4aee4ea4761f2bd1aaaf82e2038a9e2e782d1b34fd6191b916a015cb5278ef6d

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
id/index.html
Size 5KB
Sample260705-pfk2asct9w
SHA256 4aee4ea4761f2bd1aaaf82e2038a9e2e782d1b34fd6191b916a015cb5278ef6d
MD5 c7ea42c89fabcce03f03bfd0b2b225ce
SHA1 719e8e0f6e2a9c7ffd44cc436fc824772dc48c3d
SHA512 f665497e3307b8df201b6a1c8eebbdb7af3f06579f487e7d2e6ebcf4d5b0d230176a2ca02d201afec6de2ef092769853142bf08d5c756319966874708c186d35
SSDEEP 96:QuEkJWpDx6bIUiw2AmRZ3ApzCKJgFUdGGc+BjD0cbO:IAkDx6bLbaZQpmKJrBjwcy
TLSH
T164C123566AF32016B90351A42BF767562AB8D113C50ACE683BDD63DC8F82AC5CD63B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277273923143871"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-557124681-2609731375-3674401788-1000\{67C4E1C5-0365-42B0-9E20-9BC3A224BD2D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6092 wrote to memory of 3016	6092	msedge.exe	88
PID 6092 wrote to memory of 2308	6092	msedge.exe	89
PID 6092 wrote to memory of 5872	6092	msedge.exe	90
PID 6092 wrote to memory of 5872	6092	msedge.exe	90
PID 6092 wrote to memory of 5872	6092	msedge.exe	90
PID 6092 wrote to memory of 4668	6092	msedge.exe	91
PID 6092 wrote to memory of 4668	6092	msedge.exe	91
PID 6092 wrote to memory of 3824	6092	msedge.exe	93
PID 6092 wrote to memory of 3824	6092	msedge.exe	93
PID 6092 wrote to memory of 3824	6092	msedge.exe	93
PID 6092 wrote to memory of 3404	6092	msedge.exe	94
PID 6092 wrote to memory of 3404	6092	msedge.exe	94
PID 6092 wrote to memory of 3404	6092	msedge.exe	94
PID 6092 wrote to memory of 3680	6092	msedge.exe	95
PID 6092 wrote to memory of 3680	6092	msedge.exe	95
PID 6092 wrote to memory of 3680	6092	msedge.exe	95
PID 6092 wrote to memory of 3412	6092	msedge.exe	96
PID 6092 wrote to memory of 3412	6092	msedge.exe	96
PID 6092 wrote to memory of 3412	6092	msedge.exe	96
PID 6092 wrote to memory of 5932	6092	msedge.exe	98
PID 6092 wrote to memory of 2976	6092	msedge.exe	99
PID 6092 wrote to memory of 5932	6092	msedge.exe	98
PID 6092 wrote to memory of 2976	6092	msedge.exe	99
PID 6092 wrote to memory of 4416	6092	msedge.exe	101
PID 6092 wrote to memory of 3844	6092	msedge.exe	105
PID 6092 wrote to memory of 4424	6092	msedge.exe	106
PID 6092 wrote to memory of 3164	6092	msedge.exe	107
PID 6092 wrote to memory of 908	6092	msedge.exe	108
PID 6092 wrote to memory of 908	6092	msedge.exe	108
PID 6092 wrote to memory of 4444	6092	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\id\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffa1cfbc188,0x7ffa1cfbc194,0x7ffa1cfbc1a0
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,16851092115353899807,10508197248973926022,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=2700 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,7819023202203119737,15013584119573885009,262144 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,1039611920629706673,3429032798334399087,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:13
