1c6d6253430d2e969849304fd185f647d9c31f43dcd0ea31f439619b8c0aa075

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 07:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IT3665935894858.html
Size 23KB
Sample260702-jjdthadz91
SHA256 1c6d6253430d2e969849304fd185f647d9c31f43dcd0ea31f439619b8c0aa075
MD5 82c1d236ed10df85d42ccda293fdb6c1
SHA1 aa8e0b9289946d9086b6cafd05aca583092f4b6c
SHA512 e86310d0bd3b01f48666af78c88e345ebc8e761c8c08e70566608b4f8d54b54c041b8cec39d6ec27cd594684a1208e274f2c933795e8e24bb8f6eae7847b65eb
SSDEEP 384:TM9/8uP/WAM9O6PnjqOCytak9Ur0HgjHtHFNF+HF7B5UbK7zHSJMH5MHgqH2Hgj9:oml9WQQNcKcBy3WQDAn574
TLSH
T1AEB23B52CBE701476DC38286FF9AEB6232B2C0470645D959B94C434CBF1325D56ABF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274517212918132"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1991999443-3181470666-3272020885-1000\{499BE95F-0067-48DD-B4DC-C75C048ED270}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe
852	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 852 wrote to memory of 3532	852	msedge.exe	88
PID 852 wrote to memory of 4148	852	msedge.exe	90
PID 852 wrote to memory of 4648	852	msedge.exe	89
PID 852 wrote to memory of 4152	852	msedge.exe	91
PID 852 wrote to memory of 4148	852	msedge.exe	90
PID 852 wrote to memory of 4148	852	msedge.exe	90
PID 852 wrote to memory of 4152	852	msedge.exe	91
PID 852 wrote to memory of 6128	852	msedge.exe	93
PID 852 wrote to memory of 6128	852	msedge.exe	93
PID 852 wrote to memory of 6128	852	msedge.exe	93
PID 852 wrote to memory of 3252	852	msedge.exe	94
PID 852 wrote to memory of 3252	852	msedge.exe	94
PID 852 wrote to memory of 3252	852	msedge.exe	94
PID 852 wrote to memory of 4548	852	msedge.exe	95
PID 852 wrote to memory of 4548	852	msedge.exe	95
PID 852 wrote to memory of 4156	852	msedge.exe	96
PID 852 wrote to memory of 4548	852	msedge.exe	95
PID 852 wrote to memory of 4156	852	msedge.exe	96
PID 852 wrote to memory of 4156	852	msedge.exe	96
PID 852 wrote to memory of 3184	852	msedge.exe	98
PID 852 wrote to memory of 1800	852	msedge.exe	99
PID 852 wrote to memory of 3184	852	msedge.exe	98
PID 852 wrote to memory of 1800	852	msedge.exe	99
PID 852 wrote to memory of 4752	852	msedge.exe	101
PID 852 wrote to memory of 2652	852	msedge.exe	105
PID 852 wrote to memory of 2216	852	msedge.exe	106
PID 852 wrote to memory of 2520	852	msedge.exe	107
PID 852 wrote to memory of 4808	852	msedge.exe	108
PID 852 wrote to memory of 4808	852	msedge.exe	108
PID 852 wrote to memory of 5724	852	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\IT3665935894858.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ff8b947c188,0x7ff8b947c194,0x7ff8b947c1a0
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,12300551384954342037,5206772028609350778,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,13862657700793118263,13446987196131612743,262144 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,13622622849914717394,16318884778347945439,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:13
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,3546539601409233558,16681702582252323790,2097152 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,14497119624837282288,4848680372587194423,2097152 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,6099149796709588822,12804186797494079383,2097152 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,3086597717192846616,14053207020920620212,2097152 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,8998772620480094219,15785943375678490430,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,16189215358644019068,6478415525991447598,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:14
