1b826190760a6f7178319673989b8ee03fd4fe886e66d60136ef5fa236df3c0b

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260907-w1sefaae73
SHA256 1b826190760a6f7178319673989b8ee03fd4fe886e66d60136ef5fa236df3c0b
MD5 cf324b956dea8f0ac4ac6e4aa7c2e3c0
SHA1 9b0dc078ace01138250492bd76e5d37649d60474
SHA512 8c52eb5706f520b65c7746a0cfebea5a2f2ac8e815ee6c992026de9d9c04cf330fa5c9f25744995161343aca977a524185d17abb41e76a379778048cf7893550
TLSH
T1FD51835F2BF314296023A0B41FEE93483AB49407914BCD703EECA208CFA4B854963BDC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5940	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332791532407315"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{0C40F5C0-5469-4327-A497-887657FCB928}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5240	msedge.exe
5240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2592 wrote to memory of 4340	2592	msedge.exe	88
PID 2592 wrote to memory of 3840	2592	msedge.exe	90
PID 2592 wrote to memory of 5940	2592	msedge.exe	91
PID 2592 wrote to memory of 3840	2592	msedge.exe	90
PID 2592 wrote to memory of 3840	2592	msedge.exe	90
PID 2592 wrote to memory of 1320	2592	msedge.exe	92
PID 2592 wrote to memory of 1320	2592	msedge.exe	92
PID 2592 wrote to memory of 2880	2592	msedge.exe	94
PID 2592 wrote to memory of 2880	2592	msedge.exe	94
PID 2592 wrote to memory of 2880	2592	msedge.exe	94
PID 2592 wrote to memory of 4452	2592	msedge.exe	95
PID 2592 wrote to memory of 4452	2592	msedge.exe	95
PID 2592 wrote to memory of 4452	2592	msedge.exe	95
PID 2592 wrote to memory of 2420	2592	msedge.exe	96
PID 2592 wrote to memory of 2420	2592	msedge.exe	96
PID 2592 wrote to memory of 2420	2592	msedge.exe	96
PID 2592 wrote to memory of 4196	2592	msedge.exe	97
PID 2592 wrote to memory of 4196	2592	msedge.exe	97
PID 2592 wrote to memory of 4196	2592	msedge.exe	97
PID 2592 wrote to memory of 1988	2592	msedge.exe	98
PID 2592 wrote to memory of 1988	2592	msedge.exe	98
PID 2592 wrote to memory of 1988	2592	msedge.exe	98
PID 2592 wrote to memory of 604	2592	msedge.exe	101
PID 2592 wrote to memory of 416	2592	msedge.exe	100
PID 2592 wrote to memory of 604	2592	msedge.exe	101
PID 2592 wrote to memory of 416	2592	msedge.exe	100
PID 2592 wrote to memory of 2648	2592	msedge.exe	103
PID 2592 wrote to memory of 256	2592	msedge.exe	107
PID 2592 wrote to memory of 1864	2592	msedge.exe	108
PID 2592 wrote to memory of 3104	2592	msedge.exe	109
PID 2592 wrote to memory of 5688	2592	msedge.exe	110
PID 2592 wrote to memory of 5688	2592	msedge.exe	110
PID 2592 wrote to memory of 5240	2592	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x270,0x7ff806d1c188,0x7ff806d1c194,0x7ff806d1c1a0
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,6909758774725767256,5547492075800708461,262144 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,16907231902094747994,13242801315968358787,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,11753565728401988665,4883267618590546420,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:13
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,7798563697160077282,6142946158925018296,2097152 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,18274786203016067546,10143314295737237071,2097152 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,17342317546172835743,13130577686304629105,2097152 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,4198292637632664568,12911994769253849380,2097152 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3392,i,7194359349492219098,13300582003373763693,2097152 