45497db68000420ff020b72ab828991c6ee51ea9d81a1184124654a9d7c06f9c

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
verifynationalID/index.html
Size 514B
Sample260623-pdplpscx5x
SHA256 45497db68000420ff020b72ab828991c6ee51ea9d81a1184124654a9d7c06f9c
MD5 9862aff47e17a32fb27cad969ea8a8ab
SHA1 c80a795de597c89fffc241b40cf6f4e15625ae1b
SHA512 9cdebf3902901bee9dd6d37438759914438234a358b558f3b16aacabec728694123ef3eebc19ba91205a34871e8d66153b4584ed22e3b650ab66f1b46f9bf2bd
TLSH
T14FF059C744D0028692F362111DDAB21D2173A5AA1746D8006D9DE19A0DF9B8FCA6F6DD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266903901410850"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{FD5C2FDD-6F6A-4354-8F87-9E2CEB637915}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 5212	4896	msedge.exe	88
PID 4896 wrote to memory of 5040	4896	msedge.exe	89
PID 4896 wrote to memory of 4460	4896	msedge.exe	90
PID 4896 wrote to memory of 4460	4896	msedge.exe	90
PID 4896 wrote to memory of 4460	4896	msedge.exe	90
PID 4896 wrote to memory of 3144	4896	msedge.exe	91
PID 4896 wrote to memory of 3144	4896	msedge.exe	91
PID 4896 wrote to memory of 5856	4896	msedge.exe	92
PID 4896 wrote to memory of 5856	4896	msedge.exe	92
PID 4896 wrote to memory of 456	4896	msedge.exe	93
PID 4896 wrote to memory of 5856	4896	msedge.exe	92
PID 4896 wrote to memory of 456	4896	msedge.exe	93
PID 4896 wrote to memory of 456	4896	msedge.exe	93
PID 4896 wrote to memory of 3520	4896	msedge.exe	94
PID 4896 wrote to memory of 2020	4896	msedge.exe	95
PID 4896 wrote to memory of 3520	4896	msedge.exe	94
PID 4896 wrote to memory of 3520	4896	msedge.exe	94
PID 4896 wrote to memory of 2020	4896	msedge.exe	95
PID 4896 wrote to memory of 2020	4896	msedge.exe	95
PID 4896 wrote to memory of 1968	4896	msedge.exe	98
PID 4896 wrote to memory of 2556	4896	msedge.exe	99
PID 4896 wrote to memory of 1968	4896	msedge.exe	98
PID 4896 wrote to memory of 2556	4896	msedge.exe	99
PID 4896 wrote to memory of 1820	4896	msedge.exe	101
PID 4896 wrote to memory of 5344	4896	msedge.exe	105
PID 4896 wrote to memory of 820	4896	msedge.exe	106
PID 4896 wrote to memory of 3052	4896	msedge.exe	107
PID 4896 wrote to memory of 948	4896	msedge.exe	108
PID 4896 wrote to memory of 948	4896	msedge.exe	108
PID 4896 wrote to memory of 4612	4896	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\verifynationalID\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffa3491c188,0x7ffa3491c194,0x7ffa3491c1a0
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,7099443331390306829,4424380625930281287,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7612230525184030525,16893515781719858696,262144 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1420,i,8280843679192698257,6869612738700300506,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,18001813933350343930,4941698431045722028,2097152 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,1931736952664211602,11342928073133654782,2097152 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,16811684320346106022,9861867252871179291,2097152 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,17826917688853681092,12846373911607058341,2097152 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,15353210533038187679,13719591341072039399,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,1297774454245097378,8286675684662067513,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,9144625854116095092,6323726439615028987,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,9144625854116095092,6323726439615028987,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,12139387487702994634,17402809484785526317,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:14
