053a34ed9200d80747aba5a32bd734433b0aaf3125beac74f28bba0ddb31b1da

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Untitled-1.html
Size 19KB
Sample260701-alpjcaaz4n
SHA256 053a34ed9200d80747aba5a32bd734433b0aaf3125beac74f28bba0ddb31b1da
MD5 b8c632d4f4811028693e95a7ad401f85
SHA1 76418f763587a0777c2dd6d2d59910cb9bee32fb
SHA512 f2bfe238cedb0b6f00f85b221b5c23f00aee99ffe56483cf0e06469bc2df8dea638b5412a059604ae60eba82a047afd104fa0c820fe245fd2f9f6961a6f79e0d
SSDEEP 192:KPdA8ek34odlGIl8tsZYMlGp1e/EEpqj505q5d5TNVAqbyiAqo5Aq8OUHjAXtKtd:KWo/l8C3Yti2OADs/OZp0uz3kBu
TLSH
T10392513553C80ABE21B7C0649BB2672AFF89C207E70FA15876AD22A35FB3C14D857580
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
700	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273387083890817"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3047816590-610495838-277027736-1000\{F9A2CC87-3AAE-4A7C-961A-18CE628D54F4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 5096	2332	msedge.exe	88
PID 2332 wrote to memory of 700	2332	msedge.exe	89
PID 2332 wrote to memory of 3952	2332	msedge.exe	91
PID 2332 wrote to memory of 3952	2332	msedge.exe	91
PID 2332 wrote to memory of 3088	2332	msedge.exe	90
PID 2332 wrote to memory of 3088	2332	msedge.exe	90
PID 2332 wrote to memory of 3088	2332	msedge.exe	90
PID 2332 wrote to memory of 1904	2332	msedge.exe	93
PID 2332 wrote to memory of 1904	2332	msedge.exe	93
PID 2332 wrote to memory of 1904	2332	msedge.exe	93
PID 2332 wrote to memory of 6004	2332	msedge.exe	94
PID 2332 wrote to memory of 6004	2332	msedge.exe	94
PID 2332 wrote to memory of 6004	2332	msedge.exe	94
PID 2332 wrote to memory of 5772	2332	msedge.exe	95
PID 2332 wrote to memory of 5772	2332	msedge.exe	95
PID 2332 wrote to memory of 5772	2332	msedge.exe	95
PID 2332 wrote to memory of 984	2332	msedge.exe	96
PID 2332 wrote to memory of 984	2332	msedge.exe	96
PID 2332 wrote to memory of 984	2332	msedge.exe	96
PID 2332 wrote to memory of 3008	2332	msedge.exe	99
PID 2332 wrote to memory of 2988	2332	msedge.exe	98
PID 2332 wrote to memory of 3008	2332	msedge.exe	99
PID 2332 wrote to memory of 2988	2332	msedge.exe	98
PID 2332 wrote to memory of 4344	2332	msedge.exe	101
PID 2332 wrote to memory of 4440	2332	msedge.exe	105
PID 2332 wrote to memory of 5212	2332	msedge.exe	106
PID 2332 wrote to memory of 5236	2332	msedge.exe	107
PID 2332 wrote to memory of 5316	2332	msedge.exe	108
PID 2332 wrote to memory of 5316	2332	msedge.exe	108
PID 2332 wrote to memory of 1200	2332	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Untitled-1.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7fff30a5c188,0x7fff30a5c194,0x7fff30a5c1a0
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,7296370992254504473,17551672939236567848,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,9846992462193397401,15465451184597805000,262144 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,11695224150353401784,5586827029221987515,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:13
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,13481041072328438765,12836787697193234357,2097152 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,13422512654974143414,12118727211448109202,2097152 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,8295462343104373697,7354306226640944535,2097152 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,14330544551703102023,14913729495033556026,2097152 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:9