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,7087298986019848491,10532699210946559949,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,13586528594862018499,13699140777052142762,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,17054413169464631756,10958306367739934320,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,17054413169464631756,10958306367739934320,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,6564519244860386944,14725664385298053228,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,9188406973324890185,6809900763451337347,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,18064736856363170470,9293565938385215428,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,13223301812767377216,1862267047264907380,524288 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6968,i,16693967712235399052,9585758682095958492,262144 --field-trial-handle=2760,i,2870886988625730218,471202669240569562,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 5951a03d6d5c7d970058998b9acd969a995d0d426e48b44a33dd641533fc04e0
MD5 d1035895d7c33a5d0abbf6edab41c7c9
SHA1 79b35f5b77d3cc00d34b98efe86f8fffe62622b2
SHA512 acb98b868ecd80b61e86867654aff3291e796492dd1ff724b1bf3f451bb455ef1994502bb717393e5f822ff5de09e26a70c6fbfc86917209bc1c890b4e075aba
TLSH
T142317F708F3426FFDBAF45B617E2468C7371885B37032E102764AEB08A85377201001D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a5c32ada4ea5ec54c9fbda71c2c817269b67af33f2958acf23003fd48addac0a
MD5 a4434dcf855e34f4312f27a41cf7c07d
SHA1 a6f206fe6fc83fa06b34417907a684e09cc0c24c
SHA512 b0d770d6f29c8fee6d38f50bee511b50b477204b735564498b8ceaf2109b458310f5c86dfad87415d71f3874c647313b3578389a3738d2f9689e5792cd47c88c
TLSH
T1232179F743B4967E9A11D2F0EA08AE1FCE6D0412431C7CA685E46D2793F3472E081A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d9565bb16f6b814484fd74c63ed5689398dbc9ca646d90189130de232fea12ac
MD5 aba04cdcbebb7eadb858a4e53630f3ed
SHA1 fddc154ccec476cd3793c7c7fe6eea989bbcd010
SHA512 6ee03d8a745e1bfa45ff5d69ec0dbbc1bcf65b6473caba3466577b79911eb00b65f1b7c9a0c6c3da3ebedd1a7cb8a684f0fbd88427433dfb3f161eafb19e43c1
SSDEEP 192:sxRerbQ/fpslgwGFzoA8p4e/g6+WNIYo5jCY0G4IgQJ:sxRePQ/fpslgpo//5IgH0
TLSH
T1EF32A6166968A93B8CC7E21DBB65BF53D2F95032A1D52E48F6FC861C04E7ADD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1a4a02478c3e814a949e8ed51c9ec746e9f5a3d28421ca6911fd61af950ae03f
MD5 8a0d6ba99713e68efb30f089a724e45b
SHA1 ce1a77d78a65186c32c149a4676540f682cc30ef
SHA512 8a3f06c936b54f0a463d065a1d23171fab9f0c08f8802ecee24cfa6e8b90145cb1b90f1f6286bedbaf0540b67f2e10b828b75aafb8004d29b57bedb9228376ab
SSDEEP 192:sxR1rbQ/fpsBnwGFzoA8p4e/g6+WNIYoXZIY0G4IgDaJ:sxR1PQ/fpsBnpo//5IuHq
TLSH
T10F42B6166968A93B8CC7E21DBB65BF53E2F9503261942F48B7FC861C05E7ADD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 86baf842d0668a5a2cd795ff7c389e66db51bf3fc9aa37152dfe5d02a15fdb78
MD5 54c8b912525cb34eb4959abdab30d826
SHA1 1417bdb0d85e87488eb96fe828efd0e4ce06bce5
SHA512 1b01fec2fe1d4385d89d33725962d4cc0cec0ffb75f42e596fa2307ed6e094f59bf12433f450cc76cb0eb39169ceb55d229e4fe209397304c83fad758a4505e4
SSDEEP 192:sxR1rbQ/fpsBgwGFzoA8p4e/g6+WNIYo5NIY0G4IgDIJ:sxR1PQ/fpsBgpo//5IEHg
TLSH
T14442A6166968A93B8CC7E21DBB65BF53D2F95032A1D42F48B6FC861C05E7ADD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5a0e5fd8edc395bd32808cbd074a997f9cea4626d7bc00cc49a9fa6ec933953d
MD5 a1429a94efa3cf72a63457366fb31e9b
SHA1 89d6ed0d4373e71fb937bac7a6a0c0da51a7d14a
SHA512 ef661a0144150dc4aa3d532bafa1d23c07dc9e7f462b130ff0725a08e15eda024e2a23eb7b466eac32b1cfaa23886b31270b89b27ccc3acd9b8fecf5a8c2038f
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXZro98O:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VN
TLSH
T178B2EC2B640DCBBE9F800A9DDC196FDB6D9802C79B588D4047FE994C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a61feacf12739f3b702cc525435d8de84f55ea0a0e05f914237a1190ad51a924
MD5 b9d5d8c4b595745c8fda11caf6e97641
SHA1 eae90689f15713e1d0dcaf931704518f71fdfe61
SHA512 e798ac3dd7966919549eb5bd998fd085ab9b0f266aac6cbd667aa54f3bfa99f082f85dee6fe0f1892c09b4c0e7bb1bb2aad0c1d4133e3941b8c4bf53c26a4343
