7f26327864f095bad5b606ba018b3755206dc1ed0b2e88cc0eb8e794d464bca2

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
error.html
Size 365KB
Sample260810-g6basaee57
SHA256 7f26327864f095bad5b606ba018b3755206dc1ed0b2e88cc0eb8e794d464bca2
MD5 52f3105a422c1828032262a2424fac31
SHA1 5e4db793a0f70ea03f806b9d0b32af75f445eae4
SHA512 2fab6f858b56d6de4713bffadc8df2e11980ebe6ac8ea951392227e065bfa10a223592ffb0e6d1f8a844fe37b93366cefaef170a82c4b631bc03d003e9bfe9ff
SSDEEP 1536:ZpoS2rlT2vVy6WZlqmgYx7Ijw4d9YDG3ftrIiV9WH24xBu7TkZklSEeWzBez:n12rlT2vVy6AlcTkZklQWK
TLSH
T1B984A744F22654BAA977133B73CBA48A7264B403EAF2E995B1CD15005FCBEFB1413789
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5344	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308166959581621"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{A5602494-9120-4D10-AAD5-5208646A8FF6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2732	msedge.exe
2732	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4132 wrote to memory of 3520	4132	msedge.exe	89
PID 4132 wrote to memory of 1700	4132	msedge.exe	91
PID 4132 wrote to memory of 5344	4132	msedge.exe	92
PID 4132 wrote to memory of 1700	4132	msedge.exe	91
PID 4132 wrote to memory of 1700	4132	msedge.exe	91
PID 4132 wrote to memory of 3092	4132	msedge.exe	93
PID 4132 wrote to memory of 3092	4132	msedge.exe	93
PID 4132 wrote to memory of 248	4132	msedge.exe	94
PID 4132 wrote to memory of 2940	4132	msedge.exe	95
PID 4132 wrote to memory of 248	4132	msedge.exe	94
PID 4132 wrote to memory of 248	4132	msedge.exe	94
PID 4132 wrote to memory of 2940	4132	msedge.exe	95
PID 4132 wrote to memory of 2940	4132	msedge.exe	95
PID 4132 wrote to memory of 1796	4132	msedge.exe	96
PID 4132 wrote to memory of 1796	4132	msedge.exe	96
PID 4132 wrote to memory of 1796	4132	msedge.exe	96
PID 4132 wrote to memory of 1172	4132	msedge.exe	97
PID 4132 wrote to memory of 1172	4132	msedge.exe	97
PID 4132 wrote to memory of 1172	4132	msedge.exe	97
PID 4132 wrote to memory of 3300	4132	msedge.exe	99
PID 4132 wrote to memory of 3300	4132	msedge.exe	99
PID 4132 wrote to memory of 4640	4132	msedge.exe	100
PID 4132 wrote to memory of 4640	4132	msedge.exe	100
PID 4132 wrote to memory of 4492	4132	msedge.exe	102
PID 4132 wrote to memory of 4372	4132	msedge.exe	106
PID 4132 wrote to memory of 2688	4132	msedge.exe	107
PID 4132 wrote to memory of 4224	4132	msedge.exe	108
PID 4132 wrote to memory of 4048	4132	msedge.exe	109
PID 4132 wrote to memory of 4048	4132	msedge.exe	109
PID 4132 wrote to memory of 3212	4132	msedge.exe	111
PID 4132 wrote to memory of 3212	4132	msedge.exe	111
PID 4132 wrote to memory of 2732	4132	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\error.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffc68c6c188,0x7ffc68c6c194,0x7ffc68c6c1a0
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,14211077189814562546,6375142693581523178,262144 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,2429657593037371780,6619690193374982458,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,6180835783129409959,11636578979729938390,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:13
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,2767966805427121186,6167617171442721781,2097152 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,5500675015853747080,7478714954277932773,2097152 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,950226290088698196,17929747654764012398,2097152 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:9