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,16195760078319157370,6952874984506996870,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,9259416504724348753,3103894799693481743,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,15097441898367527678,16697377449072717617,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,15097441898367527678,16697377449072717617,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,9539941717743319556,4218678984943276850,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,15889336768629052537,13306739997463190856,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2972,i,3057696035477198238,2571626275919357864,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,2241323670693541654,15768461329433109514,524288 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6460,i,9652210629992235782,18437109143348351924,262144 --field-trial-handle=2308,i,9636438592664099376,11765557496913663377,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2fd9384e79508a77111bb6310e9414898358885ca508610502ff6f1a15ad704f
MD5 714e68787bb5a6d2fd82139f833a5d0d
SHA1 f7a22adc92641d05515b3ae096da910924f11c1a
SHA512 b133f27abfa4ed5bdbd3eaf997e0664f0627537d4882fdaa63c0b1b301219d07f8ba46857db9a196b1210c29ed9f79e6cfd8c688d502b118a21640805665f762
TLSH
T16DD080F43795F605C786617357D0574173750872241647095051D01CCC645DD63DB1EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 233c07bfff48b5fbad30cd7d90579abd0886400017cd6e7fb037e5626abb1a4d
MD5 71fa6328268340b183c55defa643c474
SHA1 7c004defb21dc2981b3091495c900e02b34e3a86
SHA512 e5b634d358633981cd343c3da26ee18738fb6c54b2334814637e0a9a45343d14770fed7a09c63d55dd190bf7ef111664ba5872f5d5ce925e6bee783e166c75b7
TLSH
T1D4D080F437A5F505C786617357D0574173650872101647095151D02CCC645DD63DB1DF
MD5 SHA1 SHA512 TLSH

Submit Download

176a3226-4c08-4599-9d21-2524189f7b65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\176a3226-4c08-4599-9d21-2524189f7b65.tmp
Size 27KB
SHA256 c31d741818f671c2d078d756952be316744a7523edc8c55466cdd7ae8f054743
MD5 f71a7c57f11fe5f033c07d4f0b65c2fd
SHA1 8c3290733b344afe90d3d822db95f42ef624aac7
SHA512 cee897490de3b8bcbfa2053fd20a82de7da7055767687ec7bde67d6f2efae792b83570024e4b8e4a54044b43ded62b346a07dec5f5f96376398291781c75f38c
SSDEEP 768:AIox30WguMfnA8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOcci+ro5KlqC:AIox30WguMfnAu1jazXiV5KR
TLSH
T142C2EC3B640CC77E4F845E9CEC25AE966DD801CB97988D5447FA890C03C77EB921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 249073aec86e18fc252f2d65b469e678267b2173980458699b84e1cf034bc9ef
MD5 b9619d3646c55a206c23cf61ff21ff28
SHA1 76ab0657c7c96e542eb4e5449681277a9b41bce8
SHA512 0aae263e4008837a6aa020ec5bc66fe4d5d57b3fc47e12fdbfead2d346cfbcf3056b237ad7aa7e2d5510369834bd3572d4572abe39e98fe92f7c38521b8354d0
TLSH
T191614E2F106748B4C73D4BF987E161AA77F8CD9A0A2F6E20049F947B58EE3C4A013830
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d595d84-a3c4-4285-b3e9-770b204bd9c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d595d84-a3c4-4285-b3e9-770b204bd9c6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ed582ee6dfd426b919f38b897a3270b843bf00f947def186cda576cc469b4a81
MD5 8a5b5124b2fc910b5f8a753078882d20
SHA1 253ae49e779e7d5634f2ba3c54195a3ee3584b12
SHA512 1fc5cfd3211cabde92d6b5497057d4b4533dcee14d7db1e197e1a8a9e4a4caee5d42253b7a7c4d3d7452c07019226e01c966efd93e23210cc72eb28bede531a2
TLSH
T1AC71AFF7C7E4867E891156F0AB246E1BCE1D0516432C3C5689F4AF1BA3E24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5d7da64fa92960b64ba175a589008de24ae19bb46d0a59dc091f93ab82d5a8e6
MD5 cd7828b783f0b81f04239b2b0d4534a7
SHA1 e75a165ae092a7235d47b4da8d2cb2749877fe5f
SHA512 34f5904bc9d518cbef24b74beb392799c37dd7d50cf02ddb3aa2b9e8d53dc0dcca2154895c9a2ab056b2647b974a947b6e5c08265476fe7fd31df2c215e902da
SSDEEP 192:sxRVpARI7yM/jK1Ml8wFYa/fHSsMxrDbdfCrJXdzoA8p4Vw/g6+WNIYyNJkpG9J+:sxRAQbl/fysMxDb4+b/5IZds
TLSH
T1CF52E9566A285937CCDBD20DFA55BF53D6F91433A2901E44AAFCCA0C01E7ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c1ac477a9eae67221fc50d7b1a75c6f24bde4488c0cfe069950bcb3bd202597d
