90dee0d07fa93bf11899150a74ddf1993430419846dbcb601f7ae6dd6350d2a7

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
90dee0d07fa93bf11899150a74ddf1993430419846dbcb601f7ae6dd6350d2a7.html
Size 80KB
Sample260623-gqechaay4v
SHA256 90dee0d07fa93bf11899150a74ddf1993430419846dbcb601f7ae6dd6350d2a7
MD5 eb55e1f98a2255824c997f313b336fe1
SHA1 d84d79442479de0f2e53c603b762ce6d3d174f98
SHA512 22de3b71b35fd82ebe0163355c2f3a53a3b5e0efd16a23a5ed41bbc24b0dc0fb47d8277de74ade0d653d3b72c789b39ac08c09d29e296eb15f8b4acd03513041
SSDEEP 1536:8G7xoCRt+MqUUtxaAXHtTiDTzJpRXYOlzuwQWZhhw1n:/t30HtTezJhAn
TLSH
T11183F9B9F5A170325E23F970402F510FBA3B686BE44C0DA8F294D8F16EF65894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3592	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266680210043769"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3655380807-1096177077-1670381078-1000\{8002BA2D-A497-40EC-9A33-497C65AF38DA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5884 wrote to memory of 1928	5884	msedge.exe	89
PID 5884 wrote to memory of 3592	5884	msedge.exe	90
PID 5884 wrote to memory of 1184	5884	msedge.exe	91
PID 5884 wrote to memory of 1184	5884	msedge.exe	91
PID 5884 wrote to memory of 1184	5884	msedge.exe	91
PID 5884 wrote to memory of 1832	5884	msedge.exe	92
PID 5884 wrote to memory of 1832	5884	msedge.exe	92
PID 5884 wrote to memory of 1008	5884	msedge.exe	94
PID 5884 wrote to memory of 1008	5884	msedge.exe	94
PID 5884 wrote to memory of 1008	5884	msedge.exe	94
PID 5884 wrote to memory of 5668	5884	msedge.exe	95
PID 5884 wrote to memory of 5668	5884	msedge.exe	95
PID 5884 wrote to memory of 5668	5884	msedge.exe	95
PID 5884 wrote to memory of 3244	5884	msedge.exe	96
PID 5884 wrote to memory of 3244	5884	msedge.exe	96
PID 5884 wrote to memory of 3244	5884	msedge.exe	96
PID 5884 wrote to memory of 4432	5884	msedge.exe	97
PID 5884 wrote to memory of 4432	5884	msedge.exe	97
PID 5884 wrote to memory of 4432	5884	msedge.exe	97
PID 5884 wrote to memory of 4876	5884	msedge.exe	99
PID 5884 wrote to memory of 4876	5884	msedge.exe	99
PID 5884 wrote to memory of 1084	5884	msedge.exe	100
PID 5884 wrote to memory of 1084	5884	msedge.exe	100
PID 5884 wrote to memory of 3212	5884	msedge.exe	102
PID 5884 wrote to memory of 5608	5884	msedge.exe	106
PID 5884 wrote to memory of 2188	5884	msedge.exe	107
PID 5884 wrote to memory of 5696	5884	msedge.exe	108
PID 5884 wrote to memory of 5248	5884	msedge.exe	109
PID 5884 wrote to memory of 5248	5884	msedge.exe	109
PID 5884 wrote to memory of 3636	5884	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\90dee0d07fa93bf11899150a74ddf1993430419846dbcb601f7ae6dd6350d2a7.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a4,0x7ffe3393c188,0x7ffe3393c194,0x7ffe3393c1a0
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,14207360182561050886,8371206405338386764,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,4733756935420990684,2981638976467693881,262144 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:2
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,16902063975513607103,17988075073999965566,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:13
