67ed99a59ac0499ffec1f528eb0314e1e8854ca71ae0e76b39c62b1528a40251

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
11.html
Size 72KB
Sample260716-dldcvsft9v
SHA256 67ed99a59ac0499ffec1f528eb0314e1e8854ca71ae0e76b39c62b1528a40251
MD5 5bf116e73d568a7964cd57e2dbdb3b16
SHA1 f1ffedbe5fa55004f92a6bfd9e6f7c446252e6c9
SHA512 52096ca23b241c3b01e9a512689ed3b12b80f199d352c110dbb602255f02c16ca90b45c75ec749457e4c7557e99edda7a1d2c627a43e0214b92f991970dcd679
SSDEEP 768:/IoCkMq7n7gxzf6mYFwoFpHdfSkDxUKRJdikReI:/v7n7gkmYFJTSkDxUK3dikReI
TLSH
T1D0737236A6F64777527F72D4D1896762615BC31FC3828BF2866C639682C8E1CBC2784C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5976	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286447321637765"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{055E163C-C767-4F13-9DA6-F075F489C8A6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5392	msedge.exe
5392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 2908	3240	msedge.exe	88
PID 3240 wrote to memory of 2540	3240	msedge.exe	89
PID 3240 wrote to memory of 5976	3240	msedge.exe	90
PID 3240 wrote to memory of 2540	3240	msedge.exe	89
PID 3240 wrote to memory of 2540	3240	msedge.exe	89
PID 3240 wrote to memory of 4232	3240	msedge.exe	91
PID 3240 wrote to memory of 4232	3240	msedge.exe	91
PID 3240 wrote to memory of 3420	3240	msedge.exe	93
PID 3240 wrote to memory of 3420	3240	msedge.exe	93
PID 3240 wrote to memory of 3420	3240	msedge.exe	93
PID 3240 wrote to memory of 1388	3240	msedge.exe	94
PID 3240 wrote to memory of 1388	3240	msedge.exe	94
PID 3240 wrote to memory of 1388	3240	msedge.exe	94
PID 3240 wrote to memory of 2376	3240	msedge.exe	95
PID 3240 wrote to memory of 1144	3240	msedge.exe	96
PID 3240 wrote to memory of 2376	3240	msedge.exe	95
PID 3240 wrote to memory of 2376	3240	msedge.exe	95
PID 3240 wrote to memory of 1144	3240	msedge.exe	96
PID 3240 wrote to memory of 1144	3240	msedge.exe	96
PID 3240 wrote to memory of 5268	3240	msedge.exe	98
PID 3240 wrote to memory of 5268	3240	msedge.exe	98
PID 3240 wrote to memory of 6016	3240	msedge.exe	99
PID 3240 wrote to memory of 6016	3240	msedge.exe	99
PID 3240 wrote to memory of 2480	3240	msedge.exe	101
PID 3240 wrote to memory of 5000	3240	msedge.exe	105
PID 3240 wrote to memory of 4372	3240	msedge.exe	106
PID 3240 wrote to memory of 1988	3240	msedge.exe	107
PID 3240 wrote to memory of 2976	3240	msedge.exe	108
PID 3240 wrote to memory of 2976	3240	msedge.exe	108
PID 3240 wrote to memory of 5392	3240	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\11.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2f4,0x7ff961c1c188,0x7ff961c1c194,0x7ff961c1c1a0
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,17119463417471068309,17143461461163148850,262144 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:2
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,17893648142382888311,16300594714338315846,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,5142272843878954225,7150379912764843420,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:13
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,8567893819973195619,5983706069652321124,2097152 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,2912884120417023010,16123724704150501647,2097152 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,4281049295497749594,11107078991958792856,2097152 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:9
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,6235361042017611882,15642868655934643325,2097152 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,15056327658874486159,18253973833465727619,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,14855148134319463631,6732228093090720842,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:14
