d25b5d1468887b77aae782480d376fe172c7f523ec2f959697bed0fae4ff2a02

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 07:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SkullNight.html
Size 77KB
Sample260809-hv4zdsbl41
SHA256 d25b5d1468887b77aae782480d376fe172c7f523ec2f959697bed0fae4ff2a02
MD5 9894bd631f9bfe66ad46ac66a5533e02
SHA1 2f37d12220d3e3e6905e93a559cead414b65f77e
SHA512 eae75250530a0e21f02266fec07477d04dce3dd15f4334b121e38dc49b9b6b1319ca255c91ce8f372bfdcb7b3dbd6ff85450eed8c8c7b9b63947fcdd5e4e1fd1
SSDEEP 1536:ybqv2GwWNdaX/a8QdpIXrba+pX/7H2wWn2bGQlV:RqS8QdkrbRpKEHV
TLSH
T1727319A9918500169AB387F59B072205FE7C81136B034368F6EC51993FFD75889BBEEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2072	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307326810187223"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{C92F141A-550E-41D1-88CC-6A0D3371DA60}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe
5744	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5744 wrote to memory of 5580	5744	msedge.exe	89
PID 5744 wrote to memory of 3892	5744	msedge.exe	90
PID 5744 wrote to memory of 2072	5744	msedge.exe	91
PID 5744 wrote to memory of 3892	5744	msedge.exe	90
PID 5744 wrote to memory of 3892	5744	msedge.exe	90
PID 5744 wrote to memory of 5536	5744	msedge.exe	92
PID 5744 wrote to memory of 5536	5744	msedge.exe	92
PID 5744 wrote to memory of 5448	5744	msedge.exe	94
PID 5744 wrote to memory of 5448	5744	msedge.exe	94
PID 5744 wrote to memory of 5972	5744	msedge.exe	95
PID 5744 wrote to memory of 5448	5744	msedge.exe	94
PID 5744 wrote to memory of 5972	5744	msedge.exe	95
PID 5744 wrote to memory of 5972	5744	msedge.exe	95
PID 5744 wrote to memory of 4188	5744	msedge.exe	96
PID 5744 wrote to memory of 4188	5744	msedge.exe	96
PID 5744 wrote to memory of 4188	5744	msedge.exe	96
PID 5744 wrote to memory of 4328	5744	msedge.exe	97
PID 5744 wrote to memory of 4328	5744	msedge.exe	97
PID 5744 wrote to memory of 4328	5744	msedge.exe	97
PID 5744 wrote to memory of 2512	5744	msedge.exe	100
PID 5744 wrote to memory of 5200	5744	msedge.exe	99
PID 5744 wrote to memory of 2512	5744	msedge.exe	100
PID 5744 wrote to memory of 5200	5744	msedge.exe	99
PID 5744 wrote to memory of 5808	5744	msedge.exe	102
PID 5744 wrote to memory of 700	5744	msedge.exe	106
PID 5744 wrote to memory of 1704	5744	msedge.exe	107
PID 5744 wrote to memory of 2768	5744	msedge.exe	108
PID 5744 wrote to memory of 1152	5744	msedge.exe	109
PID 5744 wrote to memory of 1152	5744	msedge.exe	109
PID 5744 wrote to memory of 4240	5744	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\SkullNight.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffbada0c188,0x7ffbada0c194,0x7ffbada0c1a0
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,5115415864533257291,15027599460764132103,262144 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,4572727427111737410,12428689184068492525,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,9654175422692548529,12838740461014566646,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:13