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,8328060388467871664,10758802592973720714,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,14175945824119141545,12269035262938673470,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,4859974541941579451,6709681469772065677,524288 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,9131454391495961590,4741402534246078613,262144 --field-trial-handle=2628,i,7924134454322049266,3163419874211363863,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

81612fd2-7bb1-45ac-a18c-de4454bf6549.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81612fd2-7bb1-45ac-a18c-de4454bf6549.tmp
Size 27KB
SHA256 7b2376c843b670506c052c30ed278c5ae6a0408d7bd683038082021bc59ed5c9
MD5 30e984bc91e134dba1c6b27c85f17c32
SHA1 896470f5f5cb66787ae2da8f3cb0a0d87c35bad1
SHA512 cd57559112cb24d199c583dbab5247045d1e96b4b3439468fe07856eafbd098ae91117ab14f7f38eab59ebc113b8ab4d9d6b99a8a57563901daee8337ea456fe
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQOro7ov8nqA:eOEt7IWgKgf16u1jaZ/QF88qA
TLSH
T171C2FB2B240CC77E4F840E6DEC2A6E977DD801CB9B988D5447EA890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f9c41ceac99117b1d1f6be2a8aceabb294e147ae7d7e19b8eabc82764a3a331
MD5 0c7920dc1228fc8806d1e242718ffa49
SHA1 ad3ec6b37132a6d02d465d7a1e541e6e07a35eb6
SHA512 0e96515c41d31f27f10e335c56c489e862b62116cc103bccf5bcbd7350fa346cd5e811b2e4d6a1feade809b0263f71a3d02b3d28f8e23818983b6cd738b71118
TLSH
T1D8713E20DCE086E9EB5CF5FD94D21148337CC58D4AB36E364890A0B76A097E0F52DCCA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5912f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5912f2.TMP
Size 3KB
SHA256 5b23e49f88834dd38cae76b11d4f832a88e784bece9b1fd7cbd7c5921c6b4f09
MD5 faac1c2937dbbc5ec5b7d5bb9f71ee44
SHA1 47753e3ef0dd9d58bc41f11550ac506cd835a9f2
SHA512 927ccb0339037f6f9fdb7c0e184a1e71f6ca7f249bf05a007883a4f34c2d3ba96f994e894beb985d430af138e39df84f0ffb326ed8fca228b280c7b4862a0407
TLSH
T185713020DCE086E9EB5CF4FD94E11244337CC58C4AB36E364891A0B76A097E0F56DCCA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2399e8cd-17e4-4273-b247-522fa3629513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2399e8cd-17e4-4273-b247-522fa3629513.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8ca02657fbe71d0d3044d21af67bf3ef3fba1b890fe688f8a65de7acdbd21ea4
MD5 a1f840eae7ffce027b96c71d13705fc8
SHA1 31bb22e7a7953210eb18c3684163f52b6c315e79
SHA512 5b4f26e7ad16431f2603407d9605434003b07796d04aa72a13914183e3d7492a1f3b4ec8a3cf7b98deb0c3e2a899b80d537bb74d08787e6be7b206f7a5537d61
TLSH
T1914186F3C3E8866D891146F4BF146E2BCE2D0914932C3C5A89E4AF1BA3E2871E14194F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 331dc013bb8c26049ea99b3fd35cf86eee6d09f2891d195a795d504b0f789c8b
MD5 669900f2f81ccf37f805f910da5b0a88
SHA1 a43a5a2f8490eda0be3fc0118f63756275cc4789
SHA512 49bfd9a48cf30ecda6d6f0a6edb2bd7b095293aaf8b1da349a6736877e6c942817b15fc99a514753d5a35571f1f63b6639987dcae6b4f0cfbf24f17ececb03b2
SSDEEP 192:sxRmRlyM/jK1Ml8wFa/fusaTwNkUVRzoA8p4N/g6+WNIYZjrGhIgIJ:sxRmBba/fusa07KQ/5I9s
TLSH
T1CF52EA156A34993BCCDBD219F651BF53D6F81573B2941E48AAFCCA0C00E6AED621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a3ae88fa826a08acbf4c08b8f9783a119aecb667fbef39f4274b906968fabd4e
MD5 f4840710c81ba231d00862d628598eaf
SHA1 aef74e29b325630f74a7172f8420de322bb2f9de
