2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82.html
Size 81KB
Sample260809-gqqqjasale
SHA256 2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82
MD5 d64aa0c8bf4a6d73fd4ffc29ad1e3911
SHA1 af8b14d762e6649dbecd83ad32a2aef8c8d9cdd1
SHA512 50195df9f3d064512436d819edcf7d32c1c483ac62dc3dc7608b1a9ccc0670f72912d47cfcc561b3cfb9ce141ba252670ca941c61b98196dfb287d05a07e3fac
SSDEEP 1536:KmA0oT+OrQf4OktqnkkbWpHXZ/hbGLm9BQOE2J07:vOYbLWimU
TLSH
T1D883F9B9F5A170725E23F970402F500FBA7B646BE40C0AACF154DCE0AEF65898566F2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2824	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307288550352750"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{3E51DD90-486A-437B-8253-A01502473C2D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 992 wrote to memory of 4112	992	msedge.exe	88
PID 992 wrote to memory of 2824	992	msedge.exe	90
PID 992 wrote to memory of 2532	992	msedge.exe	91
PID 992 wrote to memory of 2532	992	msedge.exe	91
PID 992 wrote to memory of 2532	992	msedge.exe	91
PID 992 wrote to memory of 5980	992	msedge.exe	92
PID 992 wrote to memory of 5980	992	msedge.exe	92
PID 992 wrote to memory of 1164	992	msedge.exe	94
PID 992 wrote to memory of 1164	992	msedge.exe	94
PID 992 wrote to memory of 1164	992	msedge.exe	94
PID 992 wrote to memory of 3404	992	msedge.exe	95
PID 992 wrote to memory of 3404	992	msedge.exe	95
PID 992 wrote to memory of 3404	992	msedge.exe	95
PID 992 wrote to memory of 2916	992	msedge.exe	96
PID 992 wrote to memory of 4212	992	msedge.exe	97
PID 992 wrote to memory of 2916	992	msedge.exe	96
PID 992 wrote to memory of 2916	992	msedge.exe	96
PID 992 wrote to memory of 4212	992	msedge.exe	97
PID 992 wrote to memory of 4212	992	msedge.exe	97
PID 992 wrote to memory of 5692	992	msedge.exe	100
PID 992 wrote to memory of 4120	992	msedge.exe	99
PID 992 wrote to memory of 5692	992	msedge.exe	100
PID 992 wrote to memory of 4120	992	msedge.exe	99
PID 992 wrote to memory of 2276	992	msedge.exe	102
PID 992 wrote to memory of 6016	992	msedge.exe	106
PID 992 wrote to memory of 4996	992	msedge.exe	107
PID 992 wrote to memory of 4364	992	msedge.exe	108
PID 992 wrote to memory of 1616	992	msedge.exe	109
PID 992 wrote to memory of 1616	992	msedge.exe	109
PID 992 wrote to memory of 3060	992	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffec25dc188,0x7ffec25dc194,0x7ffec25dc1a0
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,14918263122481585770,8923944043379487090,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,15391161448255617093,13453008719064931163,262144 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:2
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,5151256626899495913,12816858890056203869,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:13
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,1820642640869911386,5556611562496711227,2097152 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,12934773980317642562,3368742094163915112,2097152 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,606581697971175152,6975085995827646387,2097152 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,12052905702687539053,5747972361398922931,2097152 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:9