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,4346245770240994123,972912234053028497,2097152 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3108,i,1839487344975392288,6352340278210097359,2097152 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,15271532136440421475,16216920071082854599,2097152 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:9
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,738179898026783702,12672550445008644473,2097152 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,14538170499211141507,9988344589454094413,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,7916156251475018496,16854002212625582962,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:14
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17142123725671116917,827209009626967869,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17142123725671116917,827209009626967869,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,16867237219219389943,16489643780205214961,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,9778206219317127412,7808182769099654842,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3124923906884468116,17070592613626801066,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,1638159469688420353,17376034575967017733,524288 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2888,i,2808379764991227481,14082660358177631928,262144 --field-trial-handle=2436,i,13190285165676352068,1448608891955253840,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c0e69aa5dc2fc831d2ff220295fd7760803246f121cdbcd7cbca63a9b6e39abd
MD5 a17016ff26e803df0539c86670373f9d
SHA1 752e815ba51d7f8277cf0d8fce50be2b440b0db3
SHA512 f43ead7cf878b8160665537286f67727a1ec8e00c2fa3bcdba37fd5176b5e92ce22a28bd466b49f65839a5436aa2dffab3863fe4094d01a0aa99e8c64be77731
TLSH
T1BA5187566FB8D6E1D338E27163F0574433F9A8A94A079F522052ED32198EF87B0E0253
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5993da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5993da.TMP
Size 2KB
SHA256 67144c6285030dfeec99f56732bebe234472f8ba154234bbc61fcfb5ffebf006
MD5 1edf9dbeee0aa5d0da07db4116588b77
SHA1 ffba10a54060215de434dfe7363795dac9cc9fae
SHA512 71494410bd12d795146093eacac76c5781dfab7a5209f915c5bc857fcb2de2019f268b5fb704664953b7bc13d0a33a701515c95effbeebc09fde8583fc83d6b8
TLSH
T14351B8566FB9D6E1C338E27163F0174833F9A8A94A079F022052AD32198EF87B0E0253
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d5e6514-72ad-4c55-8d0d-fd54e6177caa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d5e6514-72ad-4c55-8d0d-fd54e6177caa.tmp
Size 1KB
SHA256 bff9d8c5a92ef4c84f7ca92fea48de602d9e4a3fd7bf5bb9ef90d4e1a8a60e0a
MD5 6b22979cff279d2cff55ddeab88fda28
SHA1 6ea4aa6280d065e8638cb8fd39a44d0b959fcf80
SHA512 a6011ab38dde5a8b2a9874b066a12810b4820ba776c6edaeeeb5f47595379ebd3dfdcc98b11dbb1ea45b18d4a7c1e84da2fc361d198fc0cb192fc5bc4a1e05e6
TLSH
