83c4968561632fdabca28ccd94ec4e9642a237b73e5055869ccdc3fd10c03128

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AutoBOI-1.0.0.html
Size 831B
Sample260818-ph47ysar4t
SHA256 83c4968561632fdabca28ccd94ec4e9642a237b73e5055869ccdc3fd10c03128
MD5 72aa3ace765a36ed2b15306dbec11461
SHA1 9a3eb24c1185ef227bf37b13978e491d9e742108
SHA512 e6e382c6723c5af3802b613557e68c09566a68e0d7172b809be6098f4a2dbb13a02ae0d4b62570452b2529d5f94fb520969e1cbb8e20d75232fa44684f5cd420
TLSH
T153015261C0C9018CB237D1B57CE1254D1AA0C00775974E212EC6767ACF4860314A730D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315292532214635"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{FA654E30-F71C-42E0-9437-B9B87CF8E55F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6100	msedge.exe
6100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 2444	4708	msedge.exe	88
PID 4708 wrote to memory of 3016	4708	msedge.exe	90
PID 4708 wrote to memory of 4932	4708	msedge.exe	91
PID 4708 wrote to memory of 6016	4708	msedge.exe	92
PID 4708 wrote to memory of 4932	4708	msedge.exe	91
PID 4708 wrote to memory of 4932	4708	msedge.exe	91
PID 4708 wrote to memory of 6016	4708	msedge.exe	92
PID 4708 wrote to memory of 5552	4708	msedge.exe	93
PID 4708 wrote to memory of 5552	4708	msedge.exe	93
PID 4708 wrote to memory of 5552	4708	msedge.exe	93
PID 4708 wrote to memory of 5956	4708	msedge.exe	94
PID 4708 wrote to memory of 5956	4708	msedge.exe	94
PID 4708 wrote to memory of 5956	4708	msedge.exe	94
PID 4708 wrote to memory of 4392	4708	msedge.exe	95
PID 4708 wrote to memory of 4280	4708	msedge.exe	96
PID 4708 wrote to memory of 4392	4708	msedge.exe	95
PID 4708 wrote to memory of 4392	4708	msedge.exe	95
PID 4708 wrote to memory of 4280	4708	msedge.exe	96
PID 4708 wrote to memory of 4280	4708	msedge.exe	96
PID 4708 wrote to memory of 4528	4708	msedge.exe	98
PID 4708 wrote to memory of 4528	4708	msedge.exe	98
PID 4708 wrote to memory of 716	4708	msedge.exe	99
PID 4708 wrote to memory of 716	4708	msedge.exe	99
PID 4708 wrote to memory of 5448	4708	msedge.exe	101
PID 4708 wrote to memory of 5980	4708	msedge.exe	105
PID 4708 wrote to memory of 2764	4708	msedge.exe	106
PID 4708 wrote to memory of 1076	4708	msedge.exe	107
PID 4708 wrote to memory of 1212	4708	msedge.exe	108
PID 4708 wrote to memory of 1212	4708	msedge.exe	108
PID 4708 wrote to memory of 6100	4708	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\AutoBOI-1.0.0.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffc1029c188,0x7ffc1029c194,0x7ffc1029c1a0
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,2944436528058642708,3052398994276416588,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,4314588437018033314,12764330690564207335,262144 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,1542520658506646130,15044714582978080428,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:13
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,545100425533291802,6317973810797204370,2097152 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,2256483191614341507,1519501982229462088,2097152 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,15612692984413881959,12470199485762866541,2097152 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,232303398800428904,16936070973056985515,2097152 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,5172318270786963532,15888130495837097291,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,11550120662295350453,4518751633654817675,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,10786538796675543031,8930317620144678071,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,10786538796675543031,8930317620144678071,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,2062662372675798074,15939145124386345299,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,16207669500139168779,14534398956723140552,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:14
