c71cbd4ab7b39821430d279075eb853e7c8544d2fcd5a7469622def31162b0c5

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
docs\404.html
Size 25KB
Sample260730-ptc8lsan71
SHA256 c71cbd4ab7b39821430d279075eb853e7c8544d2fcd5a7469622def31162b0c5
MD5 c5235d052b8a82d565f144731f920180
SHA1 f2610335e40f3b338471a35e866fecb9163f5afd
SHA512 948c5da2469e9c12952052751ca844e1396b4d304d52e8e78802bcc6c97312a170325f8db2f4c30aa33bbd31cf521898cec90461cba7ecfab3132ab199fadeed
SSDEEP 768:18BnXAx9AtTJN/ObxEAGZ4Zyz367072KlsHse0DFgFX8:1e9
TLSH
T147C2B05118F1343F415665F586F02A197E989037F587AE06BAECAB799FD6F02BC03828
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2636	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298888840868536"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{1862B41E-08B3-47E1-BD93-508B75AB84AD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 4984	4316	msedge.exe	89
PID 4316 wrote to memory of 1180	4316	msedge.exe	90
PID 4316 wrote to memory of 2636	4316	msedge.exe	91
PID 4316 wrote to memory of 1180	4316	msedge.exe	90
PID 4316 wrote to memory of 1180	4316	msedge.exe	90
PID 4316 wrote to memory of 1160	4316	msedge.exe	93
PID 4316 wrote to memory of 1160	4316	msedge.exe	93
PID 4316 wrote to memory of 1980	4316	msedge.exe	94
PID 4316 wrote to memory of 1980	4316	msedge.exe	94
PID 4316 wrote to memory of 1980	4316	msedge.exe	94
PID 4316 wrote to memory of 4220	4316	msedge.exe	95
PID 4316 wrote to memory of 4220	4316	msedge.exe	95
PID 4316 wrote to memory of 4220	4316	msedge.exe	95
PID 4316 wrote to memory of 6056	4316	msedge.exe	96
PID 4316 wrote to memory of 6056	4316	msedge.exe	96
PID 4316 wrote to memory of 6056	4316	msedge.exe	96
PID 4316 wrote to memory of 3792	4316	msedge.exe	97
PID 4316 wrote to memory of 3792	4316	msedge.exe	97
PID 4316 wrote to memory of 3792	4316	msedge.exe	97
PID 4316 wrote to memory of 1404	4316	msedge.exe	99
PID 4316 wrote to memory of 3040	4316	msedge.exe	100
PID 4316 wrote to memory of 1404	4316	msedge.exe	99
PID 4316 wrote to memory of 3040	4316	msedge.exe	100
PID 4316 wrote to memory of 4848	4316	msedge.exe	102
PID 4316 wrote to memory of 4344	4316	msedge.exe	106
PID 4316 wrote to memory of 2684	4316	msedge.exe	107
PID 4316 wrote to memory of 2716	4316	msedge.exe	108
PID 4316 wrote to memory of 1588	4316	msedge.exe	109
PID 4316 wrote to memory of 1588	4316	msedge.exe	109
PID 4316 wrote to memory of 5972	4316	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\docs\404.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x240,0x284,0x7ffb19bbc188,0x7ffb19bbc194,0x7ffb19bbc1a0
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,7101266378141836522,12168170922900591733,262144 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,9642338747187486467,5001091512435597493,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,6894720315238036783,6115291034479463924,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,12854350036731182938,653611390698435777,2097152 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,7241744649308975457,299485659923762602,2097152 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,3622428401815901457,10008420541747993237,2097152 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,6207730345997451702,15326923850155231913,2097152 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,6546730857982522155,5295517589970491242,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,194721465167283611,8701547524812960532,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4730966128385526713,4088018237551769397,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,4730966128385526713,4088018237551769397,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:14
