dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/09/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260903-pm2bvsgp8y
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5744	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329120637825675"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{25DF2C7E-3988-46B4-81A0-1EA583506FF4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5680 wrote to memory of 4344	5680	msedge.exe	88
PID 5680 wrote to memory of 5744	5680	msedge.exe	90
PID 5680 wrote to memory of 3116	5680	msedge.exe	91
PID 5680 wrote to memory of 3620	5680	msedge.exe	92
PID 5680 wrote to memory of 3116	5680	msedge.exe	91
PID 5680 wrote to memory of 3116	5680	msedge.exe	91
PID 5680 wrote to memory of 3620	5680	msedge.exe	92
PID 5680 wrote to memory of 1636	5680	msedge.exe	94
PID 5680 wrote to memory of 1636	5680	msedge.exe	94
PID 5680 wrote to memory of 4264	5680	msedge.exe	95
PID 5680 wrote to memory of 1636	5680	msedge.exe	94
PID 5680 wrote to memory of 4264	5680	msedge.exe	95
PID 5680 wrote to memory of 4264	5680	msedge.exe	95
PID 5680 wrote to memory of 2532	5680	msedge.exe	97
PID 5680 wrote to memory of 3264	5680	msedge.exe	96
PID 5680 wrote to memory of 2532	5680	msedge.exe	97
PID 5680 wrote to memory of 2532	5680	msedge.exe	97
PID 5680 wrote to memory of 3264	5680	msedge.exe	96
PID 5680 wrote to memory of 3264	5680	msedge.exe	96
PID 5680 wrote to memory of 3244	5680	msedge.exe	99
PID 5680 wrote to memory of 1968	5680	msedge.exe	100
PID 5680 wrote to memory of 3244	5680	msedge.exe	99
PID 5680 wrote to memory of 1968	5680	msedge.exe	100
PID 5680 wrote to memory of 4856	5680	msedge.exe	102
PID 5680 wrote to memory of 948	5680	msedge.exe	106
PID 5680 wrote to memory of 5088	5680	msedge.exe	107
PID 5680 wrote to memory of 6092	5680	msedge.exe	108
PID 5680 wrote to memory of 3016	5680	msedge.exe	109
PID 5680 wrote to memory of 3016	5680	msedge.exe	109
PID 5680 wrote to memory of 1536	5680	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ff9042fc188,0x7ff9042fc194,0x7ff9042fc1a0
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,11494775997719390328,8851450254372783174,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,9249358790266668520,10891158807752122817,262144 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,2126984527517607506,17047896738880351087,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:13
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,11627805981670272903,1866154066119914091,2097152 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,6181860374316613678,17862265387876472282,2097152 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,14570784607699664082,11784270645624059688,2097152 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,7768223206174753180,5635037769605524506,2097152 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:9
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,18272334425828765831,17906240972395709241,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,16975289299584362771,1707522809697664561,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,8511710778180180757,10482594217976068716,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,8511710778180180757,10482594217976068716,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,9522994893129333585,6723944355133708985,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,14133253411065146298,7515816089101665375,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,11322753842491545681,16609259046315215550,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,3478437823695170886,5301754370731129656,524288 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6232,i,189137459247000695,7704741126377573822,262144 --field-trial-handle=2644,i,6372393329740804471,14849173793560089295,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3f92d6bbe80f20f7f47b87c089c78a881545da1e69fadb53dd3f9fb9ff856f37