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,7940967197297361136,8182367996071023606,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,7940967197297361136,8182367996071023606,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,15557471253480233962,7524768856100844772,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,6185194002712662977,12865362272328118906,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,2568622511403913862,18440665554420997017,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:14
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,12061238849613455748,1246939173101672360,524288 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,18408971739697830000,7313893366879634315,262144 --field-trial-handle=2840,i,7157939186516048858,15570351038342299559,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

35d5c3d7-b1a3-441c-9922-07183557a18f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35d5c3d7-b1a3-441c-9922-07183557a18f.tmp
Size 11KB
SHA256 dcfa0f02bfab184951a5066f2567e025558c142c8ce9dbe3c6688aabdbc6ea3b
MD5 ff2ef33772b7497caab036c6064e02d3
SHA1 d7c46ec3cec36dba24dfba096ab17442b5ab9cea
SHA512 5db75c668d752c04228d5f137155f39a7cebeb54f550c48823ae1f9ec02ee886dcf4bcfca47ccf2b67baa8b878932e26a3f4c8ec8f62c5876213c5e29c4f25fb
SSDEEP 192:sxR0Xlw6rbjl/fzusjlJXYCboveRzoA8p40B/g6+WNIYE93F8GeWVxIIgDWtVJ:sxR01w6Pjl/fzusjHXPoveMzB/5INFh9
TLSH
T10432A51669289D3B5CCBD21DBA56BF93D6F95032A1911E08ABFC870C04EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2de7102f1d6f751e33c5a9a298e04e8e77e66767517f89fbc9142c43baa472b3
MD5 e8e994e907e7c0bad1f0ed36aa057df4
SHA1 e5222d7e7a5bf2e9def7e11de89aa7f12bda61d6
SHA512 71907411688d6bd6c6a73f7b41eb5e2b40663ff50fa7512c3f82ff729b246d04fd8bab59b77e3a5be62d43111ccf037984bd7b37f11845402698c6ef92f173dc
TLSH
T1E16143501373D4E2EF29C4B151D1EADA39FCBCD5C2C75E2240406D746A26E28ABEDA13
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5911f8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5911f8.TMP
Size 3KB
SHA256 6e6a5a088e4d080385873795c92f161264c489a4800f559de654067511205998
MD5 0b626a29dc93bcbb691c7fe59b12546c
SHA1 43c1ccffd2c9393d7a09a4717922993139085dd6
SHA512 f8d297c590556252363e5360848dbca08a96460e27596e8443791f2489c8cb7944e06e9b24f6ec11c17f18c8539c6d0823da44a795db4952c4bd559a486fca3f
TLSH
T19B6154501773D4E1EF29C4B151D1EADA39FCBCD5C2C75E2240805D746B26E28ABEDA13
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b095c60804558bf3d99788b7b19ff00ab6eacb36055943885bd10bec99918e75
MD5 9a69e65611fd84f781cc152bf549fbea
SHA1 9a4d956b301fb98f1157d0117b75fe360cfb907b
SHA512 aa62eab6fd50e291f4ae8bcf4d6304491b1a2439d897210c974b131267641d477058e2bc4d7911780c6cfba46db528f86977a6879f1ebbffe5db69ed58c59688
TLSH
T1F541CBF3C7E8962D890156F0AB146E1FCE1D0915832C3D2AC9E0AF1B93E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c233979d73e88f656303089cc6924898d1e567483410bad283051143d4cc27cb
MD5 558cde5bfe8053563fe21b26492a5cc7
SHA1 41397b0498b7c21da3674da2a4fc2281ea21bf9f
SHA512 72b24e1b81f702b9752f9ab1da9335f128fbb6f1d80a785813044b0d5c2c77a01bf3ce6322c443a2067f6e668f2aa6b2bf7fe2985110bf232ba4f3a7f498c304
SSDEEP 192:sxR0Xlw6rbjl/fzusjlJSkYCboveRzoA8p40B/g6+WNIYEi3F8GeWVxIIgDWtbJ:sxR01w6Pjl/fzusjHSkPoveMzB/5IWFZ
TLSH
T1E532B61669289D3B5CCBE21DBB56BF93D6F95033A1911E08ABFC870C15EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fd79e2ccf526611033fd0e7ee52de37170f54d48e0db5d00b23800365611969b
MD5 52f01511f3e273b1f6315c9d805d8419
SHA1 42abc62362afb30c3a7aac33b0a8c7b2f3f65c60
SHA512 8987fb10ec8b8c6bc3727b445f14243950fae0239a8fc38924c9faeb506debeecde6cc45db7f894644d74b2366037517322db03113989bd3cc3a29c9d2b0b6b0
