7ea6f09a15335af4a10b4076414826401ca2e283ded2707fc6f2924b336cdfc1

Analysis

max time kernel
149s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cookies.html
Size 11KB
Sample260729-ap2cbadb24
SHA256 7ea6f09a15335af4a10b4076414826401ca2e283ded2707fc6f2924b336cdfc1
MD5 45bdfff3d8bb46ff450c6e06a6fe6f23
SHA1 bcdd1959ac3c3165a8029055d1acc2f23e99b67a
SHA512 c796c1971e563bc33bb53dc7bc860a8635c8670b8c951eb8793ec49d574e594ab86070307651a4fd1502b6db89b540215ef1c9ae0c78a78e0c2372a7cafc0e79
SSDEEP 192:OoEjhpi3l0PJsv7sjrfrtHz4P+vgr5oaDxZbiDOx9Hi94U96gaJgPCZgW3PoJ:yO3l21z4P+vgrr9NC9ogA9Zg
TLSH
T1EC42FA37B2C8217D035202E87792B74FF767D12867684C1458A9A47C0BD2F968D7739B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1008	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297588441598000"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{45D9CAA6-7723-489B-9B1C-7E3F33C92257}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4852 wrote to memory of 5736	4852	msedge.exe	89
PID 4852 wrote to memory of 2652	4852	msedge.exe	90
PID 4852 wrote to memory of 1008	4852	msedge.exe	91
PID 4852 wrote to memory of 2652	4852	msedge.exe	90
PID 4852 wrote to memory of 2652	4852	msedge.exe	90
PID 4852 wrote to memory of 6064	4852	msedge.exe	92
PID 4852 wrote to memory of 6064	4852	msedge.exe	92
PID 4852 wrote to memory of 2692	4852	msedge.exe	93
PID 4852 wrote to memory of 2692	4852	msedge.exe	93
PID 4852 wrote to memory of 3536	4852	msedge.exe	94
PID 4852 wrote to memory of 2692	4852	msedge.exe	93
PID 4852 wrote to memory of 3536	4852	msedge.exe	94
PID 4852 wrote to memory of 3536	4852	msedge.exe	94
PID 4852 wrote to memory of 2028	4852	msedge.exe	96
PID 4852 wrote to memory of 2028	4852	msedge.exe	96
PID 4852 wrote to memory of 2028	4852	msedge.exe	96
PID 4852 wrote to memory of 5068	4852	msedge.exe	97
PID 4852 wrote to memory of 5068	4852	msedge.exe	97
PID 4852 wrote to memory of 5068	4852	msedge.exe	97
PID 4852 wrote to memory of 5796	4852	msedge.exe	99
PID 4852 wrote to memory of 4532	4852	msedge.exe	100
PID 4852 wrote to memory of 5796	4852	msedge.exe	99
PID 4852 wrote to memory of 4532	4852	msedge.exe	100
PID 4852 wrote to memory of 2100	4852	msedge.exe	102
PID 4852 wrote to memory of 1296	4852	msedge.exe	106
PID 4852 wrote to memory of 4888	4852	msedge.exe	107
PID 4852 wrote to memory of 5612	4852	msedge.exe	108
PID 4852 wrote to memory of 5436	4852	msedge.exe	109
PID 4852 wrote to memory of 5436	4852	msedge.exe	109
PID 4852 wrote to memory of 1892	4852	msedge.exe	111
PID 4852 wrote to memory of 1892	4852	msedge.exe	111
PID 4852 wrote to memory of 1528	4852	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cookies.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ff8a1d4c188,0x7ff8a1d4c194,0x7ff8a1d4c1a0
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,5602517702446517608,11394599138562499552,262144 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:2
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,15005511800638069525,4734254947700812741,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,3415717356003824588,13802710149112159166,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:13
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,14558399441219747041,14091824420687841863,2097152 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,8367591578636870186,17849536641462729905,2097152 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,4203734834528962280,2004234348157887948,2097152 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,1875432439690518851,1630983774943539592,2097152 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:9