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,9673778960755514358,6306949815035398250,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,4247042060992458721,12216405416549164697,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11502936919189164274,14054218579879692233,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11502936919189164274,14054218579879692233,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,17045491253257811196,15119188408356431258,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,3141781536522096655,6767735957142303093,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,9389379924705996129,179956703811036559,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,12992966908199300791,7366582237317182532,524288 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,18313612939160855227,1603351597707323045,262144 --field-trial-handle=2652,i,7101052842304130018,5794215292282309527,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d239b34e69e649b513b54aaabb1baedfe79091a38b84b5c7335d048a905764c8
MD5 0060770555ba07681be5214d194df605
SHA1 27730fe84d94ba936532b9ee39e731240ea75615
SHA512 873f286ac74520c158d534f64d443eef4c96dfa7642b03428b620f4f81535525d849fa19457b9fa4d3ef3497ce6cc27a1faa235b6ff3393a18fcc867ffe62c2f
TLSH
T16B61FD5493611EF2CBE94AB3F2F06C9833E88446668B2A0DC05EAFF51406F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597872.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597872.TMP
Size 3KB
SHA256 d77645b98efa18f4d15b9b28b625b2b33e6a9ef55b9f223337763616396371bc
MD5 3575d6a4ec5b54baf3b000debf36ea25
SHA1 b192b8b8172efc5dede7f5353e8a6243be29875b
SHA512 f5908d75a14bb673d86888f94667df7f6f1ca1e0f1e2c080994e4b047f1b7c2a6bb915db6c433774159bb97d29c33bdb98a6bcb5f36acbcb6395ff22ae9b3f29
TLSH
T15061DD5593611EF2CBE94AB3F2F06C9833E88446668B2A0DC05EAFF51506F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

249739c2-b7c8-4e81-8886-eed1b2b35da0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\249739c2-b7c8-4e81-8886-eed1b2b35da0.tmp
Size 2KB
SHA256 86d7d15c7e8f038f9aab0a33018f8662fcaf486da88fbe2c05fbd20ef238b361
MD5 89a01fb32c9fa22a325e499818a4c184
SHA1 3eb132e73245c9fe5dee200fdc43168faa1095d4
SHA512 56fec863dbc5d661ea118bf0b939d94a8c05b2e62d947d267a16bd2fb45c7ae549b44d00c48dfed6bc1feb9892b17507465257a94de141ebd8b84729ca8d5722
TLSH
T1FF418CF783E4867EC91196F0AA146E2FCE2D0515432C7C66C9E4AE2B93E3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 54d6a21c45f43e961be68164c7538346bf83b2940a617719d4a85ab46dbb010b
MD5 a33eed18c75a21350c20b693d5062ed7
SHA1 2fcddb6a8ad8db27bf65b282983f3b782a610afc
SHA512 dbe0058ce50c9440da1f4542bd98597016b0dcbed3d2d3e68673a8cdd5d0647a40d2509e34ae45f7f65475598fcf3b84f1cddbfaf6e31da5ad2ab192f8e94e89
SSDEEP 192:sxRVRHyM/jK1Ml8wbM/f8shOprQ5YzoA8p4i/g6+WNIYn8UUhLGCIgD1J:sxRVxlM/f8shOwb/5ITfPb
TLSH
T1B552C7156634AD7B8CDBD209FA457F93D6F81473A2941E54AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1dffaa1a5c63d00003ef2d4056f2f3c944816d524e08f6199cc17b1f5cf133e8
MD5 f70a97f44995f34f30a4b0602db214b2
SHA1 f3b7351f703041e9e8dfb8b2a1ea2c61b0fa323d
SHA512 68053fe89eb729c1720e332190827518310c05fd68f949bc00f28cfb6aefb42415c5175591fb2705bea412a9fb648fd9626e8b828f224a4090e4ee640f50d49c
SSDEEP 192:sxRVRHyM/jK1Ml8UQ1bM/f8shsprQ5YzoA8pei/g6+WNIYn8YmhLGCIgD7J:sxRVxqtM/f8shswh/5ITTPJ
TLSH
T1E562C7156638AD77CCDBD209FA417F93D2F85472A1941E14AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3eb9b91e90dfd56dc5ef883c34377306be8d1d7c52e720eb15172273512230e0
MD5 aa60c251bfea7d618f89d2899d17aaeb
SHA1 c2527aa4a62455974d8aa3832b4160f58628b105
SHA512 954c90f32f62465d86b8d6ed49d02410a6e0f7c7c6aa30b843b3b55bbe5dafbd8363b20f5f2dde1928b3b3e00eb57dbc920aaf2ced3d24a3cde0ceae4d5f1498
SSDEEP 192:sxRWRHyM/jK1Ml8wbM/f8sEOprQ5YzoA8p4i/g6+WNIYn8UUhLGCIgIJ:sxRWxlM/f8sEOwb/5ITfPs
TLSH
T1F952D7156634AD7BCCDBD209FA457F93D6F81533A2941E14AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f7f88c8c5af0dd815c9d3dd117f9889426b46dbf77a1a9bd46b7d34e2a4107cd
MD5 0870dde9a714a6a85d17389bf59834f2
SHA1 2b6e70fd43d141398274ad1d1f4d7080c3e573b5
SHA512 1d4e337044ada853d2795f9409ebb2cef74f336a742891980a96fbe2a5ecc10c291a4ab377d9d4a8c5aa3ecfee50248734ee16cdd101d1aab3222f334c345638
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YoroSh8P54:wGedp6WgoufDMu1jatVYTpq
