7f4ef9b9dea9d9e44092cdc3488f9f2158105a1586f5ea94bf1e749ff8fe2f87

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CEGIC/pages/datos-estadisticos.html
Size 12KB
Sample260727-aghj8sshpe
SHA256 7f4ef9b9dea9d9e44092cdc3488f9f2158105a1586f5ea94bf1e749ff8fe2f87
MD5 2c4a382937191443f1a96e88d5ebe1b1
SHA1 ddba1879732e0af401e026f8857bde5cb8c54e6d
SHA512 991f463c5a6d611932eb6a01b3d96dcf0becc144c3fc0503640d045a23f87f9ad4a0ef9cd1ab0c63cea9e0dc7362ee16149376055b7ee47fa3a280aa587827ac
SSDEEP 192:F9AW5w4hstqm+lViEBmG/0D7bXuO0OKO2OjHyVFHwXt:F9fI+mG/0/aPDnDLMt
TLSH
T125424F1269D0106713A7B7892E91DB2F3DE3859BDA1F4A0137BC1A8A9F87F448C2314F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3552	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295846704420834"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{5DE02FBF-CF73-42F5-931F-5BAC7DC54E23}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5956 wrote to memory of 2004	5956	msedge.exe	88
PID 5956 wrote to memory of 1088	5956	msedge.exe	90
PID 5956 wrote to memory of 3552	5956	msedge.exe	91
PID 5956 wrote to memory of 1088	5956	msedge.exe	90
PID 5956 wrote to memory of 1088	5956	msedge.exe	90
PID 5956 wrote to memory of 5172	5956	msedge.exe	92
PID 5956 wrote to memory of 5172	5956	msedge.exe	92
PID 5956 wrote to memory of 1144	5956	msedge.exe	93
PID 5956 wrote to memory of 5916	5956	msedge.exe	94
PID 5956 wrote to memory of 1144	5956	msedge.exe	93
PID 5956 wrote to memory of 1144	5956	msedge.exe	93
PID 5956 wrote to memory of 5916	5956	msedge.exe	94
PID 5956 wrote to memory of 5916	5956	msedge.exe	94
PID 5956 wrote to memory of 1900	5956	msedge.exe	96
PID 5956 wrote to memory of 1900	5956	msedge.exe	96
PID 5956 wrote to memory of 1900	5956	msedge.exe	96
PID 5956 wrote to memory of 5664	5956	msedge.exe	97
PID 5956 wrote to memory of 5664	5956	msedge.exe	97
PID 5956 wrote to memory of 5664	5956	msedge.exe	97
PID 5956 wrote to memory of 828	5956	msedge.exe	99
PID 5956 wrote to memory of 5116	5956	msedge.exe	100
PID 5956 wrote to memory of 828	5956	msedge.exe	99
PID 5956 wrote to memory of 5116	5956	msedge.exe	100
PID 5956 wrote to memory of 1092	5956	msedge.exe	102
PID 5956 wrote to memory of 2420	5956	msedge.exe	106
PID 5956 wrote to memory of 1200	5956	msedge.exe	107
PID 5956 wrote to memory of 4060	5956	msedge.exe	108
PID 5956 wrote to memory of 3900	5956	msedge.exe	109
PID 5956 wrote to memory of 3900	5956	msedge.exe	109
PID 5956 wrote to memory of 4464	5956	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CEGIC\pages\datos-estadisticos.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ffc14c5c188,0x7ffc14c5c194,0x7ffc14c5c1a0
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,4392617577602132936,12019340784707519576,262144 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1644,i,15650866333163831773,8612120687467024154,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2072,i,13472554331125148155,1182299247899811189,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,952212290305426852,15583884652521777737,2097152 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,16199400952245761353,14242388859675813262,2097152 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,5640068218674472937,3592689028802975270,2097152 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,8830620464728874548,1462755924665984775,2097152 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:9
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,8181573786547780112,5489910596811331989,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:14