MD5 403929a8ae0442212719f7f820e3a2f9
SHA1 2a890c23e23bf4cbda477a2f0e896bfd012c89d1
SHA512 c08b71e97268e7b0532dbe2533126de8ace9d53291bd09b4da3f03a8cdc7a0524a0a08f9b09f237dbc63ae51cfae8f854211816b107582e0f575f6aae7f2a4f4
TLSH
T19C512AF123E21AC2D32C69B697D28CD836F5A86F04832E107C94BFF09986F0791E1857
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597594.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597594.TMP
Size 3KB
SHA256 55577e006189fd24ed7e416ba815a7aa6e8e8f2e2a5d80d355aa4f4f0c198271
MD5 dce4e47551d112265a380e849f894660
SHA1 3b23fd189cf3618731e742b65b0bb66828c26114
SHA512 0abe2da15eec87efe2fa3e076d396914709611d41db185a0332b95a1d7a0310931b077e0fd264d1653c4b174c81d4173eefb1967a12df7f20bd7a43b9eb98b7d
TLSH
T1895129F123E21AC2D32C69B697928CD836E5A86F44831E107C94BFF05986F0791E1857
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5bdf101e20332fd788800d312ee544c81c54d096960b3fcedca6dc6040707edf
MD5 3b6b1e4be34d8f685612201521512267
SHA1 fa658dc4f3ae737c9b83b189b77404cba39b1763
SHA512 985371e1c7ed714d8fd75d6bacf7827e2b238faedb1231dccebff850ed02ae6949c93c61c16b400b79b2cfbde8b042ddc990aab25f3652e601c2175b30943ecf
TLSH
T17231AEF783B4866E9A0196F0AA14AE1FCE2C0512431C786585E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2882b73e248df5fe2e3b1bbdd90c31228b8919517ea6870e425a85a4cc311220
MD5 e11c3b4fb0e7f25aeb54c8d9a2c1bf64
SHA1 62d7390201f4f76b0fd12decbcd339e114f2f7a9
SHA512 51b9a7de927d6f11da962b22b5ecbc4948b184a6c43f33db294c5dd56cd26fe529dc4e737a94c2dabc6863e64c3c9a8e05e542272c022b58f48e0e1fd8eacd27
SSDEEP 192:sxRrR/yM/jK1Ml8UQPbp/fmszGprQ5PzoA8pe4/g6+WNIYn8ZvhxGVIgDmJ:sxRrBqzp/fmszGxH/5ITTiW
TLSH
T13762D715A624AD7BCCDBE209FA417F53D6F95473A1941E44AAFC8B0C00E7ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a7af2eec9623f86b190f55fb137e848f5c0db1843a48692900d88bbf8f2ef54
MD5 03797d2ccf6f7eaf2b8b0c5c90231e77
SHA1 29bc3b3c87ed64bc3162b7d316c5cf97b89196d3
SHA512 65efb431a57056a3b8bfeaee670e1bada83659fd35209947a6fa5a617ad8a74471facb61be0a24cfa5ac7bb57369851e9d209ff222ac781505d1031aa1267b43
SSDEEP 192:sxRrR/yM/jK1Ml8wbp/fmsz5prQ5PzoA8p44/g6+WNIYn8UbhxGVIgD0J:sxRrBlp/fmsz5xl/5ITMis
TLSH
T1E452E815A6246D7BCCDBD209FA457F93D6F85473A2901E44AAFC8B0C00E6ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a556ac450781731c9a1daa6ae960b5e1a09f6357cf955511c193006df77365dc
MD5 80577ca526f16b24730adf0a0d77dc0f
SHA1 0fb7263107e798d8e3c8dd10d008902d6cb1b3e9
SHA512 3000ad83243d6f81ca04660a8c0ceb3a4d49e62fc5bae3ef0efbb61d8749e4c9b7634e7f341a9a0973a6a75d60a6cba20d33ef02f37660800fca540be9ae1df6
SSDEEP 192:sxRgR/yM/jK1Ml8wbp/fmsO5prQ5PzoA8p44/g6+WNIYn8UbhxGVIgIJ:sxRgBlp/fmsO5xl/5ITMis
TLSH
T14852E915A6346D3BCCDBD209FA557F53D6F85473A2901E44AAFC8A0C00E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4108ba3b3194d666a193d3de031f027661873bc6d415d09c1ad2c97842a79140
MD5 bd106777d83e983ee3d0cf491e1ec5d8
SHA1 ce3e5bc4cd1b3c93bd4eed4412737eb744923066
SHA512 224e1f09d3cb65b5ba3c8781ac8f53d256706eb661f70232342e7eb6753d5c83d0bfefc558b5e11490aa89fea612cbbd13d531e9fb931de3895173d7bf0c3ea2
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YcroSh805T:wGedp6WgoufDMu1jatVYHuh
TLSH
T13DC21C2B640CC77E4F844EADEC29EED76DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 667d93e83e9d0b3adc20321c70df151fd64fb7fb0b4251e8a70715cb97226d6e
MD5 28df1c7723ecec2f03d5b2a5eebd7e38
SHA1 7b1f83fee58afd8e62ef075337fe4b1ef04353af
