91e86969b7920835b30b9cb598d096935907fd4ccb5e813d27fe62f792c291d1

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
88098812.html
Size 2KB
Sample260727-ppaxpascjb
SHA256 91e86969b7920835b30b9cb598d096935907fd4ccb5e813d27fe62f792c291d1
MD5 6d10dfafef5aa417c2aa6d27b0006fd3
SHA1 a0299854712645054b3faff71de8b9248fd7fd4e
SHA512 90ab3996fb29d2b39f14cf880b908532f92f7a78f69a29e18652cdc4ef46816b27e962bc2c606ca45e0bf18ad615bea2972c85f6d1098b686ec67b2c50000d53
TLSH
T19A41A7665C398F8CA2618A98B6D07604C391FAF0C370BC8CCAE675D61CD1FD90B27113
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3848	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296290611243795"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{8CB4ED6B-2AA1-4AEA-8247-44E6819D4DC9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 892 wrote to memory of 4588	892	msedge.exe	90
PID 892 wrote to memory of 5356	892	msedge.exe	91
PID 892 wrote to memory of 3848	892	msedge.exe	92
PID 892 wrote to memory of 5356	892	msedge.exe	91
PID 892 wrote to memory of 5356	892	msedge.exe	91
PID 892 wrote to memory of 3584	892	msedge.exe	93
PID 892 wrote to memory of 3584	892	msedge.exe	93
PID 892 wrote to memory of 3344	892	msedge.exe	95
PID 892 wrote to memory of 3344	892	msedge.exe	95
PID 892 wrote to memory of 3344	892	msedge.exe	95
PID 892 wrote to memory of 1996	892	msedge.exe	96
PID 892 wrote to memory of 1996	892	msedge.exe	96
PID 892 wrote to memory of 1996	892	msedge.exe	96
PID 892 wrote to memory of 5944	892	msedge.exe	97
PID 892 wrote to memory of 2944	892	msedge.exe	98
PID 892 wrote to memory of 5944	892	msedge.exe	97
PID 892 wrote to memory of 5944	892	msedge.exe	97
PID 892 wrote to memory of 2944	892	msedge.exe	98
PID 892 wrote to memory of 2944	892	msedge.exe	98
PID 892 wrote to memory of 2576	892	msedge.exe	101
PID 892 wrote to memory of 3620	892	msedge.exe	100
PID 892 wrote to memory of 3620	892	msedge.exe	100
PID 892 wrote to memory of 2576	892	msedge.exe	101
PID 892 wrote to memory of 1196	892	msedge.exe	103
PID 892 wrote to memory of 3316	892	msedge.exe	107
PID 892 wrote to memory of 4428	892	msedge.exe	108
PID 892 wrote to memory of 4936	892	msedge.exe	109
PID 892 wrote to memory of 2108	892	msedge.exe	110
PID 892 wrote to memory of 2108	892	msedge.exe	110
PID 892 wrote to memory of 1312	892	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\88098812.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffef970c188,0x7ffef970c194,0x7ffef970c1a0
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,983736694474148612,10987408897191951412,262144 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,17630833587010461572,7765393713804024442,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,4204859364070394609,437244997170636188,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:13
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,4715799326933874720,11182035992745102720,2097152 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,15190759592771283956,7791437522476977575,2097152 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,5159485908772906371,3889888568490720701,2097152 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,1457821507154086395,728412729563753688,2097152 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:9
