ffaa47197db9a45bac9c9f70f282bd62f365bdda5380134eb9ac169f350eabc6

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 986B
Sample260629-lr2xeaas7x
SHA256 ffaa47197db9a45bac9c9f70f282bd62f365bdda5380134eb9ac169f350eabc6
MD5 b9e78f7f2d0069ae0c1143732204cf9d
SHA1 9e9257d24276e5ab7dce2693afe2114eec089564
SHA512 f9f603f7f4f6a1756419b15a4891024f701ded2f35da6fb57852594d2175633427d57d1491c0a0d48e267ec25e0a2ee82a55aa4f1055d7981fcbfbde235814a8
TLSH
T12811082FD94C210392E3B045EF888B38292142BEDAB9420821B5405D20BE3FCC3F10C2
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134272000253865529"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2894455325-857903158-4263030270-1000\{2AAFDA89-EAFA-42C3-A3C1-637CD26956A7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3900 wrote to memory of 5168	3900	msedge.exe	89
PID 3900 wrote to memory of 6040	3900	msedge.exe	90
PID 3900 wrote to memory of 3868	3900	msedge.exe	91
PID 3900 wrote to memory of 3868	3900	msedge.exe	91
PID 3900 wrote to memory of 3868	3900	msedge.exe	91
PID 3900 wrote to memory of 4480	3900	msedge.exe	92
PID 3900 wrote to memory of 4480	3900	msedge.exe	92
PID 3900 wrote to memory of 4308	3900	msedge.exe	94
PID 3900 wrote to memory of 4308	3900	msedge.exe	94
PID 3900 wrote to memory of 5912	3900	msedge.exe	95
PID 3900 wrote to memory of 4308	3900	msedge.exe	94
PID 3900 wrote to memory of 5912	3900	msedge.exe	95
PID 3900 wrote to memory of 5912	3900	msedge.exe	95
PID 3900 wrote to memory of 4536	3900	msedge.exe	97
PID 3900 wrote to memory of 4388	3900	msedge.exe	96
PID 3900 wrote to memory of 4536	3900	msedge.exe	97
PID 3900 wrote to memory of 4536	3900	msedge.exe	97
PID 3900 wrote to memory of 4388	3900	msedge.exe	96
PID 3900 wrote to memory of 4388	3900	msedge.exe	96
PID 3900 wrote to memory of 2872	3900	msedge.exe	100
PID 3900 wrote to memory of 1400	3900	msedge.exe	99
PID 3900 wrote to memory of 2872	3900	msedge.exe	100
PID 3900 wrote to memory of 1400	3900	msedge.exe	99
PID 3900 wrote to memory of 3388	3900	msedge.exe	102
PID 3900 wrote to memory of 5524	3900	msedge.exe	106
PID 3900 wrote to memory of 1104	3900	msedge.exe	107
PID 3900 wrote to memory of 5516	3900	msedge.exe	108
PID 3900 wrote to memory of 2756	3900	msedge.exe	109
PID 3900 wrote to memory of 2756	3900	msedge.exe	109
PID 3900 wrote to memory of 4164	3900	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7fff90a2c188,0x7fff90a2c194,0x7fff90a2c1a0
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,15169781335055312610,1291414584910743074,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,17070959098494707450,8878274636964519649,262144 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,16410281917054617073,16596444379114266758,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:13
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3672,i,12358541724633829916,5365341256383314842,2097152 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,812606195065965358,15491455157128521514,2097152 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,16499040993030532579,8629079529966207890,2097152 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:9
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,10897625702478686850,3254433863287081028,2097152 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,8362879718997203269,6963045307771160676,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,7297276383090285891,6540605592097235465,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,11816510299030878118,12052026627747180515,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,11816510299030878118,12052026627747180515,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,9830461573363240680,8697536463175525417,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:14