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,10325502430156527948,13088329895166444493,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,4994715875266357979,17484281694415569561,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,4994715875266357979,17484281694415569561,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,8642352843410613893,15632310253439775340,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,8198099203677490947,8649847764357851022,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,10761742556572150169,358499372738773632,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,14353054942153481859,6050227563317796359,524288 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6520,i,5137943097889024672,2797833319420104755,262144 --field-trial-handle=2360,i,3941460434374853510,10217785971695214413,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d4a1134b1a31302bfa52187601cb0d1f9df3810e55bc8488190849367cf70135
MD5 e4c4d54b48a90979e31bcd540cdd4209
SHA1 78c2c9ee0f0c77725e24b5886b22fa70da385ed7
SHA512 0c6cc431a98a7134d115caac993047d6e9db3302cb1a02d64cd47cdfe0d245ab7ab32f837d2ba3876cf1218e1e31945db470daedf273779871c58a6f06eb9ed7
TLSH
T17C61721423E73AD1F32B56F1B2E2A76876F4445D06072E139381BDF29406F38E8EA453
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d0e3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d0e3.TMP
Size 3KB
SHA256 dd909cb196d3ec2566bb4543dbccee07b9b9bc89af1da66d99e2d3dae39167ff
MD5 e2a590671ad2323f5e63f6c7e1b011cc
SHA1 daac24aa202bc511037d0d3bc01014be0ec67499
SHA512 d0b8d3de1d2665b4c6b7cd83d396b54dd2b1c2db88eeb9d0980aa8b3507f5ee60337981b340c9aae90e501a30e29e3d477109e7e44d645de0048664792d6e2bb
TLSH
T1C361621423E73AD1F32B56F1B6E2A75876F4445D05072E139381BDF29406F38E9EA453
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d14992169fa21dcaa216505e5b53f9b273676d832130754d725c6862a4b82a21
MD5 77ba7ad9a0f02fd1ef0039a43081f415
SHA1 373b4961955c61b8d599205ac4cb206e508a7d9f
SHA512 f189c6b1c82550f55a3a8fa0b85ad7476fe5f87dcadb93e75a880af2b5f88f9f1927b06c3b800f314f93e74d28a3536d6687201e4c99294c3910cd21c63a364a
TLSH
T12B419BF7C7E8967D891142F4AA143E1BCE1D0819832C3C5BC9E4AF1BA3E24B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f900931707843a9db87cd77dd5e008480bab75ee1f712432233e2d4e592394fa
MD5 51bb3d33194958f36e882452a849511a
SHA1 3e609622a49c7078b4585ad8bd273f621472ce09
SHA512 5afd3eae1d4b0518f4fb2f5dc4ff81f272d75eefa287ebf7451b50a84e34d38b074b91be7f7da9776de39260a858c91c0e0500a7df78c4fc87349b5f41f3a0b7
SSDEEP 192:sxRErbq/f4s4aHprQ5tzoA8p4EY/g6+WNIYn8zhOGJ4IgDoJ:sxREPq/f4s4aHhG/5ITF7Uo
TLSH
T13842A65A6928A83B5CCBE21DBB55BF53D6F95033A1942E48A6FC8B0C04E77DE120750F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f9f9c43dca627717b1503b03bd903d0db1b948fe4e8fff3b49bf5312bb034b33
MD5 9e26ccc99745a72c73db59a5d68fb5b3
SHA1 b1480a465e21210529108daf86fdfde0125893e1
SHA512 87526db79afb8b8e514c8f9856ccd4c417b92ca9e5a1b05de5ab1b19e3acb47eebe36eb76539f8661ddacf7a4792cba10c90bfe72b724838fc39d8568bc9c37a
SSDEEP 192:sxRErbq/f4s4afprQ5tzoA8p4EY/g6+WNIYn83hOGJ4IgDyJ:sxREPq/f4s4afhG/5ITR7Uq
TLSH
T15B32B65A6A28A83B5CCBD21DBB55BF53D6F95033A1D42E48A6FC8A0C04E77DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 29d68575c56ad9a629400d9c46dc3612a3ea62f9641051e2ea3dbee55ca3fd3d
MD5 3ef01e5931387a3a7665b3a71f5004ee
SHA1 2bfa9f05448ef9ee06cc66c08a7f8c2e1b699552
SHA512 e0a2338fc8b7d6cf5fea7424177f1bba5d275c0d5ff6f05f678c5a5cde7b7e3e89e6489173b5fe8958edfc5e3feb8f744659a86c076f2d989f07dcf9370460cf
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPvrohMM:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VH
TLSH
T190B2DC3B704DCB7E5F800AADEC19AFDB6D5802C79A988D4447FE990C03C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ff9546d5c6b77cecaa01999d9ef294df4b7bbd9e0ed84db71a6b547624f01148
MD5 e8d50672c30c2060f559fe29136e9e4d
SHA1 133df2dd189e4f471d1fa8ce884f4535d77cca86
