ad261b2968ba40f9ee734dedbbc5d7ef98e01d646082a405e29c45085a676f03

Analysis

user interaction
yes
max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bio.html
Size 793KB
Sample260808-ap6a9sweka
SHA256 ad261b2968ba40f9ee734dedbbc5d7ef98e01d646082a405e29c45085a676f03
MD5 ffc29f14d78651a0a1e6062e75babcd4
SHA1 e2182c660d7e3af1d81687ae0c11ad30d160dea9
SHA512 e6289d0aec7fdb2540930148fa95af9d44ad099a4be96513da2b8ebb3992ac5631f0014dfc5cba46b442ff06312857d753285ce333d8942382210f6d3b506963
SSDEEP 24576:PIc8K6JUOWWP8XexYOkDmlqYgfSshhaTUc:RBXPOOSghHc
TLSH
T1E6052331ED32DA7A0299DEA87B1F7A841614850F42C8D9A672C4F1653FCDEE00752EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4788	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306222855667932"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{0BCCCC78-75E6-45EC-AE4F-F7E4048C5931}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6048	msedge.exe
6048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4752 wrote to memory of 5992	4752	msedge.exe	89
PID 4752 wrote to memory of 4788	4752	msedge.exe	91
PID 4752 wrote to memory of 2264	4752	msedge.exe	92
PID 4752 wrote to memory of 2264	4752	msedge.exe	92
PID 4752 wrote to memory of 2264	4752	msedge.exe	92
PID 4752 wrote to memory of 1804	4752	msedge.exe	93
PID 4752 wrote to memory of 1804	4752	msedge.exe	93
PID 4752 wrote to memory of 5380	4752	msedge.exe	94
PID 4752 wrote to memory of 5380	4752	msedge.exe	94
PID 4752 wrote to memory of 5380	4752	msedge.exe	94
PID 4752 wrote to memory of 4532	4752	msedge.exe	95
PID 4752 wrote to memory of 4532	4752	msedge.exe	95
PID 4752 wrote to memory of 4532	4752	msedge.exe	95
PID 4752 wrote to memory of 4132	4752	msedge.exe	96
PID 4752 wrote to memory of 4132	4752	msedge.exe	96
PID 4752 wrote to memory of 4132	4752	msedge.exe	96
PID 4752 wrote to memory of 6052	4752	msedge.exe	97
PID 4752 wrote to memory of 6052	4752	msedge.exe	97
PID 4752 wrote to memory of 6052	4752	msedge.exe	97
PID 4752 wrote to memory of 4932	4752	msedge.exe	99
PID 4752 wrote to memory of 3504	4752	msedge.exe	100
PID 4752 wrote to memory of 4932	4752	msedge.exe	99
PID 4752 wrote to memory of 3504	4752	msedge.exe	100
PID 4752 wrote to memory of 1224	4752	msedge.exe	102
PID 4752 wrote to memory of 5096	4752	msedge.exe	106
PID 4752 wrote to memory of 2236	4752	msedge.exe	107
PID 4752 wrote to memory of 4556	4752	msedge.exe	108
PID 4752 wrote to memory of 5668	4752	msedge.exe	109
PID 4752 wrote to memory of 5668	4752	msedge.exe	109
PID 4752 wrote to memory of 4924	4752	msedge.exe	110
PID 4752 wrote to memory of 4924	4752	msedge.exe	110
PID 4752 wrote to memory of 6048	4752	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\bio.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x2c0,0x7ffa44adc188,0x7ffa44adc194,0x7ffa44adc1a0
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,11323327040606089253,9174085079333443556,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,5664372478082866615,17430228274248014736,262144 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,13942386341839829276,14819099725489893269,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,3068891779753388005,4618259150358966159,2097152 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,7149836255655556125,12819879999845909190,2097152 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,13953158711393545992,9117355751755889245,2097152 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:9
