a64a525fe67f954ab9d443476df5609689df7ba2e98bef5d0795fa6231482ed5

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 9KB
Sample260910-annd3avwaz
SHA256 a64a525fe67f954ab9d443476df5609689df7ba2e98bef5d0795fa6231482ed5
MD5 8d6cca73e8ab0ae5a00e0b8cbb63f444
SHA1 5073a33b80f7c1c40dc2694877797cc6bda574fa
SHA512 9aaa9d65c8fecbf5e583a8896785b1b8e6330279507e46681fa816b3a5c3e280bd2965e8350b3c0a4f6f92f36a634a0e8ecc340d4895de6c079834506d52658c
SSDEEP 192:8mIGklFoKGjTvBl2+ZKtR0ceXnNS6HAswFgj33BTvOiaJQB160Cm8+F7DAWDGyJH:8mIINzPZp8O
TLSH
T1A822FE2722B53066A587D5D27A76577B2AB0DD43D10B463833AC4B88CFCAD81CAD725C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5460	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334733645840482"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{CC0A23F2-B5C1-48FA-8C08-218D3E0E8C46}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 5800	2332	msedge.exe	89
PID 2332 wrote to memory of 5460	2332	msedge.exe	90
PID 2332 wrote to memory of 3912	2332	msedge.exe	91
PID 2332 wrote to memory of 3912	2332	msedge.exe	91
PID 2332 wrote to memory of 3912	2332	msedge.exe	91
PID 2332 wrote to memory of 4560	2332	msedge.exe	93
PID 2332 wrote to memory of 4560	2332	msedge.exe	93
PID 2332 wrote to memory of 4116	2332	msedge.exe	94
PID 2332 wrote to memory of 4116	2332	msedge.exe	94
PID 2332 wrote to memory of 4116	2332	msedge.exe	94
PID 2332 wrote to memory of 2928	2332	msedge.exe	95
PID 2332 wrote to memory of 2928	2332	msedge.exe	95
PID 2332 wrote to memory of 2928	2332	msedge.exe	95
PID 2332 wrote to memory of 708	2332	msedge.exe	96
PID 2332 wrote to memory of 5892	2332	msedge.exe	97
PID 2332 wrote to memory of 708	2332	msedge.exe	96
PID 2332 wrote to memory of 708	2332	msedge.exe	96
PID 2332 wrote to memory of 5892	2332	msedge.exe	97
PID 2332 wrote to memory of 5892	2332	msedge.exe	97
PID 2332 wrote to memory of 5432	2332	msedge.exe	99
PID 2332 wrote to memory of 1644	2332	msedge.exe	100
PID 2332 wrote to memory of 5432	2332	msedge.exe	99
PID 2332 wrote to memory of 1644	2332	msedge.exe	100
PID 2332 wrote to memory of 2120	2332	msedge.exe	102
PID 2332 wrote to memory of 4056	2332	msedge.exe	106
PID 2332 wrote to memory of 5044	2332	msedge.exe	107
PID 2332 wrote to memory of 4156	2332	msedge.exe	108
PID 2332 wrote to memory of 4464	2332	msedge.exe	109
PID 2332 wrote to memory of 4464	2332	msedge.exe	109
PID 2332 wrote to memory of 2416	2332	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x29c,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,17991525532549003989,3747806888290083362,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,11018031614918452457,3486426436414157146,262144 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:2
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,203624300836016841,4038975105082170862,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:13
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,12465308181049295943,10270434493875122405,2097152 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,17328604051930336795,632697032824463090,2097152 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,8660252097846174252,2274890270824503052,2097152 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,3346189302593870776,16774358606851527459,2097152 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:9