TLSH
T1A6C21C2B644CCB7E4F840EADEC29EED76DD801CB5B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 43ec9893b816b41fdfc0e6c20819c5a0d1394e29a484d7dfda194333ac510bec
MD5 25536b2074ddaf946179f75e02eb1541
SHA1 ff2ac6e944bcc2697f6406fc91c199d0706b7c89
SHA512 9837c617aad24420817a8403c3a4920600872d819a570156cc196801e9ecd54370fd1c6f40a75720a27e0eb8633daee8c18b16e61e688008abb8843b70fb4a6f
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHklQUuSW0Wyf/gc0K4xgW0cUUfO30AK96x:CeTieYgQxAl+eODgc1W+9M+XHklQUuSB
TLSH
T13A914311357B475038BEB64C806ABD5FA28574623214F82B77EA01E14FA7E428DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 a8a8a1edc4d464fc3140a7f8cc3fa555fc60e33683b53987a7137838a5ed0657
MD5 8e3335eac81e2352ca4e230088a88d77
SHA1 e55cd19e2d7b1c5c2d525c926d8a54d235d0fa2f
SHA512 0d36dff44b991f343d81ed6a260f0f9db375e857a6941c67963a7880e818f1fc68d9fdf873acb248f12f0a73d22c9edeacefc9412fe39d522bfae8c2e4febe03
SSDEEP 768:arv+4UNbdI3al0DZIO0CEl8s4Nzc4ReyIsPP2ewBKZO85:absb+3aki4tc44bsX2evZF5
TLSH
T1DC13CF36E8389973ACF6A685B40736437EF4525781CC2AA4D6EE2F4C468B1ED131F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e2f298d7d78a9e8745c293f8eba0bd0bde88bdd8794ed6bee145f269473090bd
MD5 4d6729c8637464cc787e35e5240cb90a
SHA1 cd165262209515e21ee462f418f4839f726f029a
SHA512 b3b1565d4d47f412956412089f3a208f22cb2470f732c977dd8abe779c772b3032747eeb12a4f9cd8dc66ea031807b583b0b21d07c9328c08042ab8d099ff3ad
SSDEEP 768:r/3WA0DZIO0CEl8sUNzc4ReyIsPP2ewBKZO8F:r/3WPiUtc44bsX2evZFF
TLSH
T172F2BF75EC389C77ACE6A646B5063243BDF45167C2CC2EA496EE6F0C05876ED031B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 570d11eff090330213e8f489256a24d5f819d5b62b1518085cb4d2f23cd0d73d
MD5 6a0a58b8668f5eda4a640091fc8985b7
SHA1 678e198fcafb1c7083fea3592e41f3729d80b196
SHA512 b603a1b7b4fed018b7fafe452ced2991bd2fff582be99c8c99eec3a4a3bc7607f936aaea571be52d86dd72bb8b5809677e9c3d66f5f47747dd01e59ac53f71ed
SSDEEP 768:jf3WA0DZIO0CEl8s4Nzc4ReyIsPP2ewBKZO8F:jf3WPi4tc44bsX2evZFF
TLSH
T12DF2BF35EC389C67ACE6A646B50636437DF45167D2DC2EA496EE6F0C05872ED031B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 42b791e8104c4f37569250540de2f275e0caf7300f142ebb6cd7eb8a71240852
MD5 89fbf8a6106dd753560b14676a3523b4
SHA1 c59a99359592e2e8f349f16e21c89dbe238691ab
SHA512 e27ba12ccbf827c75c16367d8bd6d279951c108c0709874a8cbd6f643e8b4c8025b832cee03ee42807b2a042e5bdef64e9d0da163d2e70df013f981103501f1e
SSDEEP 768:ef3/A0DZIO0CEl8s4Nzc4ReyIsPP2ewBKZO8F:ef3/Pi4tc44bsX2evZFF
TLSH
T1A5F2BF36EC349C77ACE6A646B50636437DF45267D2DC2EA496EE6F0C05872ED031B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 46dd847c35e8477fda787160dcb36a696d53529bdb18971c7d85e3fd45f2908c
MD5 00c3096a61c2c46e9856cd43a296b251
SHA1 eb277577c631689c4362587463a1185d2a6c2902
SHA512 87f5027b419c9f0be308118e4d92f21699df5038b13c6c18e46d8a0911335db9ce279cc6ffce08a6ce946287751e381620a468f93ec41153f01eccb84672bf3e
SSDEEP 768:+rv+4UNbds3DeDZIO0CEl8swNzc4ReyIs2PeVH1S5D:+bsbS34iwtc44bscEH1Y
TLSH
T1B703CF32E8789977ACF69782B44776037EF4521B82881E94D5EE2F0C4A8B1DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9d20ac018e6aff687b07349a3753140542a042267e95c7c0d8298dea464f9940
MD5 ac23872cc3aafae91f1dcbea5a7d71a9
SHA1 2659b8070b21b23392ee7ac32884063f73fea76e
SHA512 aa5a8945d5dea135766bdc9cdb331ac99cf90bd7d8eac8a61410bfa683390c9a38cb6e6589443d638ad8744593f1e7a25b51daff7f701c237338e26b077be77f
SSDEEP 768:6rv+4UNbds3miDZIO0CEl8dNzc4ReyIsX1eVH1S5D:6bsbS3TDtc44bsFEH1Y
TLSH
T1F503CF36A8689977ACF69785B44B76133EF8612B82C81ED4C5DE2F0C4A4B5DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdfee729-d5ff-409c-85c5-a30db7b12c4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bdfee729-d5ff-409c-85c5-a30db7b12c4e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download