240284aed2166c158b460b0ce585199f664fe43b2798a6d4578cf7fdc7e29595

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 15:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
packages.html
Size 179KB
Sample260804-s89rxadb62
SHA256 240284aed2166c158b460b0ce585199f664fe43b2798a6d4578cf7fdc7e29595
MD5 e7ca3d25034e87aedf9e885651ba71e1
SHA1 692abeacca009299a147f85d72e128aee6658733
SHA512 cd3c8e515688710467419d467ce5a1799c0b907ef5d800f6d92c8faff659cb3f74838aa64d9234af53b52092e30c55c4457d1464951115d0d9ea51fe981be54a
SSDEEP 3072:rJSAYSHqRP2kcAKQDihGZ6IIHq3sDqJfpmo:rMbwqRP2atDihGZ6IIHq3aqnD
TLSH
T14E04EC7548ECFB3B431A1BCAF210BF59A08BB837F59318C1F2AA5E454B90FA1595305E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303322017616136"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{EC7670A3-4492-4210-906B-F41A79EC1F6A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5924	msedge.exe
5924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 3320	2040	msedge.exe	88
PID 2040 wrote to memory of 2952	2040	msedge.exe	91
PID 2040 wrote to memory of 252	2040	msedge.exe	92
PID 2040 wrote to memory of 2952	2040	msedge.exe	91
PID 2040 wrote to memory of 2952	2040	msedge.exe	91
PID 2040 wrote to memory of 5440	2040	msedge.exe	93
PID 2040 wrote to memory of 5440	2040	msedge.exe	93
PID 2040 wrote to memory of 1376	2040	msedge.exe	94
PID 2040 wrote to memory of 5020	2040	msedge.exe	95
PID 2040 wrote to memory of 1376	2040	msedge.exe	94
PID 2040 wrote to memory of 1376	2040	msedge.exe	94
PID 2040 wrote to memory of 5020	2040	msedge.exe	95
PID 2040 wrote to memory of 5020	2040	msedge.exe	95
PID 2040 wrote to memory of 6124	2040	msedge.exe	96
PID 2040 wrote to memory of 4548	2040	msedge.exe	97
PID 2040 wrote to memory of 6124	2040	msedge.exe	96
PID 2040 wrote to memory of 6124	2040	msedge.exe	96
PID 2040 wrote to memory of 4548	2040	msedge.exe	97
PID 2040 wrote to memory of 4548	2040	msedge.exe	97
PID 2040 wrote to memory of 4068	2040	msedge.exe	99
PID 2040 wrote to memory of 2052	2040	msedge.exe	100
PID 2040 wrote to memory of 4068	2040	msedge.exe	99
PID 2040 wrote to memory of 2052	2040	msedge.exe	100
PID 2040 wrote to memory of 3496	2040	msedge.exe	102
PID 2040 wrote to memory of 3220	2040	msedge.exe	106
PID 2040 wrote to memory of 5832	2040	msedge.exe	107
PID 2040 wrote to memory of 5520	2040	msedge.exe	108
PID 2040 wrote to memory of 700	2040	msedge.exe	109
PID 2040 wrote to memory of 700	2040	msedge.exe	109
PID 2040 wrote to memory of 5792	2040	msedge.exe	111
PID 2040 wrote to memory of 5792	2040	msedge.exe	111
PID 2040 wrote to memory of 5924	2040	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\packages.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffbdd72c188,0x7ffbdd72c194,0x7ffbdd72c1a0
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1916,i,18444199111384067472,12936672051246886589,262144 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:2
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,4378093559704019517,4565822131869853592,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:11
  2⤵
  - System Time Discovery
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,10512682716792653146,6704724955972674090,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,14753418375787304230,1503064347501249593,2097152 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,18055539264409782342,4708529077237434204,2097152 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,1339145645866998362,13951954726952514938,2097152 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,4124476061763918855,1478440174380408535,2097152 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:9
