9befc20bae5ae7349b1b9be3a086d4f89914741331377f6358b44a6fdc44fa2a

Analysis

max time kernel
148s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/09/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9befc20bae5ae7349b1b9be3a086d4f89914741331377f6358b44a6fdc44fa2a.html
Size 11KB
Sample260908-3fe2yaaa55
SHA256 9befc20bae5ae7349b1b9be3a086d4f89914741331377f6358b44a6fdc44fa2a
MD5 9f3b0194e420b7eca642b52bc660e869
SHA1 06ac0770dfcaa075d78bde20bd626a59fa6aa46e
SHA512 c13a69b29f6de1ad526713291462691d7f6fa54a94fa4ff158255f3fbe35a12303a0f74718b667744eea3634071e5c20292a8cb11abdb5785d786d34f73414a8
SSDEEP 192:6dEBVXEl1+PK8LYsdBlo6ZlV9uT9cLFLeyadZxux7PuYo6snricuKauYM:J7XEl1+7EsqgVIT9eaZxuBuL62CM
TLSH
T10A32CA2C79A6AA312563207A5B9BB309B6B290175044DC807E9DC6786FB0EB74913BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333836405451654"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{846C86B9-F807-48FE-9C5E-73F86F0C98E7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3380	msedge.exe
3380	msedge.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe
5812	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5812 wrote to memory of 3216	5812	msedge.exe	89
PID 5812 wrote to memory of 624	5812	msedge.exe	90
PID 5812 wrote to memory of 4252	5812	msedge.exe	91
PID 5812 wrote to memory of 624	5812	msedge.exe	90
PID 5812 wrote to memory of 624	5812	msedge.exe	90
PID 5812 wrote to memory of 3548	5812	msedge.exe	92
PID 5812 wrote to memory of 3548	5812	msedge.exe	92
PID 5812 wrote to memory of 5716	5812	msedge.exe	94
PID 5812 wrote to memory of 2692	5812	msedge.exe	95
PID 5812 wrote to memory of 5716	5812	msedge.exe	94
PID 5812 wrote to memory of 5716	5812	msedge.exe	94
PID 5812 wrote to memory of 2692	5812	msedge.exe	95
PID 5812 wrote to memory of 2692	5812	msedge.exe	95
PID 5812 wrote to memory of 5696	5812	msedge.exe	96
PID 5812 wrote to memory of 5696	5812	msedge.exe	96
PID 5812 wrote to memory of 5696	5812	msedge.exe	96
PID 5812 wrote to memory of 5648	5812	msedge.exe	97
PID 5812 wrote to memory of 5648	5812	msedge.exe	97
PID 5812 wrote to memory of 5648	5812	msedge.exe	97
PID 5812 wrote to memory of 3384	5812	msedge.exe	99
PID 5812 wrote to memory of 5412	5812	msedge.exe	100
PID 5812 wrote to memory of 3384	5812	msedge.exe	99
PID 5812 wrote to memory of 5412	5812	msedge.exe	100
PID 5812 wrote to memory of 1752	5812	msedge.exe	102
PID 5812 wrote to memory of 3740	5812	msedge.exe	106
PID 5812 wrote to memory of 3424	5812	msedge.exe	107
PID 5812 wrote to memory of 5080	5812	msedge.exe	108
PID 5812 wrote to memory of 1984	5812	msedge.exe	109
PID 5812 wrote to memory of 1984	5812	msedge.exe	109
PID 5812 wrote to memory of 3380	5812	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\9befc20bae5ae7349b1b9be3a086d4f89914741331377f6358b44a6fdc44fa2a.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc6de9c188,0x7ffc6de9c194,0x7ffc6de9c1a0
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,17355008133396583870,2984036670427774856,262144 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:2
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,4603918340401956669,17312946961792447729,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,14145030644989405606,4468588114610671667,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:13
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,18296624316551687830,8475194815732858591,2097152 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,12730785552766714079,1968039427496847462,2097152 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,16909173867302809946,11246170452351717131,2097152 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,9763270855550545890,698739131843527048,2097152 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:9