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,12248426790410492154,17806716624301805909,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,17169433703294652021,2593512420540870468,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8473334165041193280,7043600775652325385,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8473334165041193280,7043600775652325385,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,1080568315713818574,8858078689085828766,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,18429195935095794515,5597551422343444437,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,11369062750445721936,10585337824448690327,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,537937420144851280,14814232564036206934,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,2960260313500599195,989503123871749733,524288 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5464,i,15944795855959673775,2416304084959395532,262144 --field-trial-handle=2620,i,639111783231698373,14876316745305744187,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 749c55e66c238bfcb8d65faffcbcc63c698ed3818c2005c756277e8508b348ad
MD5 f0bbc6e725f38a562db9e771bf17371e
SHA1 50c48afc319b0ea03f6889863af95fd7bfed7d1a
SHA512 d73e86b8939ead349fb08a24022ee016ced4538359d98a7ded1c24bc007c66cfeb62fd42bdc634c01682d4ea52bc18e83e3a8cabe01e18a822ec4cc915792374
TLSH
T1C06150D5231A2B92EF204EB1DDE2764D35F3CB54090BAAB048006D360B2EF1954D2DE3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ac15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ac15.TMP
Size 3KB
SHA256 6e1f4b11cd485fae78f191c07f66be1dac9976b1db65cd2cace735e98b0da009
MD5 5d90747276c01822b5892cd17abf782d
SHA1 8ecfd0029461c1e4ca3a789c7f90249b655256ad
SHA512 1f2b18fe380698ee223bb8c1f45a6645dac236d8314cfe8881aae5f5d8f864f75c58a3c54944840e723d3863668018e2cd57bf597a1fd388a7262fa81c659aa2
TLSH
T1946150D5271A2B92EF204EB1DDE2764D35F3C758090BAAB148006D360B2EF1954D2DE3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7d2abced67e66a5c04e8ea06cb29a3a730f370c6ef1480b1d1f06432ee46df4e
MD5 b3724df4b33377d4809e77940f5263af
SHA1 56b9c539737e09894ded24f2b7fbbee887d57c77
SHA512 ad2b35883448466e0965bc14c3b10d773ab3ff1535758c93e15d72b78a75bbaba074cea842955634265ff2f7a2250cd1ba774b2bd8cd891ebfd642aee1130093
TLSH
T1CC41BBF7C3E8867E890156F0AB146E1BCE1D0916832C3D56C9E4AF5BA3E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7a084fae9e93b191919603c363f1f0b40c800d6a5aaf383bab6f414113a7685b
MD5 973ae615977fc2c6e8e68ef6324d08fd
SHA1 c186434fb565de3c16231a4dd743446ae023535c
SHA512 db57d785aed8ba27e6ee79ef5174a282efbefccef2997f6321867efb88d4c4fde65185c793e799df2cb4417e6ffde9fe3a9ca2dbf94bf95def1c9194339d884f
SSDEEP 192:sxRXRsbM/f5s/K2D3KCA94/XzoA8p4C/g6+WNIYD9/6SoGdlIgD0J:sxRXUM/f5s/K2D3Z8Zj/5IzSHk
TLSH
T1A73296166A289D7B9CCBE21DBB557F53D6F95032A1901E48A7FC9B0C04EB6DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e3083b8e7b4ad7a34bdc89e0f20292395a928de5fb1cb8b4b353b2819e9a9af5
MD5 5dbde257c2000d300de87aae48ecf813
SHA1 355579dd616f3af31866edcdc8b1027842559a38
SHA512 5f4b972b75586eaa36ae51d731f672308b825289f7bae0e0d8137dcc50055696d5c4447fa6fac20de086c20850fa67227f187402c58cdaeecf2ef48bea034fcb
SSDEEP 192:sxRQRsbM/f5s22DiKCA94/XzoA8p4C/g6+WNIYD986SoGdlIgIJ:sxRQUM/f5s22DiZ8Zj/5ISSHs
TLSH
T17932A6165A28AD7B9CCBE21DBA55BF53D6FD5032A1901E48A7FC970C04EB6DE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 01186e8e6ad78918196714e8fd1fe1756ff1089af574f5de04ee59c2b37a4f8b
MD5 4062c3c3195c90753ef98567fa1a0b3b
SHA1 cb93ba0fdc349a4dd4606dc767d1ade907de72f6
SHA512 23da97bcbc7d8d9d6cda20832c9b6f42b7d3b84fda6ba35852f0f3d7ace230905a49140038c982aa8a4bdeb907c637abfc1988d23058c043e86aa1aed53e7aa8
SSDEEP 192:sxRXRsbM/f5s/K2DiKCA94/XzoA8p4C/g6+WNIYD986SoGdlIgDuJ:sxRXUM/f5s/K2DiZ8Zj/5ISSHW
TLSH
