f07a46ccb9da7aa307689c001b7afd83a215fe8f8221775f5fe9937a89c230f5

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hjbk.html
Size 283B
Sample260818-ppc22sbk2x
SHA256 f07a46ccb9da7aa307689c001b7afd83a215fe8f8221775f5fe9937a89c230f5
MD5 4137e32d4519f4797f2a82fa2379fe68
SHA1 b1e7d1df157f3801d149260200a432dcd8a39730
SHA512 30bd102c5fffa6c4b645ae48fff2d716fe14a0298de5af5e5388d24ff1e81b9f79db86c5d6a0d49cf75bfc17e88e434a3df6cf46921bb215da22c644c0ee0fb4
TLSH
T138D0EBAE5043638B480314A039C128C2264C13FAA03A41E83C8AD88302A893ECDAA69C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5896	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315298003014039"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{BAACCC54-DFD2-4B55-AF97-65E36A114F21}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
612	msedge.exe
612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe
4244	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4244 wrote to memory of 3460	4244	msedge.exe	89
PID 4244 wrote to memory of 3004	4244	msedge.exe	90
PID 4244 wrote to memory of 5896	4244	msedge.exe	92
PID 4244 wrote to memory of 3004	4244	msedge.exe	90
PID 4244 wrote to memory of 3004	4244	msedge.exe	90
PID 4244 wrote to memory of 52	4244	msedge.exe	93
PID 4244 wrote to memory of 52	4244	msedge.exe	93
PID 4244 wrote to memory of 1096	4244	msedge.exe	94
PID 4244 wrote to memory of 1096	4244	msedge.exe	94
PID 4244 wrote to memory of 1096	4244	msedge.exe	94
PID 4244 wrote to memory of 2336	4244	msedge.exe	95
PID 4244 wrote to memory of 2336	4244	msedge.exe	95
PID 4244 wrote to memory of 2336	4244	msedge.exe	95
PID 4244 wrote to memory of 5832	4244	msedge.exe	96
PID 4244 wrote to memory of 5832	4244	msedge.exe	96
PID 4244 wrote to memory of 5832	4244	msedge.exe	96
PID 4244 wrote to memory of 3272	4244	msedge.exe	97
PID 4244 wrote to memory of 3272	4244	msedge.exe	97
PID 4244 wrote to memory of 3272	4244	msedge.exe	97
PID 4244 wrote to memory of 1028	4244	msedge.exe	99
PID 4244 wrote to memory of 2132	4244	msedge.exe	100
PID 4244 wrote to memory of 1028	4244	msedge.exe	99
PID 4244 wrote to memory of 2132	4244	msedge.exe	100
PID 4244 wrote to memory of 4896	4244	msedge.exe	102
PID 4244 wrote to memory of 2916	4244	msedge.exe	106
PID 4244 wrote to memory of 5864	4244	msedge.exe	107
PID 4244 wrote to memory of 4852	4244	msedge.exe	108
PID 4244 wrote to memory of 2404	4244	msedge.exe	109
PID 4244 wrote to memory of 2404	4244	msedge.exe	109
PID 4244 wrote to memory of 4740	4244	msedge.exe	111
PID 4244 wrote to memory of 4740	4244	msedge.exe	111
PID 4244 wrote to memory of 612	4244	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\hjbk.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffe3502c188,0x7ffe3502c194,0x7ffe3502c1a0
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,6018860909109440671,4396226337165166232,262144 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1644,i,13879497591670121418,8616358730237479489,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,13303802554426371035,7085227362095625061,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:13
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,751339614878475715,522800218398770142,2097152 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,15575343110976398968,348964549458304970,2097152 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,4817293835286533194,15635956844346131681,2097152 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,11464864707527913190,6352936878867435700,2097152 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,3419831021296024371,9750909565806267326,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,17874525176488316401,3406532071013183754,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,1478232167179898595,7173434303616879252,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,1478232167179898595,7173434303616879252,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,14411198701721821490,203538541055216328,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,9633815370819291331,17154926061016935154,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,17028171302522807513,4430728545044446648,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,11660008747758418090,1058706407151164147,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:14