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,1879113935293757867,16737038256627325015,2097152 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,7377534263402617197,15228501085396280676,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,16335619715032222473,929432185709159612,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,16229877684608195415,11405603923535598099,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,16229877684608195415,11405603923535598099,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,14556252253203848551,2877419762994723143,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,12415023038079700419,7183371628491603035,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,16891907427619269318,289311470487932385,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,9852943957229329157,7619973031905819968,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,5366934775222667297,2453298957509209378,524288 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,18252997636293018591,5531525004100639889,262144 --field-trial-handle=2604,i,8681012157872339350,8784343652635191191,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 ed59d81a836baf1eb27a347b17fb101336b22dd10c57f94dce390550a2cf47f2
MD5 e601d7e615f1c3f09232bf269253e21d
SHA1 73e6ca7ef62638ec2a67ef6f92b91ae9fcafe4e9
SHA512 15cb0e22aae9dc73953dd763f90962edfafbcf2ceb5fd8ab26554f5991f6c4ac8204f8039071c4c79fe2f338686ebedbdcad9cc7bf20534252ad7094ec2179cf
TLSH
T120319AC413EA2BC2DBA601F231DE195A32FADC651E032E9903F87D345543F9061DA433
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59daf5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59daf5.TMP
Size 1KB
SHA256 f6a6f39824657ca74cbd371f00e91e2e140a0fc995938a7aeb1021034c4d67a2
MD5 3ab522f4835f0ef3c33b2a6b5490c2e4
SHA1 a49b8292c3b920a6dfd9ba601c8e34205da50776
SHA512 822a5c5d1f15aa9a6ee0cb6a2e1db5764c5822a6625a00dc3b3af1b6d7533368f7518bbc9c3034d1a596e804eb85d5c7e12f3da7cb2b254c8e128859eb895835
TLSH
T13A319AC413EA2BC2DBA605F231DE5A5A32FADC651D032E5A03F83D345543F5060DA033
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6a145c0c580467c5ad82e5cb00897474ceb715cee3defd980e17110765c545b2
MD5 09a505d3b21e03b6f28105d5a61b79e1
SHA1 9fca5a2ba4ff31f6ec5fb4c3637b26f61da8e88b
SHA512 bb97d4d9e2c1ccd4decbc54bb871bc05c4dbc1fb605a0821f0f901a06652d3011eb9e63c9635d03250b21fbf39e28a56934d531fd8b9eff219e3cc28c63fbcb6
TLSH
T188418DF7C3E8867D890152F4AB146E2BCE1D0916532C3C56C9F4AE5BA3F2871E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e12bf851b25daa778b210017a0b59ef4e2c771cdb1f953bb14ac94d30c903123
MD5 43c8df19afa726b103bb34eb338151af
SHA1 09b1cd2a7ab99294af30d45a6b753c81176d2241
SHA512 bd9a0554f8ce9902bb55fa2500efac889891685347bd74efcf82e81272e9a6959de3ac0f17a0f77e2ff3479cab215a41af1102d8e577c185ab68d3e01c297a3f
SSDEEP 192:sxRCOrO8/ftsejHFSa4zoA8p44/g6+WNIYbuEjZ6QGjIgDMRJ:sxRCOy8/ftsejlSaB5/5IHE16fq
TLSH
T18C32C716AE28A97B4CCBE21DBB567F53D2F9503260902E48F7FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 92424981a6e22e8b43a9b7038a76c32ae8fde2abcd9846046b2be300b46570a7
MD5 93b1933630c538ab24b104452cbd46d0
SHA1 2afb12c62a91d9c54f5b563b4e64451fe219a4c3
SHA512 cd80617f9281e5594a0b33375615a342df84c41c788f9bea262e53f3cb1dfcc7b45d3118caaff6a08e5a6f47a50b2d2947ca5aa44aca799e32430cda48fb43c6
SSDEEP 192:sxRCJrb8/ftstfHFSa4zoA8p44/g6+WNIYbtZ6QGjIgIJ:sxRCJP8/ftstflSaB5/5IK6fs
TLSH
T10532C816AE28A97B4CC7D21DFB56BF53D6F91032A1942A58F7FC960C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c6b9c86fbb82e272be6a6116064de21b205588f8afafb01534dcf8cc3738174d
MD5 fc8a06d780e306706c7f1f2618eec8d7
SHA1 966edc74573fd6b1d0130e1bac12db1551c29e88
SHA512 b4fbeea9c41e133a22d1d1c3a12d94e22192d846c97d9e11f582b9e4d8b75f781682fb423e087c1fb79718d3401233f4aedaaadc3de2ddb976c0f38b0e753b90