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,17723765278664615456,16409621602858577519,2097152 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,5544703012686503357,5899723964567035026,2097152 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,13452869083115466054,9585491292227630800,2097152 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,15844350144537264317,5477715883804297358,2097152 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:9
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,4073083018893064159,10211930187752861215,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,14320721851016482718,14251228406599334376,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,5542593852684252873,3311586008003648174,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,5542593852684252873,3311586008003648174,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,3853781254786742992,7701099074790800368,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,4393159685039347230,5154531091657045470,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,4749862400083813163,11132523618059891864,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,17549094609662298879,7098825674689076721,524288 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6520,i,619308860282852683,13898577541708473643,262144 --field-trial-handle=2632,i,4613736873558430157,1371103065133971420,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d4768ca53680cbe73471e7e7e20fcecca5f677c329e6dde10a9a5cd8c5d9aeea
MD5 350e276b7ad7e2ecef8bb501be41cc47
SHA1 23becb63d8e483408e7d4fddb258a53badd7ad36
SHA512 2bc8ca9b12d87d3ac8610b154b232960a01fc38689558de33b6a2c6e51358e0224147bc1a9fd6494fab448e063321ef4125089d341cdfd4762066fcffbf5dcae
TLSH
T1ECD080747F04A505C1911531BCD55751B52544716D7B874CD050E01DCC15185376F1FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5ae221908285db4719a807e2425a6f6732ddc1c73479482370457ee753fc89c7
MD5 520c2031f5ecabbc157ceac9f596ecd8
SHA1 22edf0e64699c903241400bd6c846811295ca362
SHA512 08764eecf9136bd2ae304a8a479d84a9cdd4faad137bdd47172e9fb79dd70c63a1236c83111416df8577d12f9b471fa3323939c8e383beb748ee03fedb348751
TLSH
T119D080747F04A405C1911531BCD55751B51544711D7B874CD150E01DCC15185376F1E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 416a87c649f3203281f19dc1dd25845e417ce311e8eed8f5ccfca1d0cc9a29aa
MD5 8c80a009589ae58566d582fe00262ce8
SHA1 e56443001037d65e350e5b6db874726f5799e223
SHA512 c6368d731c8e23d1dbeba0bcf32a780a3125484549878023e87ff32f5536cb08e7acbe0a4f820171d965b91ab9a1c72a27238cc587e305baa8d959406e9408f3
TLSH
T1BB6160852438879DE721117D39F924A7FFB241E58287AE00BC44B47ADCCEB2D7B92320
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594a2e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594a2e.TMP
Size 3KB
SHA256 ed321f24efd0ee02cd16eae3939dcf940e4ebd2e2ba2c9a0cfb9857bce28f913
MD5 1a9289fc74307895dae76445f3f9884f
SHA1 9f8f900f2414642bcc2ba3c0a4cd86eaa48909a7