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,1162260621819394098,1826253884092215358,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9750958118187924196,2811311729352302726,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,12102198387324819416,8410733934162635471,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,12102198387324819416,8410733934162635471,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,7120210367104535991,14363725598701968575,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,17019154705392895428,16977502927087674314,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,4309638238510168155,4332512958942753669,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,12058881548009208451,11450390119423978093,524288 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5788,i,18033378007903515083,5840077743918691651,262144 --field-trial-handle=2864,i,6333420025793956218,12572579393285193876,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2baee38b-e339-4092-847d-6f00b9a5487a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2baee38b-e339-4092-847d-6f00b9a5487a.tmp
Size 38KB
SHA256 148d7b635715d728103e85092bf5efbbb6df952bb5153532234634a46290aa2d
MD5 0a8f83034a3cc64f82acb2133fa17326
SHA1 76ddefa92fc28ec8595be3a2fb5b29c005d1f110
SHA512 2f1de79d962a73845aac5d8c60ef7fa46d2c6f6b57c72e7bf5d71ecd722f5bb06d35095f48cd7c1ffe9b140c1f4378a27db0fcdafbd6ed4e4a525c959d7e4a69
SSDEEP 768:xGrv+4UNbdS3OrjlYyh7Hucys6BRvi82oP4/z6himo+l2bwn+h:xGbsbw3OE3imOz6ImoK0w+
TLSH
T12803CF35F4489973ECE7C28874467A537FF4522345C91AD0E6DE5B0E028BA5E630BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1007af7dcc32986cb3dc2d4c575c36be479262abcc5aa98373807e00bd52026a
MD5 eda999b350263ce8031a8ee5ffa6b9f3
SHA1 2c92b33e88eebaf9f93665efd46ec94386e7ccea
SHA512 16b8b9aa5486b35a1f71bc4e477da5de70326166f037f64812467358a4ad067d0b6c8968920c616e38b8ffdb1cbd6b64d53bf5df0fba12eccce7282e8a8ddb90
TLSH
T12A31FB428BA031C2DBB695F209DC675632F0F4B9A5036E67759CAEB48B01FD2C2D0037
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 96b2895efce39666ffd32833d10651ecfcc2ae63a1da779b5e41b1bbb72a515e
MD5 7abdd09f0ee3c746b3be0b941762f10f
SHA1 4669f4885a060334207bbd9800b70dba552be0e0
SHA512 1eefd49943b156c3d10efef5460166124429ef8152b7b176e38bde0b0b666c4029f66a650ef2696276ca1fe1509fa7a324537dc3b2b60011358281e60b508d3a
TLSH
T117319CF783F4857E9A0196F0AA18AE2FCE2C0511435C7C6A85E4AE2793F3472E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d4b641d8cf6a35bf7c09b25e9f0947208e0b2d22fb2a258a2c26e04cbd3f6095
MD5 9655362426d87083ce3bee44cae085cc
SHA1 19a367af5b8128c6e24c10c7d5c38a74cbf0bb47
SHA512 59b02a70b40e4ab6ee7f8bd32fb6cbae815b9b68af08e030f90cf80e69c347604e61d879cb6e453f9a3eec116553d096da3363041948866d2236fa1b161a9b0a
SSDEEP 192:sxRiyRPGb+/fYsfvpq1zzNzoD8p4i8/g6+WNIYGli2r94GdYzIgDHJ:sxRiyxY+/fYsfv4Ppv8/5I6+9pYL9
TLSH
T18942C7156928A97B9CCBE20DBB557F53E2FD5032A1946E48B7FC8A1C04FB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c6e4075c9f01264bc51d2a551e4be2b6736fd5419ced886072faea2a3f492ab7
MD5 842f5de8840e463eaaf2fe7ff6584d30
SHA1 474e4f271590f22b503dbf00bcc1f20a1c7c92d1
SHA512 c382b7b33b04081a2dd69f62a9cbbb51fc238f9927ca91a95e5973f7ef8eee455188d3ea91cd318bc2b37a471f60998d28c13797d830910980b9600275e07e4c
SSDEEP 192:sxRi1RPGb+/fYsepq1zzNzoD8p4i8/g6+WNIYGlbimr94GdYzIgIJ:sxRi1xY+/fYse4Ppv8/5I+O9pYLs
TLSH
T15232C7156928A97B9CCBD20DFA557F53E2FD5032A1946E18B7FC8A1C04EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3c0606b00708d5c6eb070bb8b09f8769c868c507af5af90c023616664d6ed0d6
MD5 9e3a0f88055114e3ca678e9a0d79060a
SHA1 74f01043dbcbab6dd943147e6c51ff77ecd32168
SHA512 adab844313b14525160aeaff092257bcda58dd6140d70fb644d34e3a6dffd51fd8c8415b5e71173b8e21732fb69552acedb3f53da23efe3d76f05e41da387f9f