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,9066012486808163817,14912212607206823746,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,17627944829725356642,1637052883000495572,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,12724663549485197832,13396275979366525100,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,12724663549485197832,13396275979366525100,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,2049257658727168987,6468704813861596283,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=1132 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,7827900588606361771,6270855862575319663,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=1144 /prefetch:14
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,15253133603571632370,13141432744787389014,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,10034314882741892596,11879686791981681023,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,1919001598356239783,13391857527676483864,524288 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:14
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5656,i,8047933955635738459,3509640182457188854,262144 --field-trial-handle=2724,i,3643829317876255261,6454315908093459757,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 27238d851601b0f29c496b84d7101135825ec61c2b7a3dfbf4fae1033ff02574
MD5 909ce8cf19d3c1ddb7aec694f899ca72
SHA1 af90cddfdba026828839cd0d98d89d479faca557
SHA512 686636cfe5afdb27716029809c3c6113398ff1fabeb514b5c457db2d4a5b73ce14454a4d9e12a21a8a8ac0d137d510c1f0206c9acd52173a7e4fe64d03cd576d
TLSH
T1225122B9932219D9E73C74B1FAE15444B6F0A42A25072A107C407EF45E8BF8870F9C1F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ab0b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ab0b.TMP
Size 3KB
SHA256 be9311d85cc8d57d59feb5746cbe4e1aec27def3f5f7d60bdd5ca3c0aa3bacbe
MD5 e48bae9611c5a2c8e966056cada1905f
SHA1 9bec86d775214902cf729b29b89e2da9e0ca2860
SHA512 d81498f7f9b3bfbab3618e58293ab569933f9a54fef839fa4e62a7f03eb0ad2e06a48b6d31635d0af99286449de5924f1229daa6f01b4176e5079104f607581e
TLSH
T1945122B9932219D9E73C78B1FAE15844B6F4A46A25072A107C403EF45E8BF8870F9C1F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ff053122166417a22c769259e8644253e8af8c787b3c633beb1c0c7a810d3775
MD5 69572dec503f07878154c1eca998494f
SHA1 a4713a3ac961578893b2ce6f5b2f97a4c38b5ea3
SHA512 312a5f9262c0dbce033805d1f0a583110f1fff9835fa78f179791a0231f34b3a218d832da84e475224455aa58b4fe31433b968b87c8c6847ea1b1eff21009737
TLSH
T1BB219DF3C3E8567D894181F866182E1BCE2D0955832C3E5AC9D4AB5BA3E18B1E25095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cdd0a75b7eb20e90f10b8375dd3972f6dcbfbc5e1a5537f0c4d7c0e728803f86
MD5 d6caf38cf9fa2ca394ff91ef69af94f1
SHA1 f5d4071f5af1ec01d98eeb49437543707dc73554
SHA512 75ec84cec968e311f23ff97fd0b9ec9748aeb27eabc4362d1e736b1b3624536761a72426f7a6a7150a81c2f4c777b83058beeec4dcf3ea472b116d9a1179339f
TLSH
T175419CF3C7E4967E890156F0AA186E1BCE1D0915432C3D56C9E4AF1BA3E38B1E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b128de565d611edb043266cfb2033a04a89602293bd0da95f3ab9386fec5bc23
MD5 5c8e17da81f02ebe97b205ff9a09d02e
SHA1 7aa0b6bb18c99cae3929ccd73ef8c5bd5cfb28a7
SHA512 a03b37265cc29440b72c04d34b5a2cf29ea0c04d6a258b9630ec9031327c5309a28848765484e9ddeaef275f5fb0c80860f3eb09ad84fc05dea0b6500bf5e480
SSDEEP 192:sxRDRGbW/fWs78lKCA94/xzoA8p44/g6+WNIYD986SN+G6HIgIJ:sxRDGW/fWs7AZ8f9/5ISSNUs
TLSH
T14332C7166968A93B8CCBE21DBB55BF53D2F9603261D02E58E7FC961C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 df9ffed1d798e6c18d8ae24fbca1c2bd5fe323a1668cf3dbdc8d23c097133157
MD5 c588b8e33ff1818b6047e3e09b40e358
SHA1 44c4f299f509430e7b9a5c75a33635f05f29b251
SHA512 8c56e8beada33f6c75a3435b6aa9feb2c62a2297d0400f3f78d9773049ef20086c4f2370dbb5554ab1e28b8d50214702ee2d4ae88a73686c9876d77345a45d5e