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,5083968709013730609,3266608614561307139,2097152 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,7046568458784966086,8132450185298268112,2097152 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,17714822120606811977,3427536557411411625,2097152 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,11889503146869424683,17097268701657659983,2097152 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,5812730114701623794,7771074932964211001,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3164,i,14307490422316669319,14472955153898974111,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,18360307401858900555,2538963559097150503,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,18360307401858900555,2538963559097150503,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,425609199877339168,17987464705060144883,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,16808216816599665321,12681823596673776892,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,2940826173187841028,1019603659122022632,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,10942407896060771159,7751840747504262294,524288 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,4788044701612030736,6628221537884765470,262144 --field-trial-handle=2440,i,17966457191087442692,17878741628175744377,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a73b32029b5d0c6ff7ae727c0f35079c0207fb5160bb2094317e96e23daf1cee
MD5 5fd2ab1b84f4c46ecb80443cacd9d150
SHA1 dd5f53ee71d94f4de7f9196f7dd42d06437a3320
SHA512 80afd342835e5b7c47013c2e8821b8636a9782f5c0541da2d81ad7da7f1be3e061af3ccb4f9143b3b85ff16c6113c3f6bf41ea64da18da643b2cf34c67ef65d1
TLSH
T1C2D0C0303300F601C0CA24B4FC106311123B8A1230E3C21D7020D00DEE940D0EB8B45B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02e83107bdf4cefad04d7dffca4065fb67146265abf734fc1a0a6c97297b321d
MD5 e502aaa276aa06e6296f6ef4749253aa
SHA1 99b55990cdf0fa9357771717d8ade2d2ba1023a1
SHA512 2f9d794c6e91e4888f5f7323dc7b92a27fbabf3cf561300c11be8833a6a0a6f5855daaa7cfc1901faab9b2932d40d1361bee35e50c2951c0e558a06150e71a6f
TLSH
T131D080707755F505D5CA25B9FD146315523B8A5220E3C61D7160D00DEE940D5EB8B457
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bdec1c18baeeaef08cd8c3a50e9f36f8107eb8beebfdc717b4a8bc459e2ce2f6
MD5 cc069b3ee2b3f9777bc7a8180aa90c8d
SHA1 6000e9058d49b951f31ead18eb36c5ea3e86802b
SHA512 28a3d68d080ab8745013f3a848fbeb52aa65dffe82fd86b871a07235ae9bba47bf0f8fa8667aa5b845de8d91830fe9dd89444434919852736b96b5d41bc13106
TLSH
T16861EA50D6736AE3D73F037710D158867370CC6A9E2BEE9126B49CB8C9C2B102343CA9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594a8c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594a8c.TMP
Size 3KB
SHA256 b1fe5b8bf05af0d87cef8abb472843cdb7341fd512e3f5dbac0834c630f920a8
MD5 4a4cb4fe727ce6379c9aed592e7d8452
SHA1 c628231cdf3cef4532dbf43c73b6f11d568cf1b5
SHA512 ba4c3226bf32766df7534820057c7e3e6836f47ad40c317140694d3036c77d4ad5ebe76e28841d6f462e0115ceaebb5953a1db1ef3d1d53d9e4354e9642d2b14
TLSH
T17261EA10D67769E3D73F037710D1598A7370DC6A9E2BEE9116B49CB8C9C2B102383CA9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 71370269796484e823d48aef7c9078c5106818478816ad3cac98ec6d55673bba
MD5 0be13511dbf52f871911ea875bb28357
SHA1 4c8263dd12f39ba9bd2a5f86f409c6cee9756e53
SHA512 50cf01149e186c2800559a4418f931df6e8a3abc50fb517592ad8be368a1d7da7b3e0cf46d8197cfeb27d266bdcb54861d5c048da583adb94f06d5dd1e660800
TLSH
T1D3518BF7C7E8867D890156F0AB247E1BCE2D0955932C3D5A89E4AF1B93E2870E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 556e163925def22aa0118664b3bf20c17e784e47dc3b98b0cff1b7221210d285
MD5 8ee68674c01b76d7e9acf77ec3668bf3
SHA1 597d8161ae66d99f6819f45c081ecff904cdc71f
SHA512 9c4c2ba8c2dc66357ba5b9ad8d38347f7b48a01e4ff8db3ae1db72146c1fb11e0c1c1e841289e43111bc22d88109b6f5e923948b3f3ed184831eba3e69071c11
SSDEEP 192:sxRYRnyM/jK1Ml8wF4/f1sEJ2sMbozoA8p4o/g6+WNIY5xLI+GdIgD2J:sxRYXb4/f1sEJGbxt/5I2ITm
TLSH
T16952D916AA34597BCCDBD219FA557F53D6F81573B2940E44AAFCCA0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 95da12e61fa80593e97793f62efd2630abc23de69a8424f53b42acc67793d844
