bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Resubmissions

07/07/2026, 00:21

260707-annptset2w8

07/07/2026, 00:06

260707-ad1lmsdx918

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260707-annptset2w
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3708	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2786392678-1011493168-3329660577-1000\{4A2782DC-F1D5-4D5B-BDF7-A3DA44008CF9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 5032	2104	msedge.exe	87
PID 2104 wrote to memory of 3164	2104	msedge.exe	89
PID 2104 wrote to memory of 3708	2104	msedge.exe	90
PID 2104 wrote to memory of 3164	2104	msedge.exe	89
PID 2104 wrote to memory of 3164	2104	msedge.exe	89
PID 2104 wrote to memory of 5968	2104	msedge.exe	91
PID 2104 wrote to memory of 5968	2104	msedge.exe	91
PID 2104 wrote to memory of 3864	2104	msedge.exe	92
PID 2104 wrote to memory of 3864	2104	msedge.exe	92
PID 2104 wrote to memory of 3864	2104	msedge.exe	92
PID 2104 wrote to memory of 5864	2104	msedge.exe	93
PID 2104 wrote to memory of 5864	2104	msedge.exe	93
PID 2104 wrote to memory of 5864	2104	msedge.exe	93
PID 2104 wrote to memory of 3596	2104	msedge.exe	94
PID 2104 wrote to memory of 4028	2104	msedge.exe	95
PID 2104 wrote to memory of 3596	2104	msedge.exe	94
PID 2104 wrote to memory of 3596	2104	msedge.exe	94
PID 2104 wrote to memory of 4028	2104	msedge.exe	95
PID 2104 wrote to memory of 4028	2104	msedge.exe	95
PID 2104 wrote to memory of 2576	2104	msedge.exe	97
PID 2104 wrote to memory of 716	2104	msedge.exe	98
PID 2104 wrote to memory of 2576	2104	msedge.exe	97
PID 2104 wrote to memory of 716	2104	msedge.exe	98
PID 2104 wrote to memory of 3236	2104	msedge.exe	100
PID 2104 wrote to memory of 5464	2104	msedge.exe	103
PID 2104 wrote to memory of 2920	2104	msedge.exe	104
PID 2104 wrote to memory of 3068	2104	msedge.exe	105
PID 2104 wrote to memory of 3516	2104	msedge.exe	106
PID 2104 wrote to memory of 3516	2104	msedge.exe	106
PID 2104 wrote to memory of 4980	2104	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffd7204c188,0x7ffd7204c194,0x7ffd7204c1a0
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,7008545429527040739,7276144809570396731,262144 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:2
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,3483133946326781059,15417915446580887036,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,15140026687953725021,8652402239562641129,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,12718274118277260568,9006609900115032862,2097152 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,805172658823383077,4947453813562800752,2097152 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,14792678761922627440,7237022286071631720,2097152 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,8535116425515038229,3821716385803224184,2097152 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,309149375445834518,3053087479715540332,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,6282684511498032721,6645017335896154742,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,14690773606160742780,18087851305311751060,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,14690773606160742780,18087851305311751060,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,4657800952938335903,14873536341069776712,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,1948159572486588432,5862770620631178921,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,11847766062879982171,16678817518331933253,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,15863946211304603007,16905266924920190677,524288 