T1CE32A6166A289D7B9CCBE21DBA55BF53D6FD5032A1901E48A7FC970C04EA6DE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 bbb5c7971f7c259e16eb9ddd40b380417a6a2a2f65423b4a74353e9c36f02e8a
MD5 508dabbfefdc65b2151c3a4b1861c09f
SHA1 e0047a7e00488a9894cbe71a14fd14c693493f1f
SHA512 55dccc1b943c83f15d35d00bd711a1f706b5199cb2212853195e6102a20748d2912263b0dfef178a5fea78de30a11d31e7b6a2dec271356276c3ed376bf313f4
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcXropDn:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0V4
TLSH
T1E9B2EA2F200CCB7F5F800AADAD196FD76D9802C79B588D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8f143fdfa0c9cc39d7e832a990d89208f95cc8b8cb10f4a6ba98ff01eb8ce3e6
MD5 8af1bcfd32d3645a8ded4b2cd5c891e0
SHA1 264dd45d00a76ca9922d7971a1564fc05e7266b8
SHA512 4bd8315cf9506809392cc3317ad32e3a6a29596e146257c1be83113cec0e376993fdeab6bf61e0d9e98cf3855e04b991876c434bd955a902a40c9d15c2d41f24
SSDEEP 96:KRE/iE/nE/OE/iE/UE/0E/kE/iWE/sE/5E/RgE/SE/iK4E/HgE/IE/icE/yE/6Ea:CE/iE/nE/OE/iE/UE/0E/kE/dE/sE/5M
TLSH
T19D91B941317A0610383E6A0CD7B9886AD2C1B567309CE56B7BE955B60F2BE674CFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a4538.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a4538.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b50b374f34b8c5165b1b69faa47adff2c029c01006e2daf19b93bb4af963df84
MD5 77e945f05611e74e5c1ae565fe171a40
SHA1 3d2a4f3c9544ad63a8ab97902dafecbe9338fc4c
SHA512 aa0d37890e0bcaa56ba8da0730107005daf693a15274091b712489d0425bd0f7dc83b625b9395178c95c0c2a96f5afb134efb7dccd240450cab509920c880980
SSDEEP 384:lZcI6o38NBkAeRCLP9RnWZlf8hyEG6f77h7F+yy2rEoajo4cdR8eHhVODjYPNDUl:d6o3aki0QWirEnjN3Gac1FnMjUy
TLSH
T1F7F2BF726D748DB38CEAD385B9433B03AEE08763C6D40B9496DDBA0C55D75EC130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 09e590713f5dafcd666e63a5d711e081380052ef4b483ecfad21c76a7c9fae30
MD5 9e88586d5904f18bf40e257797ebe6f0
SHA1 2ba36e877e086f01d6d363aa371f6c7f5b253d70
SHA512 94c9bce985cb018c7be0d9bb8a0819653a5a3f1d2a0aa1578ed265691ac11f4c806519dcdf8781c27498da8ae8731b74e7f14c22ac0f1b2ef989645dd1b5f2a4
SSDEEP 768:krv+4UNbdzo3jki0QWBrEnjN3Gac1FnFm:kbsbdo3GXBQnjMaoFm
TLSH
T1AE03CF32A9788DB38CF7D285B5473A037EB4465386C50BA4CAC97A0C46DB5ED230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 773cae5a4c250787ba3014d11776af41a0797646af1d4392380d0327bfd0bb6b
MD5 b387bad8671adb9121b60d9d7dd707d1
SHA1 36957140a2ae92046423427cbb1eacdd461c3372
SHA512 01186790780b3e7dedc741b887df6490b49e956767bc7c1af86ba8e9f45eef075b58bdbf4379ed880f37ba893c07d8e26f4c3f6f2d9bbf95474d70819ba73f18
SSDEEP 384:yZcI6o38NBrAeRCLP9RnWZlf8hyEG6f77h7F+yy2rEoajo4cdR8eHhVODjYPNDUl:A6o33ki0QWirEnjN3Gac1FnMjUy
TLSH
T1DAF2BF726D748DB78CEAD385B9433B03AEE08763C6D40B9496DDBA0C55D75EC130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b3ca2f1a4d4c6ea96b4088d355710ed896a81a4ac7de7da9d8b53d79eab9683d
MD5 89b41478963f9c2374dfeb592eee3c07
SHA1 6918f9df72fca5f35b303c822aca8b6c86f10bc8
SHA512 bdd9a4ad3cd90cdc6f02de708bc69815527c46f53114e3db0704ca8c3ea1162c8267162ea0d7342509735c6938ea7ec37eebdec0f8ab391a59929a510c1bda8d
SSDEEP 384:yiFiZcIno38NT8TUNTUlIlkAeRCLP9RnWZlf8hyEG6f77h7F+py2rEoajo4cdR8H:5FQno3Iwg5ki0QW3rEnjN3Gac1FnMjUy
TLSH
T19803AE735DA489B79DEADB85BA4737039EE04363C5D44AA0E7CDAA0C11D75EC130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 44b1686be09d0a93217b7d459df2315d78af0c1285ab5bb07407dad7e8af8f84
MD5 543cad6430f5fdfa11fd66988f852af7
SHA1 0f3c909fad433db46f51684095fe1cae5b82bb73
SHA512 6aa0bf8c8287880ff48094e2d8b9cafd8a7c87e6572504ee920c7a9f8c7fa5fe5e7b3a54a0d315224dc61b318bf8d1d8b50bb33a837b490aad7c87cf6f6312d5
SSDEEP 768:rrv+4UNbdS3Ymi0QyrEnjN3Gac1ZXeVH1SCz:rbsbg3v7QnjMagEH1V
TLSH
T17703CF3269A88AB38CE7E38575877A037EF4525385D40BE0C6DD6B0D42DB5EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download