SSDEEP 96:KRENE8EzEnE9EXErE/WEzEoEWgEvE/K4EugERE/cEVEtEgEDEbEUHEuEDESEOEoL:CENE8EzEnE9EXErE+EzEoEHEvEFEugEE
TLSH
T105A10750B03B4381397DB60CC8B88D5E81D27892345DA5AB7B680265CF2FE538EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a02e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a02e0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 cea1f49b585204b6eb0a3469da02e347adf283be2472a48bd56a5210b21df27c
MD5 02f5d87948b244d57af544172e6e0029
SHA1 db2d6c06276b4fa9fd8741a7b4a801be1a71a490
SHA512 8e0ccf650a7a6a1d39cdef5cf5397077f74bc038cb186b7d155e9d47b98dbb47026633fcbc92c6c5adaf129f9483b15c654437462e04fad44d04399c62504c0b
SSDEEP 768:6z3mK/TBOWZAGTONXyer1IRCzni9M/cTRgJo:6z3TFSIqnRcTRgJo
TLSH
T181F2BE31E8999E234CE6E3D6B1073353BEF9506785C44A90ADEE6F1E05C7A5E030B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 678b9707439832fe5a7d8de8b6e053861947e2a0840e06c2c14fd4ca90e317cc
MD5 48fccea6394a841e1f2aa8c91dc3c93c
SHA1 6659fc234ff311e5ba1179021efaf383534daf12
SHA512 2758de7fde6c6555a75bcabe527586539d47d3bd1a987094831210929a73d09a4f6cd79c8c385b860c6085e06726b78cf0263bfa45d824f6ff3ecefed8b22690
SSDEEP 768:hrv+4UNbdz3N8/TBOWZAPONXyer1IRCzniBIeVH1SK7:hbsbV3uCSIqnrEH1l
TLSH
T1E603BF32E4A89E338DE2A3C6B14773437FB85057C6840B90EDEA2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7a20eaab72a75d24ea790f14938cc9904f2b09e4289d75d2966f6a871b26e67d
MD5 072df68ce09f071747ac415c7d64145f
SHA1 85f6b11c85fbb28f9eeb6c0d6385cb8f474279a8
SHA512 a6730b79cbc80b23f89bc1a88e40891ae9df06af4aa7244483bb0ea3a30e8c92869129615f826d09d7f4321e0e672e016ed3929fdf970489e754776ccbfc9234
SSDEEP 768:2z33K/TBOWZAGTONXyer1IRCzni9M/cTRgJo:2z3aFSIqnRcTRgJo
TLSH
T1EBF2AE31E8999E234CE6E3D6B1077343BEF9506795C44A90ADEE6F1E05C7A5E030B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 32354de44e7d1e54809f841530a78055a790526bfe143bb0dbaf1c78309c4f72
MD5 8fb63be45bd0750824aad36513e015b1
SHA1 e84e461a85cd03ed44526cfd1aa6738e8a91595e
SHA512 9406607132629870ab415c952ac16deecd320533b0cd0d9b48ea5dfc78b5b1e3a488a542a8a16c55b4eddadd74325adb360a16b1a03321132e3d684940e49db9
SSDEEP 768:Srv+4UNbdA3NK/TBOWZAGTONXyer1IRCzni9M/P:Sbsbi3gFSIqnRP
TLSH
T13203AE31E5A9AE334DE2A2D6B10777437FB8105785C40B90EDEA2F8E028B59E130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 48e11227b7c03bd5c0664257a50c4b5238644cde03edc0f7748890b2ef4aef4a
MD5 d2cff9a8be23adc389dd5469d6f6d05c
SHA1 b2b008397ac08be6a1c6a85cce68c41a6d3250c5
SHA512 34da5b89da140702611f775715e8adc657fbf525dbccf877228b11f4418cdf82312c0750c667213f3f6cd0fc07b40ae1b804a393698ef4098564428f6de53be4
SSDEEP 768:3rv+4UNbdA3NK/TBOWZAGTONXyer1IRCzni9M/P:3bsbi3gFSIqnRP
TLSH
T11903AE31E5A9AE334DE2A2D6B10777437FB8105785C40790EDEA2F8E028B5AE130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e5c6953c2f9ca9d65ba33381e4b487fc7756081fc0713ae4d53f7136d9e5690d
MD5 033f8b12e00c0fad2d057203939bf609
SHA1 47f3f47afd1253e9e029abd6ef49857a145e8953
SHA512 f60fdce853815850ad06f427a6f8b3c4aab1213c878b98cc8c7c543f9a1410ae934055f43aa1764dd3827d031b203cca18616e2d28f870c7a15c9c2c83457de8
SSDEEP 768:7FNK3jwgCK/TBOWZAG9ONXyer1IRCzni9M/cTRgJo:rK3lTSIqnRcTRgJo
TLSH
T1FAF2AE32D8D9DE374DF6D3D6B50A3303AEF950A7C5849A90AADE6F1E018769D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d0a57bda6d4bc0367851c04968b9debfd47a7f3030876b1a9468ec73b442d753
MD5 7c2d074d7dd88cbabbaec576f7da9c36
SHA1 c7e0bee6b5b4e58ce2ef0aece9fc6e136503be20
SHA512 73d5c7adb57f25049ca93c00294a7d63b725417541b90d1ee11989d84ec1361c64abf34a8b7103843334742d01032cc8b4019aafd201fc350977e3c9909ec4a5
SSDEEP 768:2rv+4UNbdz3lE/TBOWZAGaONXyer1IRCzniwM/eVH1SK7:2bsbV36YSIqnmEH1l
TLSH
T10003CF32E0A89E334DE2A3D6B14772437FB85157C6840B90EDDA2F8E069B59E130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70f0791f-9e80-487b-8fb0-4a8131088094.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70f0791f-9e80-487b-8fb0-4a8131088094.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download