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,10179544560081399398,9253122923980684351,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,137002025532487525,15571175515875665286,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,5486186084033939220,3531189013538006809,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,5486186084033939220,3531189013538006809,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,4162814471633900542,11014687628723392627,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,5540812351511142394,13100728023305328448,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,17455036712579259174,9009864366152248320,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,9480821732030336851,13490178889702869478,524288 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6488,i,5606232871334002074,12012708837196279362,262144 --field-trial-handle=2204,i,3630276874022241696,3195751465069786609,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

39f08226-b90f-419b-b726-4cccb7cd9bd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39f08226-b90f-419b-b726-4cccb7cd9bd9.tmp
Size 11KB
SHA256 009231fffa0667bafa9052d64bd415f367a79e955fd09cb2010c0cb4b271251b
MD5 ead1aa2a33511c910dbe45a56f2ea4d8
SHA1 85d184f64ee5b36d3aa550cf10267604a717dc82
SHA512 183d544dcd6c0131b0019bee79610b13735ea9b4b5a811576fcc49023411bff70b245f11fabe4a21c60d52693bc6c40a356b4ca4b296bbe2bd7d01a2ec1d5ef6
SSDEEP 192:sxRORQbH/fF+sS6KrjDtzoA8p4l/g6+WNIYEBiK1GHIgDwJ:sxROUH/fYsS65w/5I4Pg
TLSH
T12832A616A9289D7B8CCBD21DBB65BF53D6F96032A1D41E48A6FC860C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ae6bf8a35cb80809423dd931b625f47861329eb4ebccf2ed7b26c53ae27161e7
MD5 e50ab8939b7f98333b946bfba05b25ae
SHA1 51337b57b9ec68d3e975592984ac8cb403736aea
SHA512 c1a3b0327adbc286eed4597b10dc6d58a62da013c490cd6ccd8ff177ea9a6dd988bbaebae373add407786c952cbb6d81cbdae8051a24dbe60f0d21027ab44d62
TLSH
T16F5178A223FF04F2D7B845BA61D856543F788E5B79336F52A04523BFE957B0C141B820
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ddc4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ddc4.TMP
Size 2KB
SHA256 2fb4ba2e6b53fcadbc9c355e7945b303388b105d1f2a5a6d36ab4834d09aec09
MD5 46a65cc8470f88cbe0f429282a4178c3
SHA1 11192e739a281ef06bffc7b8f6ba14fbb4e8ec19
SHA512 974ae4aa1665a69273fc33b0deeff603bd47eecae4e74a167d851629e6954ec5f26dd7256fb193a307265ac874b8200c966c092507392deb8dbde4ee165d8366
TLSH
T1D351A8A223FF04F1D7B845BA61E856543F788E5B79336F52A00523BFEA07B0C241B820
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a43a4d8c7943602f5c0916a3545caea47ea0181b705be49c5bce156ee31416dc
MD5 437c73dd09c807de58deab56f75a5bad
SHA1 a76d2b178288ebdcd43b0393dbf0a3adc09648fa
SHA512 53f0b40fe97c981586d1151a294ca46b2a43dd34506e26cbae5685d4531eebf2c87a787260b04e435b157b93bfd76ab7a53b8e94b05b15594dda1e4eb770a2b2
TLSH
T10341CFF7C3E8867D890156F4BB146E2BCE2D0915432C3C5AC9E4AF1B97E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 df256d87b8c391d1adc959ccb249379409acad7708bf9f30e58f3e2cf9867ebd
MD5 67158808c7bb966ff5292c781fc0205f
SHA1 2ede2d4faa609c9ad2743d29836b3d4580646cc1
SHA512 94fc86e3b72c5e6c0524c7202c5882e3afa8c99bfc9cb9f51e89399d8ebfcb655df07a9799622d9aa65a0c57ea8797f043c8eabc432ef884f85f42fa54dcb5d7
SSDEEP 192:sxRORQbH/fF+sSTgKrjDtzoA8p4l/g6+WNIYE9iK1GHIgDSJ:sxROUH/fYsSTg5w/5IUPq
TLSH
T10942B616A9289D7B9CCBD21DBB657F53E6F95032A1D41E48A6FC870C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 29697004686b58ec255a6b5e8658a84a9b8173affaa74e62f3541cac52f4188d
MD5 dbe7d667d20b37953fbaf96d0f206b23
SHA1 dcad2acb5e794128d099cad0e30b90e47edbf5d5