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9869912854226091357,7604403238339800576,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,6069528087735214044,16868570282172787202,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,12270702577444093906,3513925384961682297,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,12270702577444093906,3513925384961682297,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,3852533996708231379,12124317417493161851,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:14
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,4007204620808768372,17484295813033777185,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,15466676917819390464,13155373845718903695,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,10869382987913811600,4135285946609446425,524288 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6820,i,6400729984792947646,12663958137063863957,262144 --field-trial-handle=2532,i,9462185936891556558,7686710875369441526,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2b697eddcb2b07f8539bfb3652953b0a60b5fe79caaa7bafd3e57283f337ae14
MD5 941e2ecafe7396f8e97c401afcc3b3af
SHA1 31446a30ef45517406a817809c058cb4d0f8977b
SHA512 222c47ab976196c3e2f6ff28796c492c670705750f2050ae0b523f8bda0f71b8f87e5338b508def4ce9eccd960b940f81d1f8e67bc05678f8080d5f069521c97
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 cd09797650729399f63521b963f6dc4bcd224f82011c5c9ab0a36a73835e0389
MD5 a6e1bdac67d28f57b6f485abf029d495
SHA1 0df62712d0014a473f041494811b46b2d940eb3e
SHA512 c089017c6c7ba5813e735e07a7e8c753493f34166fb67f5cf99b14b00b1b30fc7a9c0beb46c0006917ac1b577d9dc6b5c10b1921c6654000521da97ef56f49c0
TLSH
T13A41C87063EA29EADB6C4177C7D07BAA32F8C4A946036E61C0482D74C90EF9C77D0467
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 456775e242624f1d8d8a479ade25962a95c4472fc061055499a160d2505e2285
MD5 73e94c11d9be83a91c16bb38642875cc
SHA1 b9df34dd5fe502621475dcd16cf5384f5ee55904
SHA512 b348e959827d104e31ac697d5352ff9250cb3c2ba226bbb77da41dcad0a80eeb9403a5bfea7c963436ae76f02cb3053a7e552d93375c134f96a3a1a4247a5293
TLSH
T12A8181FB83E4477E891192F09A146E1FCD1D1517436C3C5989F4AE2BA3F24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 970abdec22ebe36c1f55bdc7a55793300db122ddd6f886161cffa461b9b95e5a
MD5 a3b0af0e663f99e60491014b1a11ee3a
SHA1 719fa20a62d6045933400a25cc90eddec7400d3f
SHA512 2b3f9a730fea75f7561efddfb6f0425ca39053d552e0234bac62baf020a7b4c794d3d3269eee3cf56844cf26537fe6ba755465ae155a055505a0ec02cf77842e
SSDEEP 192:sxRcRcyM/jK1Ml8wby/f7sYZSWKrjDfzoA8p4T/g6+WNIYE/KqKzGVHIgIJ:sxRcily/f7s4SWna/5Ipvs
TLSH
T15E52D905A5249D7BCCDBD20DFA917F53D6F95533A1905E44AAFCCA1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2f55212f02512a8cd53fb1330d2e1992f0fb947fa53de2174c3c3a946627a912
MD5 d6bbe9b8071096f11c0095466870d2fd
SHA1 e400af9243f8f4a92752e11a95a8418d249c70c6
SHA512 35164ab4e66590ee4cb9cc642c7541a7496c0c86499bdc3719173ce4514bb5ca6a7f829c15c55c5040076a0498f2b4a7cb27ab51d683b1339c20bd93aaf2329e
SSDEEP 192:sxR7RcyM/jK1Ml8UQ4by/f7sDZS6KrjDfzoA8peT/g6+WNIYEhs7KzGVHIgDQJ:sxR7Kq2y/f7s1S6n4/5IMvw
TLSH
T15662E809A9249D77CCDBD20DFA917F53D6F95533A1901E44AAFCCA0C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fc4fb4e0f7b0f61c9932f16d90f22c13afa81911a10e39d8b33c3db723287b35
MD5 9b3f9fb0fa15c998f545ab774ee7e798
SHA1 0b6cffa390ab938ff3d54d7f61437530da0a0544
SHA512 8fa5b5e861624d1ef0a7dbd8e9c1545d79a644a7f3d49a305dbd556153cd2a8650eedb201a0cfb0390c5d9b0886c2b200b6b365e8c339a93a1b4715b21f5d658
SSDEEP 192:sxR7RcyM/jK1Ml8wby/f7sDZSWKrjDfzoA8p4T/g6+WNIYE/KqKzGVHIgDqJ:sxR7ily/f7s1SWna/5IpvC
TLSH
T19E62C805A5249D7BCCDBD20DFA917F53D6F95533A1905E44AAFCCA1C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 eb77e276f051d838c3be2d08771e2b192b74c6b772e2d8b9c4010bd66337b26e
MD5 2ae383734dd82061fa9fee0a75a65e5d
SHA1 36bca0400c0fafcf1492a6e67dbd00b84939e0d3
SHA512 d5e89beef4e804c34944e243464541ff468828540eef9ae8e9569e28a1c5ddb2cdd289b6bcd7bebb2badfa59d9f253cc129265b9afa8774a701df23c29b086ba