SSDEEP 192:sxRcRGbW/fWs68mKCA94/xzoA8p44/g6+WNIYD9J6SN+G6HIgDhJ:sxRcGW/fWs6HZ8f9/5IZSNUf
TLSH
T17542E816A968A93B9CC7E20DBB55BF53D2F9603261D01E58A7FC9A1C00EB7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ba624823fca3e5e36e10474123a300c9830c097f909f475d8c2376b12ca13497
MD5 152eb41d300979e7ba10ea567a881dc7
SHA1 234dcb938e3bfe3887352544b3e4678f65d2d995
SHA512 5a7c621e7d77983426b82eb1a980358dc879307ad565dde29bf95402e29e599c78985e41214f9833f455e4bffc1e15ad970d10840bae485ed75fdd9f6bafdadd
SSDEEP 192:sxRcRGbW/fWs68lKCA94/xzoA8p44/g6+WNIYD986SN+G6HIgD/J:sxRcGW/fWs6AZ8f9/5ISSNUl
TLSH
T12C32D916A968A93B8CC7E21DBB55BF53D2F9603261D01E58A7FC961C04EB7DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e27276fd8a9d39797b61e0cbac3b8111d541fcc8f5eb27b0f3664d50e9466711
MD5 c237807a74bc05556d00720718adfd68
SHA1 be691c2ed996030acaa9e5ae9790dc628e135fb8
SHA512 4c37a9bfe6fadb058c7449e530b5e08d609d13c7564aca2944d7891505c060d888f0d7414089e4ee644dcefa6a494ec171499f51acab899fedf7afaafdf85493
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRczuropq:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0Vi
TLSH
T18DB2EA2F600CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ac3e1e810d28804bd8e2f50605ba534fe79234fc6c6a5b8baa54e358ecf4809
MD5 d44e85870538fc5b94fb924818674a6c
SHA1 3e37a7023ae0efb03e35e3c6505e9e3181ec9953
SHA512 021d3fb246cdb4d925f66012a7588ae0646b519f00bcd97f1ab745f946ebc0f387ede2df6e110cd730fd1cd1e3dcee45afb4a88bcadf42d5ee1cd5175c2c8f5a
SSDEEP 768:ti3gjni0zEwUrEnjN3Gac1FyHojKgqmU0I:ti3gpzEZQnjMafHfgRUr
TLSH
T14FF2BF3068A49EB78CFAE386B6437642AEF04653C5D40EA895DCBA0D05979EC530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 574a105a37ba812e46d0a3bd770cc7d41a36ad5df8c8c8064a96588f2006a254
MD5 be0d7dce4614e49dc4dd7dc15e73d96e
SHA1 b8e316837f29e24687da621600670b12f0b92b2b
SHA512 b5c77d1a7bb8379f07a9b0a96e415b4139a3c9f60ada88b1204f4e32e1a27ac68b5bde60b509d0928496f3e102d4f38338bc93373da6fbda3b1c27bbcaa3d7cb
SSDEEP 768:Ti3Vjni0zEwUrEnjN3Gac1FyHojKgqmU0I:Ti3VpzEZQnjMafHfgRUr
TLSH
T172F2BF3468A4DEB78CFAE386B6437642AEF04653C5D40FA895DC7A0D05979EC530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 eab68a676d9601d1fed333b32d9a0ac31049732639ee0bf427fab9aed235f0f0
MD5 c5c6f2f36db412446ba8b0a5a0b9d48f
SHA1 28cb933bffee2733135d64897415a7c9c38f094b
SHA512 c27cc5faad61e608278306ad0f09a3895152cb909d9742924a7207ab9862de14521b4bb4714af5cfb698fa5400570748057df68d446a82321f962cac99f58970
SSDEEP 768:9rv+4UNbd53yZni0zEwsrEnjN3Gac1FyH4:9bsbv3yHzETQnjMafH4
TLSH
T10D03BF31A9A89EB78CF6D385B1437603BFB4165385C50BA4D5C97A0C069B5EC630B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1014a9e00ea560c9e768e680e0e4addf748220413cf6aa23af412d904f24b151
MD5 17aadd54bf5b818591c5b1a39d79ec47
SHA1 128e3a6e2073cd21d518a3c8fbda33f93c505056
SHA512 d740cd4fd18a81988b8a9cd7955c01aa44af7aa684ae4f95e0671a1ef36c6f4c1fb2f41effb52c640ef7b66054fbe84c38dc2ca13db4a81fc02bd2f82787eff1
SSDEEP 768:WZ3gjni0zEwJrEnjN3Gac1FyHojKgqmU0I:WZ3gpzEgQnjMafHfgRUr
TLSH
T118F2CF3068A4DEB78CFAE386B6837742AEF04613C1D44FA895DC7A0D05979EC530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e9bdfaac189538051b5ec1db1352d211fda380d8583ed4662fd507ce2f9c02d9
MD5 9973c067877ead201844f96c4e0efd46
SHA1 a203763d31f78129821e232d5e16d9ce7e2698cf
SHA512 9a2c868a250f0deb83732e27da2f5c9e3b7bf94cb84792c463409e7eb8179ead814ffbf439d7473c341b6fa2679c2ce6570622a3e47c7bd4e6aeb7621de11e88
SSDEEP 768:rrv+4UNbdS3Mmi0zEZrEnjN3Gac1ZLeVH1SCz:rbsbg3rzEZQnjMaQEH1V
TLSH
T18803CF3569A89EB38CEBA385B1877A037FF4525386940BE4C5CD2B0D02D75EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbaef954-4fa9-4fd3-918f-7a6fdc3b5073.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cbaef954-4fa9-4fd3-918f-7a6fdc3b5073.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download