SSDEEP 192:sxRiyRPGb+/fYsfypq1zzNzoD8p4i8/g6+WNIYGlbimr94GdYzIgDxJ:sxRiyxY+/fYsfy4Ppv8/5I+O9pYLP
TLSH
T1D732D6156928A97B9CCBD30DFB557F53E2FD5032A1946E08B6FC8A1C04EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cc4bfd4d553a1fd642bf2d1ef680eaa85dd663a08c4183333386218d05f3a035
MD5 bf977055528999357003611387ab2d3f
SHA1 cf928fc168007e3dc6d2e1848e7a0cf2b4e29ee0
SHA512 52e85c33b768f9d3d908e7bd2068db4ec8f0dbacd01da2c23c6005339a4834b75b53860eeddafc71cf4428d742da1ae86cc41e229d2a7e7706c835bbebd731ff
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRI4srowY:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Va
TLSH
T16CB2EB3B600DCB7E9F800AADAC197FDB6D9802C796589D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dd05189763b2b4186fa5dea0eb3acdee25cb5f251b351c08ee1107ceb7cb459f
MD5 ddf12f220cdf7f30f90532528c7ce467
SHA1 9e2a2472de926a3a0476803eb91255abf949ef05
SHA512 0c2de7deb32eabb2079a820732e40eb05e1d880be21ab9becdb57baa7497279a20f5fa69b9a1c256e5881afca0819b429f0db09a2026fbfd7969bc32861c3970
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkr0xFzJZlWNiYgtlK4UgDlcLTqN5eHBoBZBsr:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNT
TLSH
T1A391B316713A1290387EA50891BA892F92C275A33218E43B7BB811A64F77E03CDFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

3c785aeb-50ed-4ef2-a616-a1f6416db338.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3c785aeb-50ed-4ef2-a616-a1f6416db338.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1df12776139852bda4b9befd33a94ce8d86b90c6e644ddcd67c76e8494f96746
MD5 587c2c88e3a098dc7d4c7f3bbe8de2ff
SHA1 2b0a1dbce0c92f7fccf1da72d217c79112ffce3b
SHA512 58d24624bd5e544afdcd6af7ace17609691416db153ec5eaf69065150a3fdc7809498c1a6117a4842e3a5566a09a2bb0303ae40144732d6ac944447643570b8a
SSDEEP 768:arv+4UNbdS3zUlYya17Hucys6BRvi82oP4/z6himofJ2bwn+h:absbw3Y3imOz6ImoR0w+
TLSH
T1AB03CF31E4589973EDE7C288B4467A537FF8922345C95AC0E6DE5B4E018BA6E130FC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 51defc18e7cc6bf07dd454e1f4b5cdda33f874ad684c6e90642b45bd47cf9658
MD5 c7735d9702845de1d5a69f6ef0cca210
SHA1 15c1de15f7e03113ec65af2541afeeee0598eea2
SHA512 4b27e9b32e4b4b1da1f7ce38f71e23328a074380cecfb28461936468251c57af14fa51fa309a279c87b75eb6901a63eadc73f282ac0e0edfdc73645102641298
SSDEEP 768:4u3TVylYyaH7Hucys6BRvi82oP4/z6himo6JMgLN:4u3Tu3imOz6ImoaMgLN
TLSH
T19AF2BF30A8549DB7DCE7C3C9A4467B526EF4922345CC6D90A5EDAF0E05C7B6E030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 18edbeab1737f9b15097fcfff48f8c7f02ac3007ae2b76ea44f937e1f0d20210
MD5 5b755eb1fb6f5b04f1456ee1011966b4
SHA1 ee3c68584968c27ffdf58d855f6fdd16cae0bb90
SHA512 843ad9a3f32b661aa12d7489c42ebd7899c7a0798722878cc71dfe700ad180842ed8b05cfb2f4c856fd5f98977695940088ab9a75acd0165903f526be4a2a198
SSDEEP 768:bFQs3gwgSVylYyaK7Hucys6BRvi82oP4/z6himo6JMgLN:us3133imOz6ImoaMgLN
TLSH
T1CBF2AF329884C9BBECFBC7C5E9463712AEF0526385CCA990E6DD9F0D119769D030BC62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 9f654edec85469b86391d286b81d9a8c5d33361ccb117643f22c9c7ff6227cbe
MD5 ece407f509b0edb1faa976417a4a3bf4
SHA1 945e59c97e211227f4d605fa916f19c313a4165b
SHA512 53f73eb18b87bc1b6424134d989629162fff48a17aee21e72a6b2705f0c875aaf2768ae1344e53bb6c013647ac08e61f65dfbfbc56a9531cfcd305ec728655c0
SSDEEP 768:yu3w4ylYyaH7Hucys6BRvi82oP4/z6himo6JMgLN:yu3wV3imOz6ImoaMgLN
TLSH
T149F2AF30A8549DB7DCEBC3C9A4467B526EF4522345CC6D94A5EDAF0E05D7BAD030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e864f839-a664-4849-926e-7ded6c22ab4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e864f839-a664-4849-926e-7ded6c22ab4b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download