SHA512 28dec551a6300fc487e1c94b43f8d6a70e8c9b82e5065f02aabede8ea310dc6111bb85a101d7e632447ad6eaaffa645264d6f317047eb336a8436ae590823df3
TLSH
T1996162852438879DE721117D79F92467FF7641E58287AE00BC44B57ADCCEB2D7B92320
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0fd91bf866670741d5d65d7453fea520cfafa317c37d0c3e97a9d40bfb0898e9
MD5 e5d4cc4be5a4d6a065fef64ade2376d7
SHA1 79bf23645560cb24f466a6799235377d2da6262f
SHA512 3e07722f1e7a54d24af10bca864ddb4733622308f4ebadf592498a44ec32f753e8d58a856d5aa97e37bb17a4d4204bbac1610376597e8249dac7ef5f4a30d896
TLSH
T1C451ADF7C3E8857DDA1186F4BA186E1BCE1D0915832C3C5AC9E4AF2B93E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7b78aaa48050bc75eec030097d2ae03cfa9f9cab9ddf90f23d09273078dffff2
MD5 382cddf64f7f66e32b67fdd1ee3959f2
SHA1 7d1cd3fba52afe82f4f31e7618cb073408052b89
SHA512 e0c3ef09ffd344940b51542579d3bffcf7b95137a53e177b5c4e8ebbe1ff133566b371b5d32d77a2dcb4de0b78219aeb551c5e384951ca6b24a9c66b624b18b8
SSDEEP 192:sxRTlRHzyM/jK1Ml8wFd/fWqspdxczsX0LVzoA8p4//g6+WNIYGfvGrIgDDJ:sxRTlbbd/fWqsj+Q9S/5I8x
TLSH
T18162DA16AA689977CCDBD209FA457F53D6F81573A2900E44AAFC8B0C01E77DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a61b1d4e2c7bc87440c50f2402cf5cbb24bb154e9733f33104e45c636b31f99
MD5 f1fc20e384e1408dddd4c77b72a6cf7a
SHA1 6ce63f5b9e61ceaf92296139f60dda09fb1d195a
SHA512 59dcb0e48b5f215839d8b50a6e1ce4d59a60e399fd871820d64ab32844cdc71eecaf46c7da18a22e24ddf56ac121c5ac9c049ca0be32eb37d76d0e3b91ede129
SSDEEP 192:sxRKlRHzyM/jK1Ml8wFd/fWqsAdxczsX0LVzoA8p4//g6+WNIYGfvGrIgIJ:sxRKlbbd/fWqsy+Q9S/5I8s
TLSH
T1E452DA066A289977CCDBD209FA557F53D6F81573A2900E04AAFC8B0C01E77DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 edcdff9c178a3c81f710fa49e64da5c5a88feddae0e28294e9f50704a0b3c00f
MD5 6b9d29dc2a46ab2e8f5bd463ccaac690
SHA1 dcef664695ffb4c7e11a247aa11934d5cc624098
SHA512 c0592218fe2aa28867715a45e44605a5833a5cd3d22238c7b406241f45633b4b273f5756b47c965124b5a9e73f4dca26437e6734f26fdcf7f938434f3db3be60
SSDEEP 192:sxRTlRHzyM/jK1Ml8UQoFd/fWqspdxcBsX0LVzoA8pe//g6+WNIYG/vGrIgDFJ:sxRTlbqed/fWqsjYQ9s/5IYb
TLSH
T1AA62D916AA289977CCDBD209FA457F53D6F81573A2940E04AAFC8B0C01E77DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ba008a2faa48244714d5c620eb3604a5ad4aec47bb353842fe8d81d2f5f89308
MD5 f778b7090110b5ffbbc3722b8d0bb17c
SHA1 a95f8fbcfeab78658876595dec36464001bd7806
SHA512 0fcb30ef7d503e6af2ecf867448467e405871aad178bf34f5fca618a5ef5ec39899a48b6e98be4f61c8676cda02a1c95ad9cd06b9c5476a2892127e4d5d47a69
SSDEEP 768:VJWhNWWgmcf458F1+UoAYDCx9Tuqh0VfUC9xbog/OV0iYChrohI:VJWhNWWgmcf45u1jaxpCahI
TLSH
T1AFC2FC2F640CC77E8F844EADEC29AE966DD801CB57984D5447FA890C03C77EB521A4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3ac479a144c48509dc19045fdacba0a9e9175f3e585099cfd366ea48e786ab4b
MD5 9ed24c795d564a98edc1d59640c0be85
SHA1 097605c8312cdca14d2bde8618d286e1528ac208
SHA512 9c75f4047df479dfaef5ee9bb64520a19837f9eadaa1619a044daffb47c0fdb642ca798c3462de1c735b265483f8f4ec31c9cee03d9151d99a75e2496ae61cf5