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,1616381838815349625,2832087942157082198,2097152 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,9987739113415114993,11283921423128570755,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,7830357176856814725,3806499772929163328,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,14598057622099561393,17167640262489750868,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,14598057622099561393,17167640262489750868,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,443688710740409567,10940298439703328588,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7217710506087625175,3509789560336176232,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,8102786499542434968,4379043959889710094,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,12098390494802944914,16211849681010099695,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,10963187137404283572,3351072475627115216,524288 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,8157068176525192465,8235070277285681017,262144 --field-trial-handle=2328,i,13194951861834613580,1998895424874930364,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2732

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d729ad276af19828625cc7e3b3b3a9f0258687638e1d73c5ff93390806d460ab
MD5 a872a2a4146bedbc4ecae250babdabc9
SHA1 65f4ad1b6aa7b380f3832056fca49fca447be665
SHA512 f1931d406da569a630a4ebd498b078091d4e62e736e85fc169d74a1901020fd6e5e00c38dfb6f4bd89bcddba0b81eae0fb5e9c174c83918bb8eff157bcc59015
TLSH
T1775165AD23600AF6DB25C4F390D0C4A532F645BA1E831BAA6040AD780586FD891FF9B3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598cc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598cc5.TMP
Size 2KB
SHA256 f81905d1af5562828436bbcacb89972aecb47d162497821b41eddb4f23d5d5e2
MD5 0d40bbb80e06091c86fda95e39330e28
SHA1 f28e246c189ce4539645a8f0d1ccfd26f4750702
SHA512 54ed379f45f7a1be8706ce4fd9c6a13c793045a4cd648f5921a1bc0fd099ff7db2b839560cd656d0d4ff825f1cdd26f256751c58cc274bdd2b1cba3da556e04a
TLSH
T1745166AD23600AF6DB25C4F390D0C4A532F645BA1E831BAA20409D780586FD591FF9B3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3cb354508ba8d28a04350acbbe58a1008cc243ab4b0b868048fba77de60c3cc6
MD5 b778ed09f94cd055390afe9117c47a9e
SHA1 ae6c56935a30add0113bc99d0fc671bd2716c669
SHA512 cfba32640ed51079eb3a5cebc8244f8fe0ea9632a1c6151a4d305844e7da4728360a91d33ad1098b5f8e4bde57cd87b0c3113c69698487a5bb86f8ca3b0ad74c
TLSH
T113317EF783B4956E9A0196F0AA14AE2FCE1D0515431C7C69C5E4AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4de3ba137f35364b399ec6a10450a7c64319bc2c03c08fa550e3590947b1c3e6
MD5 4d0d0b9db8572e3965b2169e7e9b493d
SHA1 a0605c31d2cc0cb8bf42275ff2300c8a63808855
SHA512 7eb4ff6b717d0d20c8941790f568f0511617c54a4615901a89db0410828edc2921fcba6fa576a2b8da6b30a96be67c055f2914aedf7ad4dfe5e6448533947277
SSDEEP 192:sxRQRYbL/fLsOCgwGHzoA8p4t/g6+WNIYo55CYnGMIgIJ:sxRQAL/fLs9gpug/5Iqas
TLSH
T1FC32D8566A28A97B4CCBE61DBB65BF53D2FD503261D42E48F6FC860C04E66DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4970bcb4a652f32d1db15ca927ebbda9cfa5b101a4589f9c44f0303a9d59c320
MD5 929e9bc3413694435d63bbdb1f2e5d83
SHA1 27b48094e9e065eb95281065e3e97495ae374970
SHA512 656f703d41ff36269b1d1533351eacc109d77ed5b4141c7c3c26dfc691a077423cc69df289f6bff85f8e742a26fe44a7c1265ae3c3d91e1e8feb76b44ac9d334
SSDEEP 192:sxRvRYbL/fLsxC4wGHzoA8p4t/g6+WNIYoytCYnGMIgD5J:sxRvAL/fLsQ4pug/5IbaP
TLSH
T13832D7566928697B8CCBE61DBB55BF53E2FD503261D42E58B7FC860C00E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 40bd48f8cd2a793791721aa23a2f39af3027fc57bb5a5b640111cad3d34d5b64
MD5 5f2ac6e9b527532abd9fc6a08a28812c
SHA1 711f02fadaac885c9bfdf237e5381ed7400696ed
SHA512 4f20c233d915dfcc3161ae87964fe694f5aff0b76b9d63b784fda5732757300e55eec77cd588d63a7a58122bc8b3c5552f16259590354123d38214fc26a3a77f
SSDEEP 192:sxRvRYbL/fLsxCgwGHzoA8p4t/g6+WNIYo55CYnGMIgDnJ:sxRvAL/fLsQgpug/5IqaV
TLSH