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,7493249873778135955,8310963991966254825,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,6815084095318829971,2419939343011700500,524288 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6076,i,4552841624839493991,18042833617595463137,262144 --field-trial-handle=2292,i,2855832180157008489,7778506876749817557,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fb5a8211db66cf2d8f8cd8a818f050e0bbc5d6cd6f995ac5fc1ecfc2361c2eb4
MD5 4764b3600df380f65e944bb927651431
SHA1 ad340369f5047f44017360fca06cf2d09e969c2e
SHA512 5d67cbcd6398f677c10e6d74492f2f8411647e3edcafdfc00f235bb131b86e92dfeafd5f30e13031ae066b5bef01c7348d98076644690d786440e7730f773758
TLSH
T171412F40E33815C1E7B165FF20E55F9B32B694F90E07EE0D857DE178EACE7262191022
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2f215a7a0a2c9d72b0a3db6c94d6be6f47e8ec3049b08a38f0c403e62576da17
MD5 0063d96a84ea9d750b91855113ef183d
SHA1 2a00293b839472f6d555d6c6020d26a762522d06
SHA512 6311dc0808031ac3a25032cf28c340edebd610e9bd10a5ab09e2a833e7c40e5f6446fc659481ef11a1de07c150d0dbf288711aceca42746859bf4efcaf476d6d
TLSH
T183117DF7C7E5856EC90156F05A24AE2BCE2D0505421C7C1AC9D8FF2793E3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 928cddcc0a54551623db2f809768dbaa2354bb9d428d57151280a050b846e2f4
MD5 abd7e0faf6061f630129d4741074e4b4
SHA1 da99fbefc3801b8d973ed10a42df0eca66dc4ce2
SHA512 c45140edb244fa66b5dc3ebc22692422a977f7685e6db22eab6f9486bd3db52d850cece0f98e3980749c6c0cccfc99e154c553fe0e398f6fc77e2a6979c138c9
SSDEEP 192:sxRiR+yM/jK1Ml8wb8/fBsDdesmZszoA8p4q/g6+WNIYx/lWcEGk5IgIJ:sxRikl8/fBsDdefH/5IYMs
TLSH
T13C62D9066A38A977CCDBD31DFA457F53D6F85533A1901E44AAFC9A0C00E66ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b2cdb2a011362bbfb29d90767a74335f37a55658be7f7d74adf0f8e946e095d9
MD5 0c1e13aefc75222d7bf08d8027fa604d
SHA1 87b6a53f19c3417d1e01a09a1d5df38680f3ab89
SHA512 d50d675bdf3119dd403630968d4e3e4846057e6253056a71036e76d81f6815c59e33b56a785087def26318a004e9f195b044adf461b7023fdc6f6f37da26a356
SSDEEP 192:sxRlR+yM/jK1Ml8UQIb8/fBsVdnsmZszoA8peq/g6+WNIYx2l+dEGk5IgDpJ:sxRlkqG8/fBsVdnf5/5IwM3
TLSH
T15262C706AA28A977CCDBD319FA417F53D6F85133A1901E44AAFC9A1C00E76DD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c59d62055ab21bf40657b26b08dc82c83ba507d5a4bfbfd68f7ea0473f5aa567
MD5 d3e88526c3f31fe2d739a199e6f2f4d5
SHA1 0a63ebed7eeadebd2f081d2c47c60492b1a01fde
SHA512 f996fa23f120ac660dc16950ee5e53942f0590a6cd54effd836d14edf04b91555e3d9e3158cff5c5e634f1a1412a5fef3a3533c2f98b0cc89fd2bacb9184be89
SSDEEP 192:sxRlR+yM/jK1Ml8wb8/fBsVdesmZszoA8p4q/g6+WNIYx/lWcEGk5IgDXJ:sxRlkl8/fBsVdefH/5IYMt
TLSH
T18862D8066A38A977CCDBD31DFA457F53D6F85533A1901E44AAFC9A0C00E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1041e70261886f20c73b6dd7116d09b9fd512ec50f9288129ed9b33cc7e46eab
MD5 c9e0339ceb9b62f1dc97e7eda0f383ae
SHA1 d1b33d7d2a13ba66cb76471242d8ef66a0f3130a
SHA512 1e6cdd3eb7f3b61a800052ef7dceb72eaafd71cdc9ca732352021bce08818b0dcc871797ee5f5b3d3514dd2a320eed7555450b1aad3a62be9461fd2896f99809
SSDEEP 768:0xCyAjWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV9rVArroJPexy:0xCyAjWgbrfM1u1jacpAYJPIy
TLSH
T1CFC2EC3B640CC77E4F844AADEC256ED77DD802CB97984D544BEA880C03C67EB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 1d659dfcac09d4ff6beaecec1f36e536247ba02f8c241976183b81c0aff6f077
MD5 32fe8ecbbae6e7db93c137ec94c0a51d
SHA1 269dcc13085629df99939bf8d2e13ecbdb63fb5c