SHA512 824a0de1a3ea87675b6b60ef201a288e721268293e0c3c327f69b1f86e365f126eb669c2fd6280880440c5cbb52c1451b2b98ca0f7ed4d192686b26f69443208
SSDEEP 96:KR4i4n4O4i4U404k4iW4s454Rg4S4iK44Hg4I4ic4y464h4A4i4LH4/4o4N4J4/u:Cr0xFzJZQNi5tPUgD6LTqN5eHyX+SkEd
TLSH
T12991A981703A02543C3DB90D95F59D5FE68275A23409F6AB37A801E61F27E078EFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

3f9ee1f1-31b2-406b-9cb2-842fadd2d2c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3f9ee1f1-31b2-406b-9cb2-842fadd2d2c9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 819d4d3d45db1214d47e621b692eaf602df7d74af0dc391df73e248a57ec4510
MD5 6f608bf6ad5a090e860364b0e2b7c672
SHA1 99bb10492a96ba008950833e2e0a182a2008af76
SHA512 7b1d3f26c957c6d0942c70c97b5aa0b70431f40bc168dbdbdb775d06aeee5e6af4ac9d019dcc947bc63cd580c2e62760572774b3ae47e3e85ea4d876e22d5e4f
SSDEEP 768:Zrv+4UNbdX3ItDZIO0ONzc4ReyIsPWMgW:ZbsbR3mtc44bseMgW
TLSH
T16003BE32F8289973ECF65682F50736537EF4521B81C929A8C5DD2F8C0A8B5DE235B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b45b4feaf79adfe5c80d06ca88df8008ee7d45fb5dd7ee6d1fe401584e84351b
MD5 026cc5ccd492a7b37f09aa5ce6934531
SHA1 4a4ed82b398974563603680c2dc68eac0a7d7cd1
SHA512 a7f416a19f2e99481ce1cd74aa1bc6f56c7705c11baada9fdd284ffe4c2180375a00afa17d54c8477fc2c828b241adb2f24616ce85af7e07c959382d0f69755c
SSDEEP 384:nZcIU38N1+rYA+DvJDZNfNoXOVSUUA8BETRzcoXfK86sfxEZxxsIj4lBWla+VY5b:PU3WtDZIO0ONzc4ReyIsPWMgR4
TLSH
T1C1F2BE32AC249CA7ACFAA782FA073653BDF4521781DC2D94C5DD6F0C09876AD135B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 f2ef27dd9f3e3d705a840752abd7c5e854f3f99a21dff62be7574bd53813762f
MD5 570b0d91e296ab885e497bfc8521a67d
SHA1 a2b040854741c73e3403051183d7a20c7acbc3dd
SHA512 22a74f67688a36976f8ae610ce21e2c74cd5d63dbd4115ebbb2c93166a818fed14dd805a2cffbf9c871301f7f8e0305b4c0a52e5601a019b0c216be346ef8212
SSDEEP 768:6rv+4UNbdX3ktDZIO0ENzc4ReyIsPWeVH1S5F:6bsbR3otc44bseEH1W
TLSH
T16613CF32E8289973ACFA6A86F54736537EF8521781881ED4C8DD5F4C0A8B4ED135F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 31045e6ba3033c837f4a4f418c186793742f327f0eba7741d7df6c0477d4cd2b
MD5 0ea8ad00d6f4ebb277553dd142e0bebc
SHA1 4706181d82db08f8b825fdef3bbc777330747aea
SHA512 be1b9c728321c62527bbc427394e8a1628d2da88971aba58799e8136c8e5ed536d30e3eb1f3bedeb2ea6cf0b70fa115b04429f03f119dfc69f2902255b0389ab
SSDEEP 384:XiFiZcIu38NP8TUNTUlIl+rYA+DvJDZNfNoXOVSUUA8JETRzcoXfK86sfxEZxxsp:SFQu3owgdtDZIO0ONzc4ReyIsPWMgR4
TLSH
T1D4F29D33AC54C9BBECBA9B82FA0B3242ADF54167C1D969A4D6DD6F0C05472DD134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2a007577c7da2b4c66e1db784e53c8b8c89628d952bf0f6b183ebc05034b29af
MD5 21fe3032ca164682c53d9941703552f8
SHA1 0e55f5a9135caafbf4f6c27e3b5fd0d4c5e3e581
SHA512 93630a868a65ade521f39aa5243e6d4e2c44ec241b303eefa830f071cbcdbd4a2b6fd2919d3da0c0e69869c0d07cf9da36068f19d421444de516add1190b6bac
SSDEEP 768:6rv+4UNbds3SGDZIO0ENzc4ReyIsXmeVH1S5D:6bsbS3Rtc44bsWEH1Y
TLSH
T18703CF32A8388A77ACF66686B54776537EF8912B82981ED0C5DE2F4C064B1DD134B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 3d424ad7534e97c3d65be4913fdc6b1ccb1a177575eb1b5260ebf43e4ecfda38
MD5 962b8a415ebc4f36a8d0e17c286a54b1
SHA1 3c7a68235e37f075707b8e01f2809c732cb8e437
SHA512 8afa90e27f672949743a92c38743f257dc13fec2e45ed6b8e7e8189c7ab60417d5f068b197bd7466e07bef3ac811355a50ec52d36febb04e8715ff3b67547dd3
SSDEEP 768:yrv+4UNbds3eTDZIO0CNzc4ReyIs2WeVH1S5D:ybsbS3qtc44bsREH1Y
TLSH
T14A03CF32E8289973ACF66686F54776537EF9921782881ED4C8DE1F4C0A4B4DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74fa9635-397f-4186-bc91-69c967a3014d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\74fa9635-397f-4186-bc91-69c967a3014d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download