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2849034184727366834,6429019438557604641,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,12706209845504876463,18112147144967806202,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,4457446840406474142,7628340042025965379,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:14
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,15083550949279890485,3856027052763278551,524288 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5020,i,13602322215437891903,9741135314961191504,262144 --field-trial-handle=2312,i,11217018721928454506,529937182801631664,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3dac36e675fcd64c087bcfab66c0d82ebb14bd327f7861abed5923bbd6d67492
MD5 e61b37b8ae49d2a7444705573072a10a
SHA1 bf5af4cbb1aed9ae2965bd40d8586e6d6027d9ce
SHA512 5b5d5347799677256d8fa70313694e23f87bc569e88846d2fd8ecb701351f588c4336a61145051117bd01707818c50a8e95fe81788115383a1a9f1a27ce47a09
TLSH
T1C661214B236E04E9D36A4A7250D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593985.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593985.TMP
Size 3KB
SHA256 ee8d67cbdac1631baef765650ea7dfdb7dab57f6c9a56443fd5b3068ecd3d929
MD5 65c3601ecd883e3c8cce53f4befcd4a6
SHA1 f998166d4d9ca32762228a2523c2dcafdfd27bc5
SHA512 b04fd0c8a5421fe18718a5ee545b7d5f9e5974b17b164128275ad0de5b46251baf064f24bfbe1104803a3b33cddc43a5177c4112483202fb3578d090c048759f
TLSH
T1F661214A235E04E9D36A4A7254D97B4436F186704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8e7ebf5571fdc3e16d8eb824a48e48ef5bb56ba4c6fd96ecb69789336fd9ba09
MD5 6bae8e1913d38c396f187498e171b9de
SHA1 285fa9f7d73585217989e4a9ae96279bd7f523bb
SHA512 f24458ab819f68a63a7568b17d4ba57a3e6e09659541d54f7872f64f134d8f9b4ad0a2e6cceb8460a568b3c9c2ed3e489f4b2c9f00f4bc9b7dc94137a247f378
TLSH
T17641DFF7C3E8967E890196F0AA146E1BCE1D0959832C3C5AC8E4AF1B97E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 789aa2f8e44f1200bd2efe134c960a640d9f7d7613ac4705f7bf2c9ab80a9829
MD5 19dfd864d9f9085cba6c4b81ad63409e
SHA1 44adcc1dad576e1dcc8e8b1ada466be1cfff272a
SHA512 04ce65badbf2f5b4430c84624308820ea0a8245f83bf9039a94883316a3ca6562a6037821d0da8f55eb08c4bde5504ac1bd677406710c9571ee2be9ee2d11ccf
SSDEEP 192:sxRTRDbj/fWsWbprQ50zoA8p4b4/g6+WNIYn83h1G3IgDgJ:sxRTRj/fWsWbOh/5ITRIw
TLSH
T18E32951A6E28AD3B4CCBD21DBB55BF53D6F95033A1D45E48A6FC8A0C04EA7CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9063f95a1f9157fd1d192541d791f42e4d14456b24e04f2f9eb066c95586cc3d
MD5 635f83c1d3cc9d752c8b5224063a3974
SHA1 e9d1d1ff97918a8f436794a54082103116868261
SHA512 7f014105370ec29659a615bef7d95d70837c3ff9d551b9e0f449874d132c273784b81e5685a2d637414165460d3e44d868c2f9c72d1d9afd2845642debc54df9
SSDEEP 192:sxRTRDbj/fWsWPprQ50zoA8p4b4/g6+WNIYn8zh1G3IgDCJ:sxRTRj/fWsWPOh/5ITFI6
TLSH
T1A142A6166E286D3B5CCBD219BB55BF53E6F95033A1945E48A6FC8B0C04EB7CD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0935c94a8be6e7ca8e8e1b6ed53daf96882aa5800b6ec14c9e9789f97735c28b
MD5 ad3d5381f9faac560bfaecdaab018874
SHA1 59da2e0900c51ff6c47cd4e6046079fad02b2329
SHA512 ccf4454fe2e58b3d13d05f9daeef2588515b144684306bf5dd1af188034f1efb6ff01cacd544506277b6b958fe594bf0a4f1bd3c51d26ecb2bcdcb7cbf428348
SSDEEP 192:sxRoRDbj/fWsBbprQ50zoA8p4b4/g6+WNIYn83h1G3IgIJ:sxRoRj/fWsBbOh/5ITRIs
TLSH
T1DF3295166E28A93B8CCBD21DBB55BF53D6F95033A1D45E48E6FC8A0C04EA7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 fc1c285689671b7f780fcfd61f5b06fd87075e1369afa26ded1a693de6639721
MD5 ab452c2a842e4720370101341a109fa4
SHA1 33d9abc337abc9d105c034b40f935c87b16f975a
SHA512 a4c8c8b36f57f72654c945c1d4c5ca4a67a47d0d09fcea0a734bbfb395f01a48fa11b0ff0c8d722261eed9840424bb85a30e0ffb4ec9bbf1e6aee66bf0430a15