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,17879638171122040490,17412528450394764133,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,12110685911421165190,848460614362987212,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,7320500744141843369,2261934542825191303,524288 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6428,i,12687746354552157586,11362464873656831418,262144 --field-trial-handle=2260,i,13349190957865446359,13251282270187362485,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4921dac989a582c68ea2ce6e44eb3bfcd7f8bf3d87dd155763734d09e46d6684
MD5 6fe58dba083868c4939df3729856b544
SHA1 2946fc6a531247a5afe5d20c0abec1329e76da1f
SHA512 435b892e3c3ced9c341bcad7627e98220f381783f6c0d232345dd92e9cb28357bd93211262aa046fe541f6bd0686d5084ac7e92c687fc72829288aa7d9c823de
TLSH
T1B7D08034FB45B745C78605F2D514A720637A864534C2C60DB1A2D50D98681D0B7E79F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0f06119439d622a1a5078cf90d2c84d55bc25c179cc319a31bc271a3e62dc8b5
MD5 39897ff436f6a2795449c696417893df
SHA1 b1e15f7b2c6f5ca94bea9d8a160cc9e6864c1d06
SHA512 75fae24fb44003376ccf64d6c3715357ca6f73fb6cca4422a2574a4960dc75c830ef617f5476e7fc21942b321e9fe764ebf9ae64abfc2b05a73fdd7fb96ad95e
TLSH
T1F2D08030FB45B745C78605F2D514A720637A864534C2C60DB2A2D50D98681D0B7E79E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 58176c41158314a329ac739fa8e8d6f1c5d934e80a8abbfbec878b6b046890e7
MD5 fdebef2ba511e2e92f2ef45375cce696
SHA1 7b92933142eadc415b17296786e5aef47b8fe58f
SHA512 1e3d3e67dd83676ecacf573a27aa100fda35455f32282dc99e58cb39b24d550e739a109b95070232f31e9ddd2adf58df49a5e4e8d3463b469875194247e1155c
TLSH
T1D8618475D6328A27CFE64AB593F290AB33B81841E5871E573494507C7D9EFCC80EA44C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593aec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593aec.TMP
Size 3KB
SHA256 5c92b05da57b0727cb5c8680dd25eebf2c693a32abf8f8735c94997e83778335
MD5 632efafc6831389f866ebc55f2c229b4
SHA1 00633b53e986f5f8a6606222df76cec337a1d6da
SHA512 f7bde97e7faeb478e85ebc909a9ca1d980eb2ffce81a25e717b0b08544686d85bda697b9aafd90538a8c13147027de7976227ffecd98fa165311a94e946059ff
TLSH
T187617375D6328A27CFE64AB493F290AB33B81841A9871E573494507C7D9EFCC84EA04C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d5cc77185f2b0c36b86194bb91b0cd18a602e5824a2ab4115cb9751da456a627
MD5 e1d77d1c696eff21134307ccdd17bd75
SHA1 1a3717fe4b9ea8401e90f8ebc904106ceb022c1a
SHA512 5974c6cd96f2467261a69c06c859fc6e376040b5b68df82ef52054f79bf8ae63735e7318ee01810b7f526c18686d5e13dc53aacd91ce0954cc9b90f84d03f06c
TLSH
T11C41BDF3C3E4856E991146F4BB186E2BCE1D0915432C3C5AC9E4AF1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ff0f7720163f6f0687c6eed581596c06b6a5d9fca2167da69f045b2c82dde292
MD5 6f14f46518765c4bb73584b713a94dd9
SHA1 cf70d4512c56e8c357b805fb9fe0643014977c0d
SHA512 34c1e59715df8ab7e2a5f6942b07f80ff650b5544d03066447871273f7edd31d1f3fcdec422b8c5e51fd24ceb70a52b4e46f5520ca279cb38c263c3cd41acc1c
SSDEEP 192:sxR6RVyM/jK1Ml8UQKZFN/f7skEIybzoA8pe7/g6+WNIYPSUrGf3IgD5J:sxR6FqQN/f7skEcs/5IA2X/
TLSH
T18D62D816A6285977CCDBD209FA457F53D6F91573A2940E04AAFC8B0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f79d80084786f3f806edd9c5e1daa34e1014f3597c8dbb3822b0a53fc953e0ed
MD5 7a21a6eb7a2be0e2e7edd7287d67769d
SHA1 fc057be2d86d976c28541d403e3f5910db179441
SHA512 3c1976fe8deecf8809dc42b684ad506628fe8ff1f87714903920fec8b40316051d6deeb88274752cbbf2fdbe1fed5bb462a6f3944054840d81b3d921fcefeb8e
SSDEEP 192:sxR6RVyM/jK1Ml8wFN/f7skqIybzoA8p47/g6+WNIYPPUrGf3IgDnJ:sxR6FbN/f7skqcS/5IL2XF
TLSH
T1F262D915A6385937CCDBD208FA557F53D6F91573E2941E44AAFC8A0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5c65e4383236627331fb1cd2f49f41b277b1346d2f8dedb65ad1ce783feb841a