MD5 5c541533f2d459f431794886629f7811
SHA1 72811beece6ddff9ab674b005c413a2250df2091
SHA512 903fc8b4609fbe538a1d93725de0dd97130ee85b89bbc105656ca6443e9adfa63f293a0029ad2c448a6ebbf1a1adecea63a6a09d73449d40ba1412d4d17a6a70
SSDEEP 192:sxRV0ARI7yM/jK1Ml8UQYUFYa/fHSsYaxzqxDbdfCrJXdzoA8peVw/g6+WNIYyJW:sxRTQq1l/fysHwxDb4+B/5IJdC
TLSH
T13962FB566A245937CCDBD20DFA51BF53D6F91473A2900E44AAFCCA0C01E7ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0177ddbe2e6b092865316ef9c0f4dacc1283a2a75d99c453904a8cbb3ac57441
MD5 1d38db9491a0df9e2aa83750827dbc7a
SHA1 60c42e01f433b72160dcfa8c4474e5828850df66
SHA512 b7d832205ece7a0c7a80aeaf260ea137299fcf3d4c30c0e358efb613806148d0abf5c9c1ea3b4981c02768a69838c1b455bc71a566bdd78afdf5c05b279e00c8
SSDEEP 192:sxRV0ARI7yM/jK1Ml8wFYa/fHSsYaxrDbdfCrJXdzoA8p4Vw/g6+WNIYyNJkpG94:sxRTQbl/fysHxDb4+b/5IZdI
TLSH
T1FA52E916AA245937CCDBD20DFA55BF53D6F91473E2901E44AAFC8A0C01E7ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3d4fde1da8978462326a50acd2044cb0c75fc577af4eafcab270be8c973e62c7
MD5 22389ca45069a829b1d75c749300efa2
SHA1 8946ffee88eb843a574243d4792e31b942174cd5
SHA512 86157e71b070296a74e0ad85d6ca8e7f4ae96dea32a49808f20a3bb03ad64744bd31a8d2032c3a5f88a531605231e143f57d6e3ec1e47d9ba1a56fde1a6f9024
SSDEEP 96:Kntgj/tzTxufes4nxKw44NxUVdGnTSOBWKiM6stY826ucWKHHgEcK4JgOccM8nmb:OPhxstY826uDKHAEgJgODM8nmMBHU1g8
TLSH
T198915154757B1B403C3E290D83B8B86A529134A37099B42B3BE850F52F6AE114FFF5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c6b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c6b1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 799245fae39971df8a7883f586dd397aa4093869dfb86fc916f58b3d4caf2889
MD5 fe30bef02d269cfd45bb9346dbfacbaa
SHA1 f2cbfd03874812819ebdb2e431263cf31cccccf3
SHA512 63b14adb730aff9688e98d8878d9b4820802eb0c1901de394916ee70e5e46e398d1f6e6bf8428ea506c3536f36faf246adb369ed0c81477942f17dea282da41d
SSDEEP 768:drv+4UNbdG3JW3HuQOJIv5V/hUAFjQIMyOV3N5E9EEtc8KzK:dbsbQ34HhNFUIpONNm/ctzK
TLSH
T14413BF32B9A4DBB79CF7D2C5760676537FB4426786C50A80D9DE6B0C428B1DE230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 47f81268e0c784627dd0ea1cd0e621a0e684c5002fc6882643bf4c169cadcb6e
MD5 53aaaadb667ab9de8343621caf3dda21
SHA1 28bbc79d62159ae94a90b893795bacec72a6e8f3
SHA512 8d4dff7e24118512266d464f1d96e919f53ef29bc7bf7a9dc4d99bca1cfdb645b8135d02bb47187bf2de8bcefa1d038499b68dcc078db04c106a7ea7441fbfe4
SSDEEP 768:uj+903OW37uQOJIv5V/hUAFjQIMyOV3N5E9EEtc8Kz2n:N903VbhNFUIpONNm/ctzg
TLSH
T1F8F2BE76BCA1CFA64CE7D2C476067757AFF4426386851A80C9DD6A0D428B3DD134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d4c1a2e9748064030172b41c05f09c57884005aaa9b1683b76e5e69a143fd4d6
MD5 52d461b6e7adf4a6d789e62452fca8e5
SHA1 d467e39557ca2c15c2dd93eb9b1ce328395a1de9
SHA512 2c3bc9a454f3868804769a70c5dbe79d13a0f2eb76e757734c69be9ddaa25bb30abc47b3e05a6405309561d3c2e78dfdb8d80356e3c108519f45abf59b495598
SSDEEP 768:/F1j+9N3WwgiW37uQOJIv5x/hUAFjQIMyOV3N5E9EEtc8Kz2n:29N3AbhNFUIpONNm/ctzg
TLSH
T12B039E73AC90CBAB9CFBD7C4BA063757AFF0426786816980DADD6A0D01872DD134BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d4afb85a7632b5b6cbd8ce8d15814abd4be6a9849f0b42ec6f6935b1845ca7b1
MD5 40ed6ab1e388f30867fab4a91dc8261c
SHA1 77272702d8b3714c15043a1028e4f94d789e1ade
SHA512 b014a039cd5580db8fa5e014f2e38a9a22d96c7f0fb1c7abee7b0000dbef7c162ded19ca21d0a667e13f63e5203fee7799b29e6de976c64eae4f5a127de05803
SSDEEP 768:9rv+4UNbdF3ZnlQOJIvc/hUAFjQIMyOV3N5E9MI5+8r0mL:9bsbf3ZhNFUIpONNmjDrv
TLSH
T19F03BF32E8A8DAB39CE7D6C5760A72437FF4416399C10B84C9DE2B0D824B5DD231BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1a99a2f-b1b5-49ce-b21b-4d5e5241d2c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e1a99a2f-b1b5-49ce-b21b-4d5e5241d2c3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download