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPwrohMu:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vk
TLSH
T1E6B2EC3B604DCB7E5F800AADEC19AFDB7D9802C79A988D4447FE950C02C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c4ba10274dd35d96d112d00a90636629f991b9cafc6cffb7fd852efac48ef8be
MD5 2ee5eebf6ed3a2c4761a264bf38642c5
SHA1 c49f57611d9326e75e405db328d1ece55a9496f4
SHA512 b64ededf9f96858ce4af0d6db944a5f93fcd1cc9ba213e32bda8416e9fabde176643c379c744bb82692bb88ed93e814cff94b7a2ef7ee2ccd6812e5ed63928d0
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQxTGK8Q+:CtaTHd3LeTInPlOgxU1NAj70HS3eyEk0
TLSH
T14D915642717A0640383D7A5C84A4DD2FCAC27472741AA47B7BA916B60F2FE139EFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

94c9ce72-03d1-4d0c-a466-cadee0e28465.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\94c9ce72-03d1-4d0c-a466-cadee0e28465.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 eee8fd34fc8cdfbd08d5da69f64252f3c6730433cc6c410b6abe256d854d2378
MD5 00d8d9a142c04b25d34121fd304cf5e3
SHA1 9c359a88bbc05e5822cdd19deea6342e0c00f5b7
SHA512 5c8597649cd9aed5fefd913a5f4312d525255f6cd3b3d412d4422b567e4753fdcdbf8a3c721d56fe9030da4ac3bf3e489b1fdd7764316dff1a5d24a75fec772c
SSDEEP 768:hrv+4UNbdZ3a2DZIO0XTNzc4ReyIsPvb9MX:hbsbb3otc44bsHb+X
TLSH
T11C13CE32FC388D73ACF66285B04B35137EF8512B82C91A84D9DE5B4C0A4B4ED532B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 27c14d7fa205d59221f5513a16c8ebe81269e2d7c2e3c253d97ec7148a418837
MD5 3d6e70edda874ba763c13c28f2d943ed
SHA1 f066fdaae0b168ba9d910b2a15bff14ab933b0c0
SHA512 b9e5749424b9f685afa5acbd5076ceea7ea6a07a9f8ed38bf8a64df99ccf077b0ab21d4cefaec33423b428ec9a6fc219b38a6ccd04851756fb72883f91b9bb8f
SSDEEP 384:/ZcIu38NOWp7waXwJDZNfNoXOVSUU+GXRFXETRzcoXfK86sfxEZxxsIj4lBvhObn:Xu3Y2DZIO0X8Nzc4ReyIsPvb9Mb
TLSH
T161F2CF32FC348C73ACFA6646B54635127EF5912BC3DC6A8495EE9F0C0A475ED032B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 16629166ba3a78a7c6719d0277733d40017be6309bca4b3072195a77fc6a9a0c
MD5 9dfb3d962a1ebcbe62073f1a52ad7581
SHA1 cbd0226c7d05ec42b9896519768a21ffede9a689
SHA512 cc4dc98b009229740ccd112765f3f5bda4f76bfdcaf7ca2dc8aa11762fa9e526c62c0d6722f646d8be15830488d84e48253710f691b92a4a47a4cfb4af07f0de
SSDEEP 384:mZcIu38NO5p7waXwJDZNfNoXOVSUU+GXRFXETRzcoXfK86sfxEZxxsIj4lBvhObn:0u3D2DZIO0X8Nzc4ReyIsPvb9Mb
TLSH
T129F2CF32FC358C73ACFAA646B54635127EF5912BC3DC6A8495EE9F0C09075ED032B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4f3cd7732e061faede0c9e7d73cce89ee181c39e87ef7f50a2ebcf8f6f15494f
MD5 9ee22950f6b19803b7666708316767a7
SHA1 2482775c9c6d47ae7a9e6b56cb436316cc509073
SHA512 22e89d4a923acc81d98fc809022c659939e43a8ee47b54deab090e7469f9d4f5cad17dbab09b66fe73cccae51034507a442683b0cc50e86fbb6ce6a0c7e8c4de
SSDEEP 384:/iFiZcIP338Ne8TUNTUlIl5p7waXwJDZNfNoXOVSUU+GXRF7ETRzcoXfK86sfxEv:KFQv3pwgB2DZIO0XwNzc4ReyIsPvb9Mb
TLSH
T12103AE33AC64CD77ECFA5B85F54A3212AEF54167C2D9AA94E6DE9E0C05075EC031BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b60ec31fb0077bace84c32bd362608244a5d6f251ef7de8bd37cc9ccc81685d7
MD5 fcc608138b0bdf68bd47b21062debe46
SHA1 bb15e519d3d4e09cef798a152bedb920e9fd981c
SHA512 69e8e1e90c290a1507c3c328887ed7d24a7b1184ed483afe9f00dad4178f53326ec6edce21afac83310189c5d3770099442a74c6b0872a808a1f2d6f3337213c
SSDEEP 768:6rv+4UNbds3VBDZIO0sNzc4ReyIsXHeVH1S5D:6bsbS33tc44bs3EH1Y
TLSH
T1C003CE32A8788937ECF6A686B50B72137EF8612BC2981F90C5DE5F0C464B5DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbeed3b5-18ea-4ad9-bdbd-96dbc8ff04e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cbeed3b5-18ea-4ad9-bdbd-96dbc8ff04e8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download