SSDEEP 96:KQpaKCk6qwgKBCLEFw0Oy2UWS/fg8UK4Rg2Uc00/uUHHjsJ9rhm:49/+EFw0Oy2rS/I8oRg2700/uUHHjsJ2
TLSH
T1E0914747B0751714383E254E92A8C819468274A3309D687F7B7821E21F67D129EFFDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2fe9f934-4fbc-4db6-9dd2-3d4d13524d28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2fe9f934-4fbc-4db6-9dd2-3d4d13524d28.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6f56df502fd92cce6b19122651d526bc375b12b164ec1c856dd1e6971b0d1e63
MD5 889c7656c00bbdd3be63a4c7b1bcac5c
SHA1 5f784eebc0c1e1979348222d909fb7c545dc4842
SHA512 fe9d8b50087d25860ebe53752ed54a7fc0818de1e47917166ad06ce6e0e78100f7fada5b42ec351b28694e47b3393496551862b1d3ce26eac9fa6b9d33d273b3
SSDEEP 768:Mrv+4UNbdu3Oa9J+vZL6HE8cPE8Ye3W6s70H9oDb9Ma:Mbsb83Z3jctY+V9ab+a
TLSH
T1D713BF71A85C89A38DE68685B24B76177FF0566749C90B84C8DC7E0D069FAED630BC33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 aac68a680ebbcf47d1f57b2743ca3ae8d118ef95433c1eaa14809c2e5d5ff62d
MD5 548d2a40e711808621e8c7f60719192a
SHA1 43168dde0576e532602f39547493b5b4f833386b
SHA512 283b95d2cc87e99d45c7f8ca98ceeb99fb7fbb51df483687c34f2ce6c62f6d08c67044b3edcee965506767f4057594bde4be2c5381ecd571e3baab46e28edba5
SSDEEP 768:Bj+94309J+vZL6fE8cPE8Ye3W6s70H9oDb9M9:c943OPjctY+V9ab+9
TLSH
T15AF2AF719C998D638DD686C5B7073B16AEF0572745C81B84C8EC7E0E069BBAC931BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 83991adfd170983eb2fad1093380403a73c995aa5a5a1fddb7733ebd8c4ca7e9
MD5 a99bcb5517879582a0eb0e0349d9753f
SHA1 e893bb785825d1fa5cc91adb7e448d066ab8c90b
SHA512 770e7aeb7b1cb1e7c6b44e270653da5efa1e7cd9f4624ff88886b6af17e45dca13083b1e30a0d387dcd814b434f904f3b2911b0ca60104014a49833841e5dae4
SSDEEP 768:dj+943t9J+vZL6fE8cPE8Ye3W6s70H9oDb9M9:Y943DPjctY+V9ab+9
TLSH
T180F2BF719C998D638CD68285B7073B16AEF0572745C81B84C8EC7E0D069BBAC9317C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 76e3549e99d289526a8a8a20809fd4d3a6ddc355f0ae009d7af1b594f783aabc
MD5 fb8f3db4adba31091afef6defd4cac82
SHA1 a7f467a3a9a80d6c5f47a168e3ddfe384d533571
SHA512 fcc92d4b5fdf12a868807de55dd9aa6ae9c3fc26077011f7ea8fb4325fdd7f5b57ce21814d20a5074a6aa99ce21661a1a4904bef1a543731b504346b4e8fe2d2
SSDEEP 768:DF1j+9jO3Hwgs9J+vZL6dE8cPE8Ye3W6s70H9oDb9M9:S9jO3ANjctY+V9ab+9
TLSH
T16703AF729C88CA679DE68BC5B70B3716AEF0426789C51B94D9DC7D0D029B6EC530BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 14b5dfb4144b7e6b83d68ff5df213c639a056572a66899e191f2823eb1004fc7
MD5 6c647beee8cd70619c802fe280404001
SHA1 02abacc04adb3edc752a53ddf439ddfaa2b06213
SHA512 a7703db35db6f50d3cdb1cec7253bd05d7dca1ef94bc5148a6e5401b824627a4239e7ae57adb5705a4059171fe5b4e37d712508c82ece8dd9bd2e140e85303b8
SSDEEP 768:5rv+4UNbdq3YFJ+vZLfE8cPE8Ye3W6s70H9Ik+8rWqW:5bsbo3SqjctY+V9FDrWF
TLSH
T1CE03AE75985C89638DFA8A85760B7613BEF0566349C50B84C8DC3E0E069FAED631BC73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9902fd0f-e22f-4c67-b025-69ace419c116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9902fd0f-e22f-4c67-b025-69ace419c116.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download