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,5454236577569015004,12224623249115592251,262144 --field-trial-handle=2548,i,17259223158701931801,11340648405494943272,262144 --variations-seed-version --mojo-platform-channel-handle=828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 99856548fba2b09b26625f38792bc79bdd7b32d45b519c4f695f0c02b1f9b790
MD5 56cad0e2a0b77dbb713fe58128bdd05f
SHA1 bbbc2d67892cc177ca9a4cdd80e59b98d7e85044
SHA512 45e78603d1d496442fe7415895fb68db4abe5c366b4cc78a7aacc8ee188c19be13c62ca471f444e7cf61081562ad79aca905719506e78854282bd937745810ad
TLSH
T17BD02BEA23444D88C0C031323971B348A1105E20124511DC140071388CE22C105030F9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9fe82d5f89c093b9e73bc61db1da47b34ed26b4bc4ce053a376d95b06e248beb
MD5 b67e56e2cf3581861507f308f128a4b2
SHA1 4790a7b2b125ba2d334c30cf03dafd3a44da2c15
SHA512 fd22534f43f03d6756f66d84b103b212adc924d91541c367fff64c4201692480d2f4a5275b267ad2fa32b4a23db117666ee6a633564a65ea97ba291b29aefec5
TLSH
T138D02BE623544C88C0C031323972B348A1005E20024511DC1500B1388CE22C105030E5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 887f1f6030d3e9fab392314f2e34c5c59641defd8bcb0cc2482f93ca57ae63c2
MD5 bfd852e1fc8567235f604eb6dc16d32f
SHA1 7a66d9a0c85c7a7e7f03da00f48ef5d2b1ae8f3c
SHA512 342f22a254f940d1072191840623179c494fe258f0b3359e4f4d9b3368e33488f522ba0902a95a73acc0ba41b3dccce6fa01e4fda665c6b76d0cea09986ecae9
TLSH
T187611E99CB314FC2DF364FB2ADEB18893B3094E5C1976E018485FA7C6407B87D053A28
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c951.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c951.TMP
Size 3KB
SHA256 b40a57de7d36c77443d9b70f25ca45c8d59f20c6580158df33299403915e400c
MD5 55a7382daef03a082bf1d7800696917e
SHA1 c8c966d6968957a63adf00fc422040842f7b5c6b
SHA512 95fc30ede8d64480173deb84deac0eb5bf0571def9f3a68598bf954ebedaf64e95caf2eeff0767d4222cfcbc23a31b7b72b40aff2b0e340646dbd0fdee7b1106
TLSH
T1D4610C95CB314FC2DF364FB2ADEB18893B3094E5C1976E018485EA7C6407B87D053A28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e0c479b814743dcbbc91e2a5fcf00f3758917030b620e45d8eba31809aad8ca2
MD5 79f64d04877d2fe70d43c806b25912d1
SHA1 be3b195e719c36270af082eeedec544d40325ad4
SHA512 02d7c6a934e941b67e090279a1bbd35e747d2c280ce822302a589792ceec4c605c7d1660186f3ef22b0f6052c556916088b146e70383f2f67c808b621f3f0b09
TLSH
T1AC41BAF3C3E4957EC90186F0AB18AE1BCE1C0911832C3D6AC9E0AE1B93E3475E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9d066a4bda8131cba76af9498b9e2af07d368122509debc6e94b55b7907ec298
MD5 0a209d41bdfa299d2b2750426da7d940
SHA1 4526bd06d6e27fb7947c134e49691c5af496f558
SHA512 a77ba0e67c815cbdabc8f0f6828ff0243ec522f30e1e01dad5a28c6b772ed0a7a481e4e97fef5a50280a5586a9790f6beab1a6daa7e2a1abba18280156a32de3
SSDEEP 192:sxRAR8yM/jK1Ml8wbs/fSsN656jCR2czoA8p4S/g6+WNIYn5EbM6G7IgIJ:sxRAyls/fSsN0GBNn/5Icts
TLSH
T12652E9165634997B8CDBD20DFA56BF53D6F91573A2541E04AAFCCA0C01E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d2dc623b5df11f86f51344378f885f483c95d92e96c9b13f24c7fe6e2c423b08
MD5 31d41eab397a4973dee17b51bb79e21d
SHA1 a14788000bfc6998c94489003453e4730d175b99
SHA512 b2c7bb077113376b6914a3289b161adc4a68382c37dc77b1693fce13739f6dc944f721b05560f56d0617a23563970b04368bb5695efe1855befdd0f82a441341