SHA512 85f06ed1b5f37d75f43fe1ab10cc7bea59d34bcfda7b0e0d84a03203d143d31d7fa09f68525df9cf608ba11220131748e8e89505299b9998bc6024b3f1a4e589
SSDEEP 192:sxRlRQbH/fF+s+6KrjDtzoA8p4l/g6+WNIYEBiK1GHIgIJ:sxRlUH/fYs+65w/5I4Ps
TLSH
T18C32A61669289D7B8CCBD21DBB65BF53D6F96032A1D42E48E6FC860C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7f0f5a22964088b5575aa484e63646ef3fd9628006f1c58b762e347ada97001e
MD5 2d5e0251511d9e18fd8c1a48bc926bff
SHA1 338ea58ec1cfe87c26b74342b1b190aede5083d6
SHA512 c7129cae2d388e559aba944c46c7bf94aff2515c23a022f479c1b0cafc16285f2e580a9ef8aa1e71bdbc59bc8effcc64df134a5fa7b356b11aa1d555310c7709
SSDEEP 384:0OhQi3gfCtgHZFfeQKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwY9VHRA6roZCK:0UQi3aWgH7feQ8F1+UoAYDCx9Tuqh0VV
TLSH
T139B2FB2B600DCB7E4F801AADEC196FD76D9802C796588D4087FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5d1d18dad77fd78af29ca09e0d55154ebb1484236e1817a8138667906f354490
MD5 800928c06aa48c9c8a699f4ce8c2f30b
SHA1 511f35472811c3abe06e40031c37732296e918e7
SHA512 f2aea4014690af64cca558eb534092dd069924b7c6f6d47bb3e1ed10f8a7f3a4bb548147a96832ed14d90bc9302f7cb787f2f3d0267d7e2b956b1b544f3b9da1
SSDEEP 768:krv+4UNbdt3KqGa4DHqRt2K48dHeByERRFzjK3YPb:kbsbj3LGdHqD48dHSyw/Vb
TLSH
T19803BFB1A8689E778CABC289B5477A17BFF4421386C51BA4C5CD6F4E448B0DD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 60bec40473e8d79c09ef4775b5aa2b809d331f153a107b000324726a62bfb193
MD5 8037e565985addb0253fc68ef2d5e58e
SHA1 02612562dd44e4d208a58c50c6556a5d6ddf2ed9
SHA512 3fc546fbc66f30cfa25c1ce92ff166e49af714e239679e4906d27acba8504cf12948cc26408e1051cbf266f27f7b28acea0b2d957e32c0bd15d4f397a775e343
SSDEEP 768:w+3lqGC4DHqRtZK48dHeByERRFzjK3YPb9MM+:w+3AGFHq048dHSyw/Vb+M+
TLSH
T187F2BFB1AC644E778CABD34A76573B17AFF08223C6D86A54D1DDAB0E44875AC4307C2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9c97b68e92d00ee34513ce9778b736ff784ed5ffe388036b5204e938082d2451
MD5 1c341a6f6d9c76d613696319d00e4bf9
SHA1 5145973b7446bac4609faaa6ac5f0629763bce84
SHA512 85131b0d479dbd8945b9d98f3699b1bcd3f2491b7134e617e1d785206da4e49b0f5fba690cf8b59b3e8c46c7e66692b5d91216c1a4ed4bd4ace1c4010ec6bcbe
SSDEEP 768:A+3KqGC4DHqRtZK48dHeByERRFzjK3YPb9MM+:A+3LGFHq048dHSyw/Vb+M+
TLSH
T166F2BFB1AC644E778CABC34A76573B17AFE08223C6D86A54D1DDAB0E44875AC4307C2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6b8cc95289c9f491d55c25083040bf65e1524d55994dba6a9ebd9b711a5282df
MD5 ba58ff19cf03309e7080b90d40966784
SHA1 f08cd8faec12df6302768e613477f74e0c4b36c1
SHA512 1aec329a5bc7dd8471add8bfaf97346145b68fdd7d1aaeac7e08cb3c639f4e7ad35f12b76dd49290851f56f11dfbf726aab9863b7b8390fd7636639301a15646
SSDEEP 768:Ct3lqGC4DHqRt5K48dHeByERRFzjK3YPb9MM+:Ct3AGFHqc48dHSyw/Vb+M+
TLSH
T1F5F2BFB1AC644E778CABD34A76973B17AFE08223C6D86A54D1DDAB0E448759C4307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 033a4b40803f8bfea131d00ae9c360d0ddeb5863f7bf3678c09ae2add761affd
MD5 0a829ef8d3430a8952dcd9687605b008
SHA1 78c40a99bfc19c1a39b25040e8754dd1a28f1fe3
SHA512 5d556a8b8901133519b468f816569459cb8e8bb3b74ec4b524502ba4672e633d0ed71da1e16ac81a843a8304e371e2312de145e53dba89ff491fd1852fce7682
SSDEEP 768:Qrv+4UNbdf3eqGJvDHqBK48dHeByERRFzjK3YseVH1SCj:QbsbJ3nGdHqI48dHSyw/+EH1Z
TLSH
T1C103BE71A9A84E734CEB92897587BA17BFF4411386C41BA4C4DD6F4E868B4CD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f310b84-e752-4794-a01f-19320ea9e830.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6f310b84-e752-4794-a01f-19320ea9e830.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download