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5690489836590905108,14816041900748234790,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5690489836590905108,14816041900748234790,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,8366327756907100442,14406319635562511569,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:14
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,15612503529476574950,6212792803282636852,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,13370910072306857760,2891348342101305405,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,7751805978633021231,7047852736443338599,524288 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,4297404781038547937,4227925029864580113,262144 --field-trial-handle=2188,i,2642209501577358096,2565284765133363362,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 48b0127c48894e5c8e42b14bcc7f6b1f91ca5d97355f42d22391fb602568bb1d
MD5 df62623cabc43e309a7767f4081f29d9
SHA1 420f1a4b11b86944a73d3cbcd4aec4883dfdfd62
SHA512 02067a08d194a87842f985ff7d0bee13c7b7228146565bf19114ffaebc120cb3d2ba8b19c941bb0d2773043366f064246a55efd57127d4a0de5768f453b2730c
TLSH
T1FDD08035774DFD08C18054717890D3517A204460345AC3186329A01DDDBC68513DF0EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a958178f477b8cf0f18d83e0835916167b3eaf95d859728b647bc0100a82efc
MD5 b2c496fb89251ff9b8ff1c46a5315932
SHA1 19626950ca3b280d084016871229a48eb3fa5ffc
SHA512 bbd974e4a08ca8f629f0b9a8892ba78ac7d4191c1640d1037e4fd018dadb4d8edd0a663e4a673a29497151c4defd9be09b6a4a4788adf24b182cbc36b18ccda7
TLSH
T1C5D08031774DFD08C18054757890D3517A104460245AC3186329E01DDDBC68513DF0DF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 63cb66e86a0716fe735a92378f0d38618c1c9d38c40e96c6161a0d265fe9f10e
MD5 876b8fc0a20375c216a7fe407342eb95
SHA1 7f1661e325d3fc1bfcfb038807554041786b2b8f
SHA512 903c4fb6fa5257fcc426cb26adc22b9bb49556c774a29b307d528ec5d5911ce42e37f8fd348282fbf1f4e51c82fa2fbc37a272695d7dbfc6dd8bf79fba07d152
TLSH
T18A5153673AB2EA5EEB6000B54BE25BF57331C55A6E0FAE601069B1F7CF8B7779081040
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 914257609e7d952caddea406f9598867d26fa51edc7742dc23747d5e491a2a7d
MD5 d6925b6c5c0dbd0001a07a76dc008474
SHA1 318f08ccf275ac0aaf8c11be1adc1064158fda19
SHA512 3eb8a36cc9b4495f5b2ebc63953c232a3cb8859eb76564c17b8163ce14eac796cc5c9ba3472ce751de19d0e5b6bf8918e5a833cfa7f5982db8025fa53666260f
TLSH
T1D341BEF7C3E8857E890196F4BB146E2BCE2D0915832C3D56C9E4AF1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5629a19d5e673ef45f40b3d8fe919a6a25b57ac1fb9fc7da080a683109bee869
MD5 f32e8b4131d37c87f7ae0d40931784af
SHA1 f273d95ce482ca863f31a1e0306b6d587d7c806b
SHA512 f53643e6c790a03d3ffbf36616b1e2c49be96789fd7f030015620939e26396087bd94a127073c8f126b7aff21c4528040f98ac56c77e72984852b692f71bb84b
SSDEEP 192:sxRyRyVyM/jK1Ml8wFk/fssMGNCoI8zoA8p46/g6+WNIY4SAe0UGUIgIJ:sxRy0pbk/fssMmCjtr/5IFe0os
TLSH
T1B052EA166A245937CCDBD20DFA557F53D6F91533A2901E08AAFCDA0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5d2cf41c62eb04cf823bed805b80aa83dbad791520b0949d9de2164a5cf88abd
MD5 b83efdf874c9219bb0ec2eea0bd3ab78
SHA1 9044fbda7df1747e595a05c258b2830072865f2e
SHA512 da738ee95ff9e83cd1cc1a29f50ad9ad36e8b7d95853f37aef2a7cb75bde3f5ea06df190dd36cfcd18f0238a9be41bac1051efc52b61692e1423c1684044c19d
SSDEEP 192:sxRpRyVyM/jK1Ml8wFk/fssoGNCoI8zoA8p46/g6+WNIY4SAe0UGUIgDEJ:sxRp0pbk/fssomCjtr/5IFe0o8
TLSH
T10F62FA16AA245977CCDBD20DFA457F53D6F91573A2901E04AAFC9B0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a25b6331581b71d9fb888254c95d46f6f31589d250736c850a504f67aafb9648
MD5 b0632057b53fbd15b68d5d0741eb4bc4
SHA1 0ff058a133c8641abaf83e10df6b846187630f96
SHA512 27bf3780562c0da613928874d85caeaf55b91dcc2985d1443d64db6c847402d134b50988fceea7f1ae34c697b702beaf21b1fd826dabf04dea05049f47f58aa0
SSDEEP 192:sxRpRyVyM/jK1Ml8UQxFk/fssoGLCoI8zoA8pe6/g6+WNIY40Ae0UGUIgD2J:sxRp0pq3k/fssoYCjth/5Ize0om
