLvTO:/g36fGsnnwthtthibO
TLSH
T151F2B0B26DA88D37DCE5D2A4B30B72475FF08123A1D41B846ADD6B1D059BA9E070FC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 baaa793a80368ed0cec4e84d0d7a1fe1fc933f2343968c428cff9e41f94c25f8
MD5 83371eebf6648ae51065661a6353e4fd
SHA1 f4fa7d24cf56b4f0adbd107cbcc53a3f6dc03a4a
SHA512 e7a5f14d7f0001447b8aebd1665bc5c09be7d7a176be20d281590d8364f265eaed66073e5606efc3c58bcfc87ea590ce3a891475272431ab5466cfe0b75c5610
SSDEEP 768:eFQs3zwgdkKoD+LeSFOUU+tRX4fouOToPvB2thtA9VAg0VyLvTO:1s3YfSsnnwthtthibO
TLSH
T1CCF2AEB25898C93BECE9D798F20A32439FF08163D5D46B84AADD6A1D019B5DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 408fed73bee0509b8e8eb34497c107e5f1727830f8c853676c881966cc59bba7
MD5 4be00a4647f04dc16f55da90327bb96d
SHA1 1e3b8717bf8588b24e0748a73ea11903fd9a524d
SHA512 7b68261a25894262b852a03da5e252dcb6c089728b15b484704732895b83cab098bce804d4fc19e633ed5783d344cc82ca089a6e703a0abe3590cf2b42f47de7
SSDEEP 768:grv+4UNbdH3I0+LeSFOUU+t8X4fouOToPvB2thtA9VAwDeVH1SlX:gbsbh31snnwthtt2EH1Y
TLSH
T1D903CF32A8A88A33DDE6D398720BB1472FF4916396900BC49DDE1B4D069B9DD130BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ce0a6c7ec0a375b1d1cd23bbdf3c3048d55840b59e943131bc79cda177637aaa
MD5 df4fe5138dc7e2c17af1f13576925eb3
SHA1 f7beaa9454d310f8fa6ac625da58a65f5ebfc5e5
SHA512 44a4f51b36de8f2cd914691fd8070b076031ad43a805d1ba41bb029fc472123f8fe17681d029f482c01f8a9ad36a1d760f70e91cf0079609183492d95cafffc1
SSDEEP 768:crv+4UNbdH3Cot+LeSFOUU+tzX4fouOToPvB2thtA9VAB0eVH1SlX:cbsbh3n2snnwthttOEH1Y
TLSH
T12D03CF72A4AC8A33EDE6D2A8710B75472FF4915396D00BC499DE2B4D0A9B9DE030FD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30f31f7e-2d77-44a3-a229-242d6096a805.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\30f31f7e-2d77-44a3-a229-242d6096a805.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download