SHA512 bb76b614a4025d41fa5f0fa118006504f21b4460dcaa078cb3eaca0dad7acf09c40c554caf8dea0ac1f82fc9d6293cb4294d1e04e2edb7f6a39b8ffe29becfee
SSDEEP 96:KH5u/DhXX9Q70wyL9KK8yB9epBcbXG9/ANJXZNTQ92iyxTKKKybTevnulOF+KOg+:Sb74BlT
TLSH
T1B2B11211723A465028BE6A8D80E5D627A2C2B1737418AD7B7FF951B90F2AF410CFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b7b87bd7-0cdd-42c0-9141-ab405722008e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b7b87bd7-0cdd-42c0-9141-ab405722008e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 fc31cf8b5944385816812fea3649e1360cf89c51b05309574203e0603c6387c7
MD5 29d13d2181d7dd7b54a127e50265870b
SHA1 ca7dee7537bb486a9f02cc102164c474aa822623
SHA512 8e1f319de48241b42a8381d6b1dec94bfca652a0a2b2b93f2eaf7dec88949e0f6c59480eeae417f1a2d3f6fa7a3e1667f0a65461c61d8a4e8fb3fb8bf359b634
SSDEEP 768:grv+4UNbdl3l+kKL2bSFjF669yrqUjWiIwwxMAAUiler:gbsbX3PGFjF66INWZTMtUsQ
TLSH
T15403CF30A86895B7CDF2D786B2533383BF74519392C50F98C9DD270E469B0D9234B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cdb1b482e8f1f96a05de6cddf6b437005424b540ca1d1244215d7c40a8022483
MD5 0e87a1254ca477ce0befc6e5191e3d45
SHA1 8a7cdc767bf63c490c77a3f35133d11f3fe6669b
SHA512 4c9da717cf05b54476e956b0bfc8e062dcd92256f140336ab7ca0a45b91eadb77eadcb8df16fd4e617e52545005b687b134e6a1c20d6bc1cca8b595ac9105f50
SSDEEP 768:2rv+4UNbdhS3cEkKL2bSPjF669yrqUjWiIwwxMtAqS:2bsb/S3IGPjF66INWZTM+qS
TLSH
T12303BF71A868AAB7CDF2D785B2133383BF74415382C90F98D9DD670E069F4D9234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 49285ed656f2097fff248061467031f3c020a60b2825da71f8dbef3ba4ab93dd
MD5 d0baf9dd29ad7dd9572ebe333be86eab
SHA1 03dac84d082b08d468c9d694aae977c73ee615ff
SHA512 5ae35bad7eb8b75cfe841a5ee11441cb08b06d1b9b4b86adccd4d8cfc27a3f660426c06fa41bc165af789dc2fa5b93e2c63135795807bb9a97c5a3796a024db7
SSDEEP 768:rSS3IEkKL2bSPjF669yrqUjWiIwwxMtA0uTHy5BuE:rSS38GPjF66INWZTM+0cHGBd
TLSH
T164F2AEB16C5499B7C9FAE785B2123387AEB48167C2DC0F8889DC670F069B4D95347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3d1a2cb11efee17cce6492785b1bc5c8b508ce224c6a65a19d7d1996b9d55f4a
MD5 d36ca76ab1f910ac09482e4573c84eb7
SHA1 03ad4a3755bd34d58d52b3ef72e85165b464ba69
SHA512 512b94c8be50a0661b8dd55033c21317572a1a6ce76afc6700e3cdc0cdb4d928942c82dd1d6c68442857999f8c268206a057d5eae31e35ff585b414a89e0e82b
SSDEEP 768:KSS3BEkKL2bSPjF669yrqUjWiIwwxMtA0uTHy5BuE:KSS3ZGPjF66INWZTM+0cHGBd
TLSH
T1F7F2BEB56C5499B7C9FAE785B2123387AFB48163C3D80F88C9DC670F069B4E95347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d6d11953ba7db3d4caaa951b84a7cce2b66811aa36531b651d82989895b418db
MD5 0be280f581677440eacd4db4a0390d80
SHA1 cd8a79ecde35ccea0c87c1ba28f3ea12755edf10
SHA512 972f63a880f80c9baf30d5dcc6fdbd339b8578785ab08867edd79ed72982560a20721ffb1241374c6ad93e25eed3e6e105e14a8e25a2c6e64ff6d5a2d14c6deb
SSDEEP 768:9FQTS3bwgsEkKL2bSQnF669yrqUjWiIwwxMtA0uTHy5BuE:MTS3KGQnF66INWZTM+0cHGBd
TLSH
T14603AE725C9495BBCDFADB85B2163387EFF081A3C2D99E94D6DC6A0E019B0DC1347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 016351d102b775f727ad961477f3fb3e3065451d625e80c6cef8d808ec7ddbbd
MD5 051f0f57bee960f06bc9d062b90582f3
SHA1 2e40a742a5ea513e72d0baf44a8914434ed2849e
SHA512 b4f27608f4825732c4eb4349693024922d290e09f0be070520011963d7efe16cf53c5976ba0a6ad0d555725330ac1faeccb0885c62f2c297a08722e06ba9b63f
SSDEEP 768:arv+4UNbdl3tPkKL2RjF669yrqUjWiIwwxMRa7Uiler:absbX36pjF66INWZTMeUsQ
TLSH
T14B03CF34AC585AB7CDF2D68672533783BFB4109392C50B88CADD670E469B0DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19ff1164-7bd6-47d6-bb54-4ef60922f74c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\19ff1164-7bd6-47d6-bb54-4ef60922f74c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download