SSDEEP 192:sxR0XUw6rbjl/fzusxJXYCboveRzoA8p40B/g6+WNIYE93F8GeWVxIIgIJ:sxR0kw6Pjl/fzuszXPoveMzB/5INFhrl
TLSH
T14732A6166928AD3B5CCBD25DBA56BF93D6F95033A1915E08ABFC870C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 40b0c40e864d2cca2b4266b49ae0af7e0841861896b09807a7cdc6800b64efa6
MD5 6ce568b76b0e47e43d3f745f97380a59
SHA1 e308742f2b2223ecedd0b89cfd3b2317a7234bf6
SHA512 6712336cc65d0384c3e3ccc294d2cd6ab5427a2c7f9e18cb826de5142c08687740f98f8a7f8e2313e166f0a75ba256d7f24ce8d54db103e967b0fb1c20dcbbae
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV5:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo4
TLSH
T14EB2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

78978dd5-d833-47bd-a6b6-bc7754b89774.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\78978dd5-d833-47bd-a6b6-bc7754b89774.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 497e893c37636bace7ce341786882ec25c29444ea6d6c23af079ccdc0380798d
MD5 79b9a6fa1149006fd37e7dc28ee5255c
SHA1 fcb142d99d60521f35295fb3eddcaf00486f6dfc
SHA512 4e6db532d63f9902570f6830061db23a6222e99110710738a642566c5525baa685a045cabd85ac0d10c15231af41ef6d246537fd35d95618f79d546e6eb26265
SSDEEP 768:Wlrv+4UNbd7s3INLR2I/SK4mCQDTd+ZDrukkeX6+qTko0u229a4vsT5GeVH1Sdq:Wlbsbls3INLoI/SK451nzjvVTVKa4aG2
TLSH
T13313BE32E8789D778CB6D684B10771876EB9116382880F94D9ED6B4E068F5AC270FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 be95e92766796f470e3927bc723f763596d3be9d7297beaca26cb51d921846eb
MD5 909f6f52e704493b5c9c694d3c9c09c8
SHA1 393efee3e93dc0ebd669e0cb3624a11858d7d221
SHA512 9ecd1f2bf25c6e24ab24a8623dd095ef0e2ef73ed62c0c8b7e21d1eb82432add738b5b06f45c38b89b98e0bd0607b176297eacee166cebd1aba3b08bdd5a1031
SSDEEP 768:eduEF1j+9Mrs3IiwgMpR2I/SK4mCQDTd+ZDrukYWeX6+qTko0u229a4vsT5Gb9Ma:eduJ9Mrs3IjpoI/SK451nzYFvVTVKa4T
TLSH
T11403AF33EC558D778DA6CB94B21B32879EB501B3C6C56E54EADC7E0D018B1AC530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 39f52fc2da6457b6aa03e2df77607b637fa6aab002e4a8b29b924cf7161f5dfc
MD5 e00b8007cb8b0ce67ec60ec3712570ff
SHA1 92e84e50cfd21bff1052c61583cfff4422f75096
SHA512 d91e9d435049ae100ae8022dbe4496bbc77404b6d459b18bf1361ad8c29ca6cbfe240974b93eb537a9cab5810c2edd219b168c7e7f4d6d723180430089eed5ff
SSDEEP 768:9rv+4UNbd7s3IULR2I/VK4mCQDTd+ZDrukkeX6+qTko0u229a4vsT5GeVH1Sdq:9bsbls3IULoI/VK451nzjvVTVKa4aGEj
TLSH
T1DF13BE32E8789D774DB7D684B10771876E791163C6880B94D8ED6B4E068F4AC270FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 74c56d8e4ea819953eda8ff9adad130134d65e5bab8f8e5b7b8f374c9668c8b6
MD5 1caccf74e7955d415be3e5902832d71e
SHA1 780c2a8c0e235f912a8eb095a5c3f32429e5d93e
SHA512 296b282d2323ee89b31ad908b94e096a0489450d1a8239ef253fd9ad3f9492dc96e03a59c8a4d7e7a1444a7225da23ecf31ce4836fcaf0000a86f68e57b397b4
SSDEEP 768:Wmj+9ps3INpR2I/SK4mCQDTd+ZDrukkeX6+qTko0u229a4vsT5Gb9MLlrqD:W19ps3INpoI/SK451nzjvVTVKa4aGb+a
TLSH
T1D8F2BF32FC654D774CA2C795721B36879EB5126383C82E44D9ED7B0D068B67C570B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8acc536340ae0d9b8d074c3a375b6a0e20b8f856356a700471c7c7bdaccb27f6
MD5 426ea9c8cb21ff5cbec64df167e3543d
SHA1 a4e13b910a5f23290532b97e807931eab480be7e
SHA512 a7ca1206e6ce67333326de5d2d503064a07a6440f63f8864f8464eb381755b7fab458a374fdb0b00d78045a7ff5162438ff2441fdde024038c424f8760be7045
SSDEEP 768:prv+4UNbdG3EhCK2DTd+ZDrseX6+qTko0u229a4vsD5xeVH1SdW:pbsbU3ECsn7vVTVKa4SxEH1h
TLSH
T13703CF32E8B989778CF79784714B75472EB92163C7C80B90D8ED6B4D068B5AC270BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9f82657-7fdf-45c7-909f-72a198d3cca9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9f82657-7fdf-45c7-909f-72a198d3cca9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download