SSDEEP 192:sxRnR8yM/jK1Ml8wbs/fSsO656jCR2czoA8p4S/g6+WNIYn5EbM6G7IgDkJ:sxRnyls/fSsO0GBNn/5Ictc
TLSH
T18952E9165634997B8CDBD20DFA56BB53D6F91473A2541E44AAFCCA0C01E7BEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ef891a87d332ce8d94cc8d15cb7047a9ee1b047b74db92da61991cbfb3b39d81
MD5 a9cf895725f3a4952ad60333292d2488
SHA1 15c3f5e6f2cebd21e98d3d6043339469e2a5549b
SHA512 816b3953e2575d1cbba0f380e28d04818d733309cbce1a92cb48c4a54aca190ccad961b028f9720462647a5450da4dc1a36420a642960519ff6d144c39a49d9a
SSDEEP 192:sxRnR8yM/jK1Ml8UQRbs/fSsO656jCR2czoA8peS/g6+WNIYn5YbM6G7IgDkJ:sxRnyq5s/fSsO0GBNV/5Iqtc
TLSH
T17362E9165634997BCCDBD20DFA56BB53D6F91473A2541E04AAFCCA0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 24d1bc851cc92e13dab78a875881dcaf78d27c7eeec0aa08e9fbcb25f9173e69
MD5 18c8d18318c96b3f67967cc76851bbc7
SHA1 f51f4eb3f6a34aa88e2b5681d8e39e4882f3271f
SHA512 ea0102bf6f34d44cc8a4638e9dafab78c2a9db108a06031a92927df71c19d0420d01b881e804be76e00ec9f3fe9a214f71d64074559f865ef47f75b470371fbf
SSDEEP 768:BwSIyxWghdfAx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVqQLwaro0VsT1:BwSIyxWghdfAxu1ja3EwR0+5
TLSH
T10EC2FB2B640CC77E4F844A6CEC25AED66DD802CB97984D5447FA990C03CB7EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6440d69464be6bf0c835629453f9c24da1948b2e732f4bdd823cc98f8826003a
MD5 c9caa20659daed01e5f0e5e06a4b977f
SHA1 552a62d713e0a304d08e2632378bf0344f147add
SHA512 141f2d26d06ae93e5f529867728195044766d09a3e6912ff4a912313b9a84a0abc499be8e8d841f58a14477e9611eda57a104eff397223f96233f97f39648045
SSDEEP 96:KRgRkQiOCYWm7LgYYK49gKYcY4rKQ1H+zC+4AwmWgFNg+mK4jg8mc2edsesfsIsI:CgRkQiOCPm7UY89gK3Y4rKQ1H+zC+4A9
TLSH
T197918C05703B42523C3F695C81A6A86682C1B4E2319DE43F7FE946E51F2AE029FFD4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2f5c4fa41dab1050b9b157c4611925172b522858c177d45d36663f4c20bc4c01
MD5 4b2cd73b57a73357dcd5fe238339c501
SHA1 248302b00749845644e95244c09ec8d656be4df6
SHA512 a1d3dbcbcd3095f132928be9b9cb9cbc54cf57ee4a066610a798e5acbc4ff7c6524cdea920e057d4ad0e959d9aba71ef83fcf6ad5124e3379999a47e0f5df39f
SSDEEP 768:zj+9h35QKU8LsTzUYpjxLlVPgd5663kHPb9MF:W9h3SjUm93Pf6Uvb+F
TLSH
T1A1F2CF32C4A5EBB39C92D294F2173616EEF5429BC6C81E84C5DD6F0E05CB2AD931BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 61ad9688232e83cf44ba8cc3e3a4326dd5c0791937129d1d686fdcc8dd3df3a4
MD5 fba47ecf7da76060a6209839336c2ea1
SHA1 6ef8bc5f66127476f8be0b6af851125fa6eec306
SHA512 143609889763af54b0b37ef58b3a9f0c6f000d1d76adbdcc30b4302425a1e789a84323c5fb54eb06fea415f91b0cb75cf6902ed37fa651f2f8159d1467881ed8
SSDEEP 768:uj+9h3cQKE8LsTz4YpjxLlVPgd5663kHPb9MF:N9h3nj4m93Pf6Uvb+F
TLSH
T112F2CF32C4A5EBB39C92D294F2173616EEF5429BC6881E84C5DD6F0E05CB2AD931BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 794a334c2a98fd53e800f4e7a0714d8adbe8ad81927c6197b3f02d6024b20625
MD5 e0574e7f74641d11dc32bc1fb5a519a2
SHA1 bfe5f9d4e88c602f78e2cc11807183b5ce4228ea
SHA512 b8c961e4ae3a9bd07898f6426eedf5be8f62207ef1f2c640b7f1fb8f41b6da9a20372a79781bab39cb51a4cd89c59e156b99d38d39c3891c91dfd917edd762aa
SSDEEP 768:lrv+4UNbdx3jfduLs+YpjxLlVPgd5663k/0Uiixe/:lbsbT3zim93Pf6UcUvI
TLSH
T1C503CF36D4A8E673DCE6D284B24776127FB8619786840B94C4EE2F0E45CF09E631BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef7edd00-a35e-4679-aea5-73fd4da4cb9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ef7edd00-a35e-4679-aea5-73fd4da4cb9e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download