MD5 b844ab96830912263139a8003a5917a4
SHA1 b6b32db8f77df6c467db8868095e52af01adc0ff
SHA512 13d716ef164c7332192d9be65fb76d85593e7942b9362cb727bd483a5a443abd5b343598eceac69910467c8dd510b2aed606cf14378dbc24c4e18abe713f6098
SSDEEP 192:sxRYRnyM/jK1Ml8UQhEF4/f1sEM2sMbozoA8peo/g6+WNIY5HLI+GdIgDMJ:sxRYXqhS4/f1sEMGbx//5IOIT0
TLSH
T15F62B816AA345977CCDBD619FA917F53D6F81572B2940E44AAFCCB0C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ec58495eed405f62523cec04606758c930f85a95abdcc4025620079141abdf23
MD5 94617fad3a9718a2b6526f5a8feb2c75
SHA1 1f1288cbc8aa4667ce37c752845e228b68ebba61
SHA512 4fe770b9e11732330a8c18368f6ba84b37db7466d2bd908c1e14ab6dea4206a0cc9e26b75811cf4ae1f13a29dfb384b63e96ae67b4d332296cb957532fc7bbe3
SSDEEP 192:sxRXRnyM/jK1Ml8wF4/f1sxJ2sMbozoA8p4o/g6+WNIY5xLI+GdIgIJ:sxRXXb4/f1sxJGbxt/5I2ITs
TLSH
T11652D916AA34597BCCDBD219FA557F53D6F81533B2940E44AAFCCA0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 212c1b99c91a5ef3c65f8f1eca5916aa1aa14491371b0642a2435ec39507b798
MD5 564759596dd4bca93c81b16caba29274
SHA1 644d28fbd76ebae1f3965785fedd8d3fd9912a93
SHA512 c87d2d4ad2262cbb3a27e9eff08546f0ea025923ce0ef594709627a1ca3efffc1dcb3f2c4600955badb75e478c207ecda1fb80045601d1ea53bfbe381d9327b1
SSDEEP 768:QMUhBCWgmcfXw8F1+UoAYDCx9Tuqh0VfUC9xbog/OVY2oKhro2Q/UiO+:QMUhBCWgmcfXwu1ja1dKa2Q/HO+
TLSH
T19DC20B2B640CC77E4F844EACFC2AAE966DD801CB57988D5447EE890C03C67EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f3cc8781e73099ce0d83ec6ae86be49040d86d184ba80e9326565793a5baa78a
MD5 03ec52a19f904da3fdb41c2bf9ef6777
SHA1 1a0270fa993cb230e52a5b4b2aa69e461ee3e432
SHA512 65d765c67289f3b7a1e78ccb4c54808239a0ed3b4e22356c8d217dc4aee7e45289bc3a5b2daf9cf6faf92c6529a6826135a9c7b98cb12df6c6961d5f5e6efa13
SSDEEP 768:cj+9F3Ga0rjfUfmt1fRtXZ0SEbuRpag62Dai+fAhr/+0F4vu:79F34fUf6fiijag6E+Ix/Wvu
TLSH
T1AAF2BF729C348D774CE792E5B5163A8A2EB40653C1CA2A889DDD1B0E09DBAFC1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 22767c56d79ad4caec9ff47deba9a2221a35becb96cf7db4a68dafb0086b605c
MD5 3cdff1d26452fc1ab81ac5fadd407278
SHA1 f1b80ca8e3fecf838752dce797ae38d2ce73ed99
SHA512 360ab5378737893e10a280a8facfc81a1a5961071a7dd3e61f0773f8fee8582b5f98399976a326fdb33668e53c31f9bb5b5f0e45b866f07f48ca7e31374835fb
SSDEEP 768:6j+9F3Ma0rjfUfmt1fRtXZ0SEbuRpag62Dai+fAhr/+0F4vu:59F3efUf6fiijag6E+Ix/Wvu
TLSH
T1C9F2BF729C348D774CE792E5B5173A8B2EB00653C1C62A889DDD1A0E09DBAFC1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d83aa29e6fe88dee22c17533788411cae6a0298bfd709549b6beddae50ba6612
MD5 b7b60d2be1148c61da3473cdf8fd3882
SHA1 b6fd1f82fe1a7b81b0268b0822604250ff3ba0b6
SHA512 24b0100d027cf1790a8a6b5e2130ccfaf0fe088e0ab7b3c4a30110b9e81797c5b7a7b9460315d9b63355f6a63d6bba438a6d99e65cc5221bda03c4c2038aa6fa
SSDEEP 768:0j+9T3Ga0rjfUfmt1fRtZZ0SEbuRpag62Dai+fAhr/+0F4vu:j9T34fUf6fsijag6E+Ix/Wvu
TLSH
T1BFF2BF729C348D774CE792E5B51A3A8B2DB40653C1CA2A889DDD1B0E19DBAFC1307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fe0ad3cf66b63545f6e83052193864adaac234bf72aa7706b3aff17574c027e5
MD5 ec1ce3e66541ca1ba8469e7af6da8f7e
SHA1 93fcb55e24d4aefc6b800ebe270afbff73dda38e
SHA512 fc6d119ccbe729ae26233bcb638c31e854d1c44314990d409bbc44527a26d96d80b95842a25f35852cbe983b559a889a76edaaa0d1866de933f623ec052661fe
SSDEEP 768:GjaeqD4MlshiLdMmi3r40rjfUfmt6Z0SEbuRpag62Dai+fAd1yjWtUkTu:GqcjhIdMl3TfUfKijag6E+Ivyj2U
TLSH
T11003C07698744CB78CB7A2C5BA173A976E740583C6D67F889DCC260E12EB6DE1203817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2f7f8b7-21a8-42c8-872d-4fdbf6b1e4f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e2f7f8b7-21a8-42c8-872d-4fdbf6b1e4f5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download