MD5 5d0b6d3d1fe4bed590416c7a58325b13
SHA1 b93f42468c889748c7612c60bf46b4ebf00e8e42
SHA512 66ad57928433b45eabc3e73136116d9d875d961e611c3874d7cb886f0f37eddfdd6130b7fb967436315e453e76860e7923054f8c22b76ef30337e6c1ef05dc0c
SSDEEP 192:sxRxRVyM/jK1Ml8wFN/f7sOqIybzoA8p47/g6+WNIYPPUrGf3IgIJ:sxRxFbN/f7sOqcS/5IL2Xs
TLSH
T16D52D9156A28593BCCDBD20DFA557F53D6F91573E2941E44AAFC8A0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5e76877b9fdb1109a94f46e4e2861a5600750136abd380ea5678aaed4a1562dd
MD5 d489c49d852414020387e078e76c08bb
SHA1 88de4bebc06a5655165afd046aa3c8d4d2f13f99
SHA512 046b4dfccb4e047953cbed27ab33691e4639a31189031e6d95412a8621bb754181002b4046b39e6a2813e6e3c955dbbcd87f792b3c751a3e8d728526d0bb400f
SSDEEP 768:LKKg6xWgdVf7k8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJ3nYjrouevdWamS:LKKg6xWgdVf7ku1jaY3YQuevdWamS
TLSH
T131C20B3B240CCB7E4F844E9DAD26BE976DD801CB97584D9447EA880C03D77EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f08d4be0648e987839bc6dd170cafe5befa15fe2e773365f88e197746d53e5df
MD5 ee2e381a11bebb3296808a3b5a98bf6f
SHA1 b903ce9a4668f682ae4a301ff163c97777b03e56
SHA512 fc9795171dddec5308749b72f2af9e5606fe2eaef74b0366c5be66b21b484983cb225add73c4aade48ca2a08257c6b096ae3d1803976345d29cd42fd644bfabe
SSDEEP 96:KMYQKBy8yicK/67UVwUiqqukaD1C0uK6bC+uGc07uEv+z:iB3qUVwUiqqHaDE0UbC+Tc07uEvO
TLSH
T119916462767A264028BF794DC2D4A56F66413063345AE46B7FB910E28E2BE401FFCDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d509.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d509.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 468a992ba333cb942909317788eb46879d88a5a3b3cbd027d25bf99a94b3e631
MD5 4c9318222844215599e88b80383d9a55
SHA1 a63aed1534e68fcdd7dc8fc5b146aec6b94d536b
SHA512 c606eef77712226acd68c2cf6585ec63bdf29d8b7fd2788c9347a2f5efbe1b72e8bd1f6de373f238b5a49390960cb0b317a1e0f3beb1dfeb4edc48c5db03a655
SSDEEP 768:1lj+9N3nqcOxflSAUD75riXYUsZUgb9eHcizn12bfJY:1Q9N3ot2iIUsZUgb9s3ByJY
TLSH
T108F2CF75EDB98C634CE2D6C4B21A32476FFA41A386C81A989DCC5F0D06D779E430BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0231b97cbdee58c904ce3cca2daa96718cbeff9400aa210ab4ce6a4a71fc24f3
MD5 e6b1fc48e924673c2c85acbf2f81a9b5
SHA1 1bcd9176045f1fa1d90a99fe3c4055a9a6e4d378
SHA512 dfbc63268c21dcc68708d2da4a37407ce209e50a955c49c37402b5df1c83b4235bc74253a4c8fc42f9e173b777df549ca8e4fffd7697995c6db6f56c8deeab20
SSDEEP 768:xlj+9N3TqcOxflSAUD75riXYUsZUgb9eHcizn12bfJY:xQ9N3Mt2iIUsZUgb9s3ByJY
TLSH
T107F2CF759DB98C634CE296C4B21A32476FFA41A382C81A989DCC5F0D06E779E430BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 abc58809515a4c4a177fd42b052f37a28adc3765efd1d5273fbdcdeb85ddb507
MD5 6315f90d9368c6e3257106eb5615e230
SHA1 f4beb7cf706ada5b10fe0de6a5908185e6a58440
SHA512 0317583fa09ed9c87eae2d52e3844ad46d0e7c8e1429f8ae66941d9d3d6af652557839893ebaf3fea2ad78b732551d46488309927501fcdf4aa370ca7816c5cc
SSDEEP 768:9SF1j+9d3cwgCqcOxflSAUP75riXYUsZUgb9eHcizn12bfJY:9n9d3utYiIUsZUgb9s3ByJY
TLSH
T14203BF769DA8CD6B4CF2CBC4F61A3247AFF641A385C569989ACC9F0D02D729D030BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ba27494b301f4dafa7ec0e6b19e0511cc27371f2980e64cf00404d06a84c9dbf
MD5 80823b280a2e1c042fcfcffaa1c78268
SHA1 584947cf0f2b8852383615242924670551858494
SHA512 340e30748dfd7a4c9ea9743336404873c512d04018b324a70c283cdcda78c79c1ede12d25af90ba71a3e702381736fedf30465d02460a58e303729db91e2f3fe
SSDEEP 768:ZkjaeqD4MlshiLdMmJ3KUIcOxflJ75riXYUsZUgb9eHUA+ApXTcHT+:ZkqcjhIdMG3KBViIUsZUgb9s9+KXP
TLSH
T17E03C07999B49C678CF2D6C4B36766572FB901A386C52ADC9CCC6B0D02E35CE530782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e96c16d3-40b3-47d2-bbd6-7bdc131036d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e96c16d3-40b3-47d2-bbd6-7bdc131036d6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download