T19731C2F787F5957ECA0186F0AA14AE1FCE2D0515432C786AC5E4AE2793F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 017accec2e66cb5171f556f93ec6dfeabaa2f4642de730550d7781c61cb14306
MD5 4ec5b41c57303bbd4643b12f270bde0c
SHA1 b7d32242ec18f724a520c61b4db537442a062e70
SHA512 56fe2dfb1d6919ad787831b5ed0b239f45e9595f166a0cb8dfd63eafc622f63f1ee6f311c6e880c6ee7ca3bc7194d51e9fd5ccfb401f74d77b802a9f79e03e4e
SSDEEP 192:sxRERIyM/jK1Ml8wbq/fsseMKrjDazoA8p43/g6+WNIYE/jiKjGUIgIJ:sxREelq/fsseMSW/5IqGs
TLSH
T19A52EA1566249D7BCCDBD20DFA527F93D6F85573A1901E48AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b2d545ce68427ebe2c0768a63d0167f9dde04518407d373e2679aee5c5790f16
MD5 1f716c8463fada3e2242b2dd5c344a58
SHA1 fa11470b5d67e618dfc3c0cb896ddc8e89f178f1
SHA512 25ab107c6896c687d4f12426131771c60c373f05b9e78fadb7c7a61904bf8867133f88383df2edea9a1f233d6f6c7ed4458c69c06a6a1e6dc1c9e785633ff721
SSDEEP 192:sxRLRIyM/jK1Ml8wbq/fss6MKrjDazoA8p43/g6+WNIYE/jiKjGUIgDXJ:sxRLelq/fss6MSW/5IqGd
TLSH
T18552EA1566249D7BCCDBD20CFA527F93D6F85573A1901E58AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d5a3b82f103d1ba3b0b641e0728fc23cf125e46b87b12b96c26342694f30c166
MD5 c1efbc0053c8c757cdfcc9d6a13ae643
SHA1 c27c5013a89418077600814e59ebec564a5ddb75
SHA512 dc2ac868a23c7499d38956096a3b6161b8f5b7a992a4658d23a55e6a943796f08493c34e7834e250195d219f93fd616dc5c9f318743d8d1b0e67faa4ebd840e8
SSDEEP 192:sxRLRIyM/jK1Ml8UQSbq/fss6RKrjDazoA8pe3/g6+WNIYENPiKjGUIgDpJ:sxRLeqUq/fss6RS4/5IsGn
TLSH
T19662E91566249D77DCDBD20CFA527F93D6F85573A1901E08AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6f00770302b0f0021b27877277c5ac3f29199395ae12977a107cb8598e5a8ebe
MD5 26bcee614adf45d149a1af3045a0fe26
SHA1 f4d4348bedbdef3db0bfa43998da98b0e7f412f5
SHA512 c606d1e51c7479d05578fac0e8ee63a6233f194a5b7cf7a9b9e3776a6ad7d55df9af9224790b454a3b360d942420c5b4302ec13c9acd4d64544c08feae1399dc
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XH7kh1DZpVW9yogdVK4kgzVcbDa9puHYp8y:CeTieYgQxAl+eODgc1W+9M+XH7kh1DZD
TLSH
T17791D451717B52843C3DAA1D8278883F92C17872301C697B7BA865E64F66E438CFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ec498ce8-1af0-4ec7-811e-0a3f5dbd5433.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec498ce8-1af0-4ec7-811e-0a3f5dbd5433.tmp
Size 27KB
SHA256 5039a223cdbfc698ace093212b13d41ca3bedbd618f7acd99091f76a8a7b1556
MD5 4416b3f39b1de62f02c2499019fa32e8
SHA1 d19f0129f4ea0d3e1021c79f0996f00e4bcc013c
SHA512 f48b7e4be6d7eac4dde502cea9b0fec7364c7e522fb2693a8d864252f064243b25044987eadf51ea7f489f195203dc43fb13abdb0cb0f43b8e9d246d26e567a6
SSDEEP 768:0hiiBaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsOV83ror6m:0hiiBaWgH7f3Qu1jaNI8kn
TLSH
T1CFC21B3B640CCB7E4F805EADEC25AED66DD801CB9B984D9447EA884C03C77EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

330ce201-d954-4dc3-917d-81080f8121ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\330ce201-d954-4dc3-917d-81080f8121ad.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e39e46c204d18008b280b15b1c90994d2dde56374f088f3c725af4574a536a2e
MD5 e30fc9ba0613217e176fdd64067b55d0