SHA512 a7d46b80704af3c665fd42b1ee412bfd17b4dcebef0a681af2a1c770009363fd25b66210ad07a20ebad0aa94317d550292f924553b875f8d6fa7338588c8f864
SSDEEP 96:KRfItpfd9xWJmsgRxK44g/xcnvOR9SH5WnjRzHDW3EygrDK4aglDcJh8fOrmKEYS:CfItpfd9cJmtR74g/envOR9SH5WnjRzp
TLSH
T124910100317B0241387D7A0991699C6ED2C274BB7169A42F3BF911F64F6AE029DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d3972a07-18dd-49b0-830f-400361359740.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3972a07-18dd-49b0-830f-400361359740.tmp
Size 11KB
SHA256 8eaee637828f5c3b68aa5c15481cda2a51772dd6e231b9fc21641eab10e5b679
MD5 2d53e396d7f03c4be8886c665ae4fea2
SHA1 34c9728380ee0f0f7c2e41faff9a4f74eb8e1a96
SHA512 40890265fb2009276973e792cb2415219bdaaa717521e9cda30673cdefc162b19c095142302ceb1ac072756c3d9ab0139d65ffb63426f7cca793cb84708f3cf5
SSDEEP 192:sxRDrbq/f4sKafprQ5tzoA8p4EY/g6+WNIYn83hOGJ4IgIJ:sxRDPq/f4sKafhG/5ITR7Us
TLSH
T18532B6566A28A83B9CCBD21DBB55BF53D6F95033A1D42E48A6FC8A0C04E77DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a69a8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a69a8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 2a36bbcd20d0cad4c5d9e33150c69eacf77959a3b0bef67aa85025b9597b8efb
MD5 6334acaa62f557a153aa760e51017b94
SHA1 779f4710923e822486fa98ffbf1482e4f7021016
SHA512 984404bec3ef11a68574a484ac3f8202c599a190b98917034205251be11ba9595722110bf41a25ec9861f1a6e05575309ea297f798aa48e5fa5cb6a8d01047e6
SSDEEP 768:arv+4UNbdk3v+zDZIO0ynfSnNzc4ReyIsP2b9MC:absbe3ifSntc44bsub+C
TLSH
T1EA13CF36FC289973ACF29A92B04B39537EF4511BC2C91A98D5DE5F0C0A8B5ED170B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3c6ab9899919775bf9f8d35a2ee8b048f7e12071853bbd767e1c8785ea573482
MD5 03d255f547fbd2878ee54cf46751d25d
SHA1 c3ed8dc5dfb6fa022a3ffe14fa7a2f19f8b3637f
SHA512 fe6dfb69b4ddfa6f8d2d8556f44ea787303e3a386ed930b9b91ff42d8e87f4f1661fdc8c72869f32c50858a5834363117fb67cf0a155ca8801860f87a08b1526
SSDEEP 384:QZcIH38N8VfnYRIKcJDZNfNoXOVSUUynf8NyETRzcoXfK86sfxEZxxsIj4lB2hOc:uH37pzDZIO0ynfS9Nzc4ReyIsP2b9Ms
TLSH
T1E6F2BF36FC348D77ACF6AA52B5463A12BEF5912BC3D81E8895ED9F0C0A475EC170B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3443abaa61daadf9fb65204d4277201acbaf362a3c95e955b5cd6009f1b43630
MD5 6113ceca03c35f360c163cfb55caa8c7
SHA1 d6d7b16b25b163c54d8582828c943ef5614825cb
SHA512 ec8e4c49143bd77f85b956f59bdb2410d32cfd4bcdd82d34a7af2172b768ae4b5bee1615f25928bdabd2bc3fd617cee5d7fdfe0be1a503b16a78ce1bb6f64235
SSDEEP 384:gZcIH38N8sfnYRIKcJDZNfNoXOVSUUynf8NyETRzcoXfK86sfxEZxxsIj4lB2hOc:eH3opzDZIO0ynfS9Nzc4ReyIsP2b9Ms
TLSH
T185F2BF36FC348D77ACF69A52B5463A12BEF5912BC3D82E8895DD9F0C0A475EC070B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 bb115746877b417f1ce921ef794b865a748647d2bc957c1c63fe2228f3daa528
MD5 740853debda8679dc7db361028280ab4
SHA1 8477a0a647f714bf25beff25eacf106341044614
SHA512 3df658b8349b4be2e8013adc207986e7fbf9c0d4293b23d81ead2bf437f2c1c56be9cf88bd131fae3fdc114212d60a260e9f0c974d12261047c8e615ee20cb43
SSDEEP 768:FFQ03fwg7pzDZIO0ynfSZNzc4ReyIsP2b9Ms:k03nfSZtc44bsub+s
TLSH
T1B503BE37AC64C97BACF69F92F54A3612BEF1512BC2D86A94E6DD9F0C05475EC030B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 57fcb2ba35bbf0ac57e9b70c8326c511492ed45162a4d0363fe53d9bb921c237
MD5 2796a43606128c2e05d560a9b907c315
SHA1 1a38e0db1e1e98e496711d56726c3f181a982d87
SHA512 d3f8c1a5d33dcebf41eddec3a56d471c0753beac404acd870475dda4e3d20040d43df09c0b63d42348437f794a6683783f9f3f240c266d40f2b8d13ff9a36db7
SSDEEP 768:6rv+4UNbds3wdDZIO0ynfMNzc4ReyIsX2eVH1S5D:6bsbS3WfMtc44bsmEH1Y
TLSH
T1B803CF36A8788937ACF6A686B44B76533EF8511BC2D81ED4C5DE5F0C4A8B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

039dd728-534f-499b-8b58-29b7de42be23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\039dd728-534f-499b-8b58-29b7de42be23.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download