TLSH
T1BD62D816A92459778CDBD20DFA457F93D6F91573A2901E08AAFC8B0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1bd271f381bcf5972ed0a37c5994117ca0b90755c9638e2e8f5c504fa52dc24c
MD5 40089ce8b037d245fc59afe3359be495
SHA1 9a4b6e25839d9d6ec25ab4b9b916f5465c36237d
SHA512 24362ef20f24821a80fab8224e7af1be369f8321ccd452e99d002cf36899772194330ba45b89fbce2745eb7d35505c6e9b8f9d9f4039615cc0b802b0723f5304
SSDEEP 768:Tqi0E3WgNxfez8F1+UoAYDCx9Tuqh0VfUC9xbog/OVtXNGfroKTyF9:Tqi0E3WgNxfezu1ja49GMf
TLSH
T188C2FC2B640CC77E4F804E9DEC2AAF976DD801CB96988D5447EA890C03C77EB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3a3882daa6bd3901146b3f4a56bafb20cd29fde0855de507ce0e003387266bb1
MD5 6f938382bcc599a72cb970664d1a21fd
SHA1 c577a115014b171900c47c2faf07afc3b17d3ac9
SHA512 d1f53450bbd95e960295dd41d7b4960f3a3afac6f90207c1d14a4cc017f9d486ea53c9e3135b757cfb04f85e59e99471f9ac4a008fdbb5a61e4f121294ce3474
SSDEEP 96:KobeKUgWyUIK5WixOf7JrvbWf8qgjbK4igtbcx50HPoHnwVRnC:odznxOf7Jrv6f8bjhigtIx50HPoHnwVs
TLSH
T14C91A290727B1701397D390DA5A8C81F4A82307230ADE8BB3BA955D55B6BE025FFC9DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59cb64.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59cb64.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 93d8d14ba800551354a0da9406aa6e4b1b54c7fb8591ab86330d97bb2bd9788c
MD5 58396a046abd30c1cdea8a2811e86519
SHA1 61bcfa792276fd6efc96d0b91ca773b44ef65655
SHA512 df73f4cfb97bacbee685c357c08d54dc2fcc3465a66a8ced497ee89a0f7566d977a5308304b30e32d6aa563c6da91005923555a9efe84b1806b4c7fa6608558d
SSDEEP 768:Fj+9g387thX9ltI9K5+AW+152MvSCaikDl8BvTPaxweS:w9g3Q9I9Mpx2pTDl0Wxw9
TLSH
T1CAF2AE32AC559D774DA68BC4764B3647AEE04263C6C52E948EDD6F0E01C728C538BE3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 d5c805620b2d8aad8773e189ce13c3f8312eecdf4c672be387471ade7c441171
MD5 faf6860b9b1bd8fde4b077cce1426ef7
SHA1 22dbfbc32c928451cb37a00d9dd582b26b5f7ddf
SHA512 bc567b086ab48bfd72d407f0abb5724712906d42a2ae55631fb29b0dce7bb5120810bf40642f825e48ad1d76368fff9ecfd5ad294cfa24b80e0c2fa6deef0627
SSDEEP 768:Erv+4UNbdm3o7thX9ltI9K5+AW+152MvSCaikDl8BvTPaxwHaS:EbsbM309I9Mpx2pTDl0Wxwd
TLSH
T15213BE32A858AD778EB696C4B28B76037EB4125386C51AA4CDD96B0D01DB1CD234FE37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 bca4c5f879460b8cf26919e468becfff4c4af185d440d9a181ad071fa0a834bb
MD5 b7112cc0cd837b935df58b9688dd15e2
SHA1 36e1fd300fcdf70a5701b95ee7cabe051d9238b0
SHA512 caa87a29f00841314bab66893ee4e8af50bdd0a93dadd3e3eb983f99a0b3d246b287bf020f3d6f2939c650e894bd5565189a798f2334ae88a6a1f1e4e454759e
SSDEEP 768:kF1j+9F3lwgX7thX9ltI9Kj+AW+152MvSCaikDl8BvTPaxweS:p9F3D9I98px2pTDl0Wxw9
TLSH
T1AE039E329C45DD7B8DA68BC4B64B3646AEF142A3C5C12AA4CADD6E0D01D72CC138BD36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 aa62c999772f0cf2a1bfdf57f0694b304d8cc226bc5b35934f7375f0afa1caf5
MD5 df6aeb55b5b80c25ccd37e7839406bff
SHA1 d77e702c49ef4d35586b54e33dde6ed7f5a17558
SHA512 08b62daac1d3ce0db5f4377b47b3646ec0dbae5e1a6b9540b3e621a7807d1f494f09e0a4c510bfc21beec3ae32a8580bfce4b13826a8cc244553ad97d134a829
SSDEEP 768:Pj+9g3R7thX9ltI9K5+AW+152MvSCaikDl8BvTPaxweS:i9g3V9I9Mpx2pTDl0Wxw9
TLSH
T16AF2AE32AC559D774DA68BC4764B3647AEE05263C2C52E948EDD6F0E01C728C538BE3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cc69556dadd59f1117d6beab2763c43ed7aec84b94d51d89fcd471f813794ff3
MD5 3b35bf87609e89206e4b87b4d931e7b6
SHA1 8c185e88bd9ea6750431b75752a3d3071fa3c6ab
SHA512 9e535dbb2145a1f76a56c5ed854af3790ea3db43d778c3ef9127a4eca8b6129b0e34cc72641adf81516add0f8e5b65090c56f574547f81d4fa0024e117915e79
SSDEEP 768:Arv+4UNbd237PthX9ltIB+AW+152MvSCa2jkr+8rir9:Absbs3f9IBpx2pAkrDriR
TLSH
T14203BF32D869A9738CB6C6C4764B36037EB4529386C10B94CDDE2B4E42DB6CD230BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download