SHA1 32e182532a188c2f7e5cdbf1b470a6ddb6efc412
SHA512 8b6671b420c7e87789d402a7d548394497f08abce54ccec2bd78b10efd031df536b0dfca683fb4aa19ab10f90e2b30ce77af51de793a2c5c94824b4fa2f71c32
SSDEEP 768:NJ3dqGaaD0XK48dHeByERRFzjK3Yz2ewBKZOPWY:NJ3IGb0648dHSyw/d2evZQF
TLSH
T1C6F2BFB06C686DB34CEBE28D7A177747EEF08113E5D42A6895DDBE0E048619D070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1ec285537d3053ecdf3aaa287a55810cd0e546b06968c29afa47feacd5048f71
MD5 499a89747df62f72423d95bd340e3a14
SHA1 fd33cc754acb855bc2603517ab7bbc6b7a3fb0f6
SHA512 caf8c2880838fe8afe36ff11c5ac7b3bcd60c82fdc636346f81247bf166187aa6be31e386b16829109fd55605b038bf766cb727af3d6e33391f11b2a9cbdcd27
SSDEEP 768:mrv+4UNbdy3cqGNaD06K48dHeByERRFzjK3Yzo00:mbsbc3VGY0z48dHSyw/doh
TLSH
T16E03BE70A8A8ADB34CF79289B5077643BFF0415386C42AA8D5DD6E4E45CB0DD130BD6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0b01d6003f511174670fdbd8164a46ab7e2c1d3eb612537f5aca3e0e8df542b2
MD5 43b30014658a8cc7240197a681bf777d
SHA1 04dca97db5fd03477e79c2e4c8b5abdb2621eb6d
SHA512 85e227dbae7881482f45c040c08f5c6ae4f65d37d6c8f787b0bf80e3ac2e540bf231e58a615ec6380d6aeb79135cb0bac019715dd74e332c9d13bb11547ecb3c
SSDEEP 768:Grv+4UNbdf3UqGEsD0zK48dHeByERRFzjK3JzeVH1SCj:GbsbJ39G70W48dHSyw/6EH1Z
TLSH
T15803CF71A8A8AE734CE792897543B657BFF4421382C41BA4C5CD6F4E468B0DD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8542758fe7bb0d785973479be592000ba7a6f97a887a96c1617c58b8ad4c0617
MD5 fee357e4615a76aa6cf82b21fb712289
SHA1 29ba0c4465c3ef8254b608225d5cc78e43e9d25a
SHA512 be0e4a77b0a1083605a9f208fc70eee18b1fcea1d3faf36904b2cd9a16409a3081528e0a18e2f1491576120bfcb8859d655c271be1cef19e0d03923dd676c7dc
SSDEEP 768:6J3cqGaaD0XK48dHeByERRFzjK3Yz2ewBKZOPWY:6J3VGb0648dHSyw/d2evZQF
TLSH
T1B6F2BFB06C686DB34CEBD28D7A577747EEF08113E5D42A6895DDBE0E048619D070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bccced10c4a82e0930c72f16ec012a73f1cbcdaf12400e0bbae7c33f8b3da0f6
MD5 f0449d8e88a12ded9983e7d8f1ca8bc1
SHA1 3cff3dba793afafc7d60f8f8e7107e851090f201
SHA512 6c9f9532b18ee3829c5d62781a85c7d05b1d3cf673fb9622eba21338dea3f3036467796ce7689a174c48f30aa1ba1a2d33d28a844cb17b1915a6ebbdef02afcb
SSDEEP 768:Qrv+4UNbdf3/qGPRD9K48dHeByERRFzjK3YieVH1SCj:QbsbJ3yGVU48dHSyw/sEH1Z
TLSH
T16603CE71A8A85E734CE792897643B657BFF4412382C81BA4C5CD6F4E868B0DC130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 9305fabc6f7066c4f7c5951c31d1e67eeeadc24876fb61514057912c375566d3
MD5 4f6345466e7db64cb098e2c53a2ce834
SHA1 43db6efee46eae12f1d9db1d67a7e066d7516330
SHA512 4a3d5985e07613aae69a01f2523edc4ae845c89fc2a5c856dc8ba31505478b5c9b0f4d42d57a7b1810fd2cff274acd7eaa8470538ddceb3c22e0f27dbebfe88a
SSDEEP 768:EFQT3owg2qGaaD0bK48dHeByERRFzjK3Yz2ewBKZOPWY:nT3qGb0O48dHSyw/d2evZQF
TLSH
T1CD03AEB15C989DB79CEAD789BA177347EEF08163D5D46668A2DDAD0E00871DC030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb586514-62be-4a1e-a81c-687f2592e9ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fb586514-62be-4a1e-a81c-687f2592e9ed.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download