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6604,i,1001532303738304899,10187906205852345776,524288 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,5818637816955558250,6978848260134836987,262144 --field-trial-handle=2404,i,12480654797696167030,9179967053368777480,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8b824cc8997c6e2c101c0553a76346387da8fd0f7d886794b9d4684f27af61fa
MD5 43fa344a11df88b9f9a12bd54c14d5cf
SHA1 0ea134fbb97b45fb00c09485304471f08470933c
SHA512 6e5f6da7c31d553839113501f3debb63d6c1bafcc21f118f3cbefa297ac47b04e529e766fe63e35e30d4f6a001eba9ed74bce528ddba5cb3ff7dcd8552ac5f91
TLSH
T1E241DA80433F0BDAEF91A5B2A0E84E54BBB0D47E21076F7C908FAE7B7E057640465AD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ca8a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ca8a.TMP
Size 2KB
SHA256 a1c514e355779cc67dd3dc0f6d8c7ecf909be91c96030f57f16daf333d708665
MD5 6f8a2c77bfd7ff2fc2a5827e7bf79855
SHA1 4458a25763bceb7fbf1a3d2ef70da82c90daef6d
SHA512 8f8c54a27c652eb03dafa73ac5fb5a90527e1559223c58ddee76fca1560d25342eabeab8258f6dc275c415bafc5ee4fa0342a1e57a25b821bec09430260172d5
TLSH
T12B41DC80433F1BDAEF9165B2A0E84E54BBB0D4BE21076F7C908E5E7B7E057640455AD4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7b36f6b18dcd8d05f15938f24508cf4cfab66eb53f6f72a1c632d70978b2c70b
MD5 843e2b795172fd3499fa106e1ec45aac
SHA1 891c9af40af61e745a94665356098283552a54c6
SHA512 e2cb9b0ee512aa5364c1b372ee4ed82c7dae531ed22485eca8cdea289475676220ca3a7181b6b928e089b608bfda924cf89687e660021542350bc421367b2790
TLSH
T12331A0F787B4956E8A1196F0AA14AE1FCE2D0511431C7C6AC9E0AE27D3F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 87587829ca4c6715eca04847346e4be8e5875393fa663227ecd41e2c47f29922
MD5 c857e114df2df6014a900189cc51281b
SHA1 bce09acea0f2d13189570cac27d19f745ac08f8a
SHA512 fb0fd240e4f6aaa74f438024b8eee2cff2a88b569afe14002d09132ada43c895ea3b0d298e2e3a4eab07789457a9c24affe609ba3854ca2588ec561186aea401
SSDEEP 192:sxRsRwbi/fRsICpq1zAizoD8p4J/g6+WNIYGlbzkX+G+gIgIJ:sxRsMi/fRsIC48eg/5IEXbs
TLSH
T1A632C7166928A93B9CC7E20DFA657F53E2FD503361D56E58ABFC860C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bd38b330d18eb2489be273c3e135c7a09ff5ac06190ad856b331b37f8d751c30
MD5 b429888221666c5f831cb0548a199ecd
SHA1 26241ebbbd3385e04ecd3c9d3c6b71564234cef6
SHA512 e46db07fbb6d070c0e09bc93ee267f36d7abf14c279689614ec52647992f91aee83196ddbe96e692d671fdd9cfb174e5d899f067f755ac46115f555e0af26c71
SSDEEP 192:sxR3Rwbi/fRsOZpq1zAizoD8p4J/g6+WNIYGtRkX+G+gIgD1J:sxR3Mi/fRsOZ48eg/5I+XbD
TLSH
T16942C7166928A97B9CCBE20DFA557F53E2FD503261D16E58ABFC8A0C04E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5deef342ff6f71b9a98005ffa8eab8309c45855b444f903570e25c441e26567f
MD5 e8505b9e1801800aebc6235a7f3300ac
SHA1 40cd72765079edc6277e569fbfe0a65521e64037
SHA512 9b895044260023d763a8041450fb2b63c2e739bac5c364c8b79fe7f6c0066608eb7db0422fc1a39009bc3110a79741e76db7e9df3c37a458e5953db68adf01a7
SSDEEP 192:sxR3Rwbi/fRsOCpq1zAizoD8p4J/g6+WNIYGlbzkX+G+gIgDzJ:sxR3Mi/fRsOC48eg/5IEXbp
TLSH
T10532C7166928A93B9CCBE20DFA557F53E2FD503261D16E58ABFC860C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ba38661bcdcbf066f1757413bbcc4dfe504e0e881107799fdee55f1a20a24d7f
MD5 2351d69cb7abc5c827dc42b9836cfea9
SHA1 4ad98a50f0fed93e853c411ec32106649015fd0a
SHA512 7bda440df939468a3ddf29de869cde75ddc0f5fd8f1b8d7f0dfed14463f6e561a6c5c676c4e1992825fef74e29a0e75a6fc5be15755f17597caf375428e154e7
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIRrowo:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Vk
TLSH
T1CBB2FB3B604CCB7E9F800AAD9C197FDB6D9802C796989D4047FE994C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 776b44a6ddb589a5a677f87e5c282aa72ffbc7871cf75aae3b7e802b3b45c8e0
MD5 be807fee1d23495121b360193f31dc6b
SHA1 38f8605bc5d16d179664a5603ce66f32374dae24
SHA512 728cea13c693d271119dadd99fd697986ddfcf3651517ab8c7dcdd7313d2b6e4793c5229051ad6c26b2248351f7d9dbcfe071fe73f42f3a8b0d9707931f74a3b
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkZ2HDxTnjWXkSgLjK46gFjcpBc/HgHVCbvlfp:Cm7KmgIIJ4tWGm7g09OGlkZ2HDxTnyXu
TLSH
T195910255367F42803C7FA98882B9881F92C170A73558E43B7FA915625F67E039CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

38c10f44-cea6-4fe9-a7d6-ac5a33f7ca27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\38c10f44-cea6-4fe9-a7d6-ac5a33f7ca27.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 31385f8d1c91b0d8de6b97c2573d7ea9d993a23a0955b7a8a66ab1157742f9d3
MD5 e7c12d1cd8c82b5fcac270f3219eee34
SHA1 1bb2120fdd2ea72c6ee3065830f02bef328d8731
SHA512 2426970734ce94da12cb621ef8d2338e