SHA512 c3467abce0db714a920f728c0e23237926126d64c43b8075bcaba474a72a9ff8187bbc8f07791f09742624016acc70377e0b0521d9766b439ae0764bcf216dc1
SSDEEP 192:sxRhRlyM/jK1Ml8UQJFa/fusYvwNkUVRzoA8peN/g6+WNIYZWrGhIgDTJ:sxRhBqPa/fusY47KS/5Iop
TLSH
T1FB62E905AA349A77CCDBD219F651BF53D6F85473A2940E44AAFCCA0C00E6ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dbedb4eb83ff31fc1686af6c452d698ad4877e79bdd38f54e9ea110138a99b9b
MD5 a9f860d05501b62e83722add5d18faab
SHA1 ae47d8011315cfdd8e4021c43eb8fa448e55d9a2
SHA512 6dd8dc77b5e8a401bf08b411acc1fcc9dc9f4e998addbe4e0a9a5fb7ac89caa8837ac7401051785afe344e2eb1b109d6c0b0bf52aadac376bb1041b6188050b7
SSDEEP 192:sxRhRlyM/jK1Ml8wFa/fusYTwNkUVRzoA8p4N/g6+WNIYZjrGhIgD9J:sxRhBba/fusY07KQ/5I97
TLSH
T11452EA056A34997BCCDBD219F651BF53D6F81573B2941E48AAFCCA0C00E6ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e601e89e52577b7e8cdc783e255a5e3b8ea56ab5655cd84c802f5660340a1735
MD5 e0a022b27b9ae315716f91e6bc98c5ec
SHA1 741c63f99b9447fc5da50945003767734a5f6fd5
SHA512 3cc1e60c8a01019a29ea222b0f957002d889a6c167ed0b47a9212caaf475a42e4a0e308e109e5152d2285dfbc4b0d208d3f272d0efc95171b5b8baad3565a814
SSDEEP 768:/j+9F3tmPfcOPfKfPrV5R4HTytYYqgHvPwp6aOv2:y9F3cfbfKfXWTwJs61v2
TLSH
T11CF2AE72DCA89DA74DE2C6C4B6023B977EE84223D2C46754D9DC5E0D098BADE134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a8094f65d01dc241b350e4b0c07f1982f7063f102f8731003d6581b647aa1481
MD5 f98e5c3bce9931708870b50713e7af34
SHA1 d81963defb78f06d47eee4fb97406828a7145369
SHA512 da5cfb584bbd7ce57198a0954279a96ce8968b9306a36c6c070ea6da9a66d79cfb0942026c768f090f5fed9dadc6cb6d33834f69154dda040119bcc644e0ba2f
SSDEEP 768:3j+9F3GmPfcOPfKfPrV5R4HTytYYqgHvPwp6aOv2:69F3nfbfKfXWTwJs61v2
TLSH
T1A3F2AE72DCA89DA74DE2C6C4B6023B977EF84223D2C46754D9DC5E0D09CBADE134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 a446c61db8295cd6951abd4889f522816162adbe06efb939397221177630ceb0
MD5 34aec896b4c5cb46450362aedef802a7
SHA1 02bb9e66942ad25ecc5dd6af8d04998d9106a96a
SHA512 5f0d9353a223fd5f0a2d297535d5266bec97333eb49e9b06a4ddd395edc368ab30fb4d8c66b4d91e1f15b29b873259c0a38896223b8c2b156b437940ce4ed9a2
SSDEEP 768:QjaeqD4MlshiLdMmb3gmPfcOPfKfP0V5R4HTytYYqgHvPwpyjWtxUTL:QqcjhIdMA3xfbfKfyWTwJsyj22
TLSH
T18C13CFB6ECB89CB74CB2C584B60377977EB44257C3C52B64D9C85A0D059BADF130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c315963bfc7941a5fa9e15dbc48e46c2feacca3ee14c2012f79f135dd50048a2
MD5 7f2df8cf756033267cff1305d7aa0aba
SHA1 4a555b43f7cbc8769e6620acd6004c92de0acafb
SHA512 3872df72353da45e321a8eb24f23304ddc82c5ae81726a32f5d935f6cfd0728ea34f32afa32df4b1c8d86a1bd842a3c3e1e90f86977b10b8001f540bdb132685
SSDEEP 768:4j+9H3tmPfcOPfKfPkV5R4HTytYYqgHvPwp6aOv2:n9H3cfbfKfCWTwJs61v2
TLSH
T1D6F2AE72DCA89DA74DE2C6C4B2023B977EF84223D2C46754D9DC5E0C09CBADE174781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e2b10f6ab6cfa0cd237533b7cce4ddee95feacbac871a115b32811e3af4b1812
MD5 307c476f5c8497b98b9263b9faa51e8f
SHA1 2f759b02c3bf941b33f5908e8f13f079fca297aa
SHA512 aeaa2d205d708d1f41a4e9b12d7260777da3c41a3249dcc57c1d25f11f4cb9c0dc83002483871411fa431d51649a791ce4a36a795122be5b2827439adde5596d
SSDEEP 768:EjaeqD4MlshiLdMma3mRPfcOPf/V5R4HTytYYqgHvPggyjWtxjTo:EqcjhIdMh3Ufbf7WTwJ9yj2y
TLSH
T1AF03CF76ECB85CB78CB29685770277A76EB442A3C3C52B64D9CC5A0D059BACF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be091c47-21d8-4f41-b602-c5a06645b98b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\be091c47-21d8-4f41-b602-c5a06645b98b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download