SSDEEP 192:sxRCOrb8/ftsefHFSa4zoA8p44/g6+WNIYbtZ6QGjIgDMvJ:sxRCOP8/ftseflSaB5/5IK6fg
TLSH
T18E32B716AE28A97B4CC7D21DBB567F53D6F91032A1902E58F7FC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 058a9964d8c0e885e2bf2b260574255bb6e9898e40e9b7dcfda2d69785d45ebe
MD5 974533beaf538373242ebae15c459b2a
SHA1 196ad5fb762f9e5613ba725acc3baec86ade1e94
SHA512 0a44eebf35a5e161da30df5995463631a9ce0d4ca548c214f7dbc9636f06d14714cf09cc8c544820fc03b7129ddd90271bc9b06d2f41398517e0f5c198b20992
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFSroAoz:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0VW
TLSH
T186B2DB3B600DCB7E5F800A9DEC19AFD76D9802C796988D4447FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aa19c7c1-df14-47b9-a31c-763f3997b679.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aa19c7c1-df14-47b9-a31c-763f3997b679.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 993f6180a4306d46bd83d93ccf3e9e1a4540f47f99f826a0c83cd765e1e30919
MD5 8a6bbb9d28bb1c1db35b533d3a62083f
SHA1 5bb3f8430356a2cb3c3909557969486981e93443
SHA512 4e21874f37dd21167fcba87b4bc8c6303c0a3ed8a2d569b4fbc6c4e3f1aa6c099e52c97bb673cff376f882ef1c671d282787ea4e02c29994833d1cfccaed5953
SSDEEP 768:8rv+4UNbd23g0vkHveBqobGYQFtrkLDtZu4aWADIidy8LuboBw:8bsbg3uHcLDtZzaNsuVL8oe
TLSH
T15403AE36FC559E739CB69184F1837A07BEF451A385C909E488DD2B8E05DB4AE230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fd6e86ad27143eb6bd406e1e6de8c492fe87a22a35fb76751ac5f6849679a4f9
MD5 973587275a5cab7f032c5b0dc31a489c
SHA1 9d0809443fff79d6dc110260c2666af5f927babe
SHA512 93723e03d46db5b06a3923b91dc56fea702f1c920452000e27658fcfbe120a16499e1820d869ca7e3eba4b5384f43f2eb93bc0736ea2c76877ca457aee737a5e
SSDEEP 768:md3/0vk1TeBqobGYQFtrk5DtZu4aWADIidy8LubCmU7RRx23:md3v1Y5DtZzaNsuVL8Cm8RRY3
TLSH
T12DF2BE7AEC52CE73A8FAA240B2823A06EDF49173D5C849E498DC2B4E05DB57D0317C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d0aace1436e8a7ea783518c83583c503005b25a2e5fb3712c07b48ed80a6919e
MD5 a08833daffcb48d2925c4318e4030a1b
SHA1 3ad0ebbc1ae05861a49bb5248fc6338fea4ee27b
SHA512 565688c9e8d6651dbc5843b0c0661c4268080f827accacce5855d5a654fcd7003d151b0c1f70589f3b19b92e5e6b850d54b585bdc593cf2c60c3d17db7c86f1d
SSDEEP 768:Yd3g0vk1TeBqobGYQFtrk5DtZu4aWADIidy8LubCmU7RRx23:Yd3u1Y5DtZzaNsuVL8Cm8RRY3
TLSH
T1CBF2BE7AED52CE73A8FAA240B2823A06EDF49173D5C859E498DC2B4E05DB57D0317C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ef6d7c9f3a8721a782a8b7f667287e71bd4ec9c3d33fb58623269f463db3f42a
MD5 6720c2f6a110433b25875fb560fe7fd6
SHA1 ee0f27d7b7e41b3f6c3e0adbb0fe636c69dea4ed
SHA512 5c388f81f6efb13112ee71281eec5d9a5e61df4b78ec8aa9c6faf53eb3bcc78f4ddd9b87f17503320f4ccd5b7f0890db3c3277d23aaa79981ededc76193fc5c0
SSDEEP 768:4TFQq3Cwg40vk1TeBqobGYQFtrk7DtZu4aWADIidy8LubCmU7RRx23:Rq351Y7DtZzaNsuVL8Cm8RRY3
TLSH
T1C503AF77EC91CE77ECBAA680F2423A06EDF481B3C4C895E495DC6A4E119B5BD0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e44b6b6f931b07952fda493808b9a727be9de501b17303dc62e9446ba5250d61
MD5 1ed3dab39cbfde69f3f0a9076ffdff78
SHA1 2bf4dacab3a3f080dd172e94ec8262e1742064ec
SHA512 ebc7f1f69727217bf83f4797217217b87942731b10a804e863cc7be3f0f271e371f95aa6a5d8820c2a9713ffa1c6fd333a03c81610d4a4b080d18998248ac629
SSDEEP 768:9rv+4UNbdC3zKsBqobGYYpZu4aWADIidy8LqHeVH1S1C:9bsbw3WpZzaNsuVL4EH1d
TLSH
T11A03BF36E859CE779CF79284B1877A077EF8916386880AE088DC1F4E46DB4AD1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb019474-5799-45cc-bfac-28db3a0e63a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cb019474-5799-45cc-bfac-28db3a0e63a5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download