T16B32D8166A28A97B4CCBE61DBB65BF53D2FD503261D42E48F6FC960C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f6e5535e4eb1b10d9d40a1416a8cd2b9454634265f443643bc2516c99dc7ea1d
MD5 e5df60a7da80b04cb8df4301e0dfadeb
SHA1 ee67f4d445febde70fb6e5703683ecb5ac1a8d39
SHA512 6000d256b20dea38ae911f07153c59a11f6899c84a00f2563e9a2ff32c776c84eb96efe55c8742749eacdc7a593bd56fa6b99fb068309b38ab4e8347ea07f751
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRX+Cro9r:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VP
TLSH
T1F6B2EB2B640DCBBE5F800A9DDC19AFDB6D9802C79B588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a202c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a202c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c9c55a362ff9516ed541724eec9e2d2cbbcedf7d5bbb54a2ee21fdba193f8560
MD5 6db768eedf5e4af899805cbd21f7d407
SHA1 0a535b310b32a20c05086bb174d7937d42f97e4a
SHA512 29453c69c1dade6e1cae3c1e036bf48e492d5fd76f339cba9fa3124421ceb53527c2479efbbf8df2499083e1011ab4e505a45b32ff467fe8562d687d63896207
SSDEEP 768:rg3XI/TBOWhjiPONXyer1IRCzni9Khy6DqlWi:rg344SIqnBTmn
TLSH
T119F2BF30D5A09E374CEAA386F5063743AEF89123D6C45AE0A9EE6F1D058756E130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 410c46a1254bcd3a68ea9beeb0ee39c1339051f5f5ac50fbc81cbc96dabea3fe
MD5 fbf28914a5c88b7836110e2d05a2b03d
SHA1 9d1e15b767c0e2dce9405a88a44d73b38f948fa6
SHA512 25227abed7ee6a1307640681b6e99ebc6331ab7206168e8623d3c2d82ac91c92a37114fd122f8f1390807a18ecc37a8584f56b856d1d1c76d3d59c2aa51135f6
SSDEEP 768:Srv+4UNbdj3bI/TBOWhjisONXyer1IRCzni9Khy6DqlW9:Sbsb13ENSIqnBTms
TLSH
T1D213BF31E1A89E338DE6A286F00776437FBC515785C40AE0E9DE2F9D058B5AE230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5091bf2714f776b4734a05f95f0585355e8fb19217230cbe20a05c6e07dcc4d2
MD5 ea5b72d10dcb009d338668998ccc0006
SHA1 917d7232249a718df583cb442becb655166b96ea
SHA512 5ce5dd501588f2ca2965d342824a6cdae22f40060cd6490f4ff6759f85bea2d134ab7c9d857f92df00f0767901406fdcbe4ac4e779fe0cb935fa6edc7c49e09a
SSDEEP 768:8FQF3UwgUI/TBOWhjiIONXyer1IRCzni9Khy6DqlWi:vF3WjSIqnBTmn
TLSH
T14A03BE328590DE3B8DFAA786F5063743AEF95163C5C49AE0AADE6F1D00971AD130F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bfd72a3151ba8b88e52d3f61500a330e47fead951c7b5d539a6534628c7a3354
MD5 fc9b10b5e7ccb852f7c2ebf7ebd42953
SHA1 699bbd9f06a419b9316fcb8619b1082db6e6313f
SHA512 d4c60ec5fd3071e1de7751c9f66558fdd87d395cd2bc92da3776ab86df38eb72b39bdd8e3e4788ce29d6f9a49670ec331026be872244a3b005a0b02fb7856f8a
SSDEEP 768:2g3aI/TBOWhjiPONXyer1IRCzni9Khy6DqlWi:2g314SIqnBTmn
TLSH
T189F2BF30D5A09E374DEAA386F5063743AEF89123D6C45AD0A9EE6F1D058756E130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1c1a6bd97f3c757eb23126c2476c3223b0e695bd18274ce9f65ce9afecad750c
MD5 062e65b0ea7a7d92ca3c9a368519e2f0
SHA1 e42521f7f72622380ed967829f0cd3bb6050865e
SHA512 919622d7d1e184da1e82a55cc65b2354349505b75593b9cd3bdb5541d2b0c889a18072819c430c51452d9d5180b460889707f07090e3803ce1b67221b4105d6c
SSDEEP 768:hrv+4UNbdz3+N/TBOWhDONXyer1IRCzniBAeVH1SK7:hbsbV3o/SIqn7EH1l
TLSH
T16003BF36A4A89E338CE2A3C6B14776437FBC6057C6840B90D9DE2F4E069B59D230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 51d15057cf152560fed54a0ab15c5ae6c55a950e554b95bcc80f0e4f13576172
MD5 9d0eb733fabd38a2f203f8ea7b1c4ca3
SHA1 4d5fc5b35166b45a12aa4d04b9e78ce5dd01d4ae
SHA512 fec8d21715ca19a4677bffd4e0444c02519d6a19c31039927edd840daf213cc03aafe3b5e69c4cd40d38645020c03d7f7d60cf7d22e3444ad0a56136978ada12
SSDEEP 768:wrv+4UNbdz3g6/TBOWhjiuONXyer1IRCzniwKeVH1SK7:wbsbV3x1SIqnWEH1l
TLSH
T18003BF31A0A89E338DE2A3C6B147B6437FBC5157C6840B90E9DE2F4D069B59D230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b86ad0d3-1c70-43bc-83aa-00e9dd59771d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b86ad0d3-1c70-43bc-83aa-00e9dd59771d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download