SSDEEP 192:sxR7RcyM/jK1Ml8wby/f7sDZS6KrjDfzoA8peT/g6+WNIYEhs7KzGVHIgDQJ:sxR7Kly/f7s1S6n4/5IMvw
TLSH
T15162D809A5249D77CCDBD20DFA917F53D6F95533A1905E44AAFCCA1C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9907e330b9d8d646ab07b400de2b3fd26b6d1a603a1e267dfe000428132f36da
MD5 6e682033a19a71413ae8610d0f5912ae
SHA1 ebd24f2599399d758fd2538e45330a5ba856be1f
SHA512 d5164b2f7ff808d1c76940379326c8082e73abc802bb8b5d49296477af3ede2a92aa86546af14bebe34da6bf13b767f282715d659176551682d42384310bdd23
SSDEEP 768:0hiiBaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsOV8yroj6k:0hiiBaWgH7f3Qu1jaNI8pl
TLSH
T158C21B3B640CCB7E4F844EADEC25AED66DD801CB9B984D9447EA884C03C77EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fbd16c67946df23ba182066e96e8fc76d300efd53db971ea6f9e0d624e74ab59
MD5 8d794ea4436819eb2377527c20ed5b6c
SHA1 aa934cd5d3ab41c73da2bca208029666ca424816
SHA512 43628658ae0296c3b965f5a87d5a2084eaaf123a8d53c9aff16a82a3fbb28bee43ce7bcdd33aa90418a11cd326194a60f61829850c8a34d58e18f55754fbf5df
SSDEEP 96:KRJGXThDXzWnUCgbzK4qgVzcZRsPXQH0VAE+imkWivPgMkK4BgGkckEP+XowKR6x:CJGXThDXinUDbpqgVgZRsPXQH0VAE+iR
TLSH
T18A91BF5270FA1240383D6A1C81F8891F96D275E23054EB6F3BA921A61B67E5E4DFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e8aaf510-bb44-4bff-813a-80d4b581e9ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e8aaf510-bb44-4bff-813a-80d4b581e9ab.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7196785c214de68b166c12cd7c0a463eb21f7537c4f4fcd9c28f00f28160c2f5
MD5 92070fb507d5d1bbfad1a878cfa221fc
SHA1 ccce46b1a7e29a0e0d5031d4c07d5b909389ba7d
SHA512 b3d8f808de980f388ff4fe8860bf01c9ddb2b6a52ccece6509c5dbdcadbdbc09ed6af315cb20195b429dbf186763312ef6f1bef818a771798ab6240807990118
SSDEEP 768:orv+4UNbdT3bSqGkvDkTGFK48dHeByERRFzjK3Y2Mg0+f:obsbV3vGQK48dHSyw/IMg0+f
TLSH
T19303BF70B8686EB74CE78289B643B647BFF4015781C45B68C6DDAF8E418A4DC170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 19f206ab771e10978620838ccc881899226fb5184fac05623339590ce87abce3
MD5 1147bec319022f2445a320d8653a5cd6
SHA1 c59ce59a529b3b10dfef07456f742e490118b25f
SHA512 2ecfb5ebb6f9324e5b3ff7aeb9485709cd4a61df35c7b593d26101f8d346f71e8bee9310233408972bcf3d573e1fd0ebf5b3961b3d0782131821d44708955f8d
SSDEEP 768:IFQf3PwgdSqG8vDkTGGK48dHeByERRFzjK3Y2Mg0+Mv:rf3HGY948dHSyw/IMg0+Mv
TLSH
T11DF29EB159949EB74CABCB89BA477347EEF04167C5C4EA6492DDAE4E40871DC030BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 13cab992432cbefe18adf74204b7563d1c75c0359272a50d17f17390042c003c
MD5 d6d354f618853091a37f02a6dc4e719a
SHA1 33514f3ed76cbc05daff61b470d3db73eb075461
SHA512 604aaa9588a73387090d62274ed6d03ab78cae001e1553f9adeb7e710a979de534882d459c5376e55ac92e23bfd46a12311cc4be1d2f6442dff9d437ab2c99b5
SSDEEP 768:6rv+4UNbdf3JqG0NDkTGIK48dHeByERRFzjK3J2eVH1SCj:6bsbJ3cGyf48dHSyw/fEH1Z
TLSH
T15F03BF70A4A8AE734CE792897583B607BFF4411782C45BA4C4DDAF4E868B4DC170BD6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 8909c462f5e6341e5ef7c7207e7cb973b9f3e618d7ac2308245c75ce044266d7
MD5 baad985f17b8e33e6f8974d8597feee9
SHA1 6d6052de54b3b014d571b3c6ee0ce5fe98d19e56
SHA512 f5572d1d76a16d7ef09efbbfddee37fc3448a7d3407f10b88420f9998931c19e028fe7ef4599ab74bb2789e0343a319a85d119f250b6960bca237d57a2a6dc34
SSDEEP 768:d83NSqG8vDkTGFK48dHeByERRFzjK3Y2Mg0+Mv:d83NGYK48dHSyw/IMg0+Mv
TLSH
T144F29EB068A46EB74CEBD3897A43B747AEF0411791C8AA6485DDBF4E41865DC070BC2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 73e0dfdcc21d4a62f8024200b9bf7ebb36d2518ffd3d3839f4b8f97f92de5f3f
MD5 4de75c4caeb5ff93ebfd2eded81d5fe2
SHA1 7e3e0f56ef0cda261d0ff4c564a9ebee144a8e72
SHA512 ea811424f399b9b2bc570579b3017efa4c6404dd9456a5371c44e456b4a64aa54a39c745c882bfe25f3148e23c8a50840a69123c7cec049b4af56cedbc5eb634
SSDEEP 768:Qrv+4UNbdf3/qGpYDkT5K48dHeByERRFzjK3YWeVH1SCj:QbsbJ3yGSl48dHSyw/MEH1Z
TLSH
T19403BF71A8A85E734CE792897643B617BFF4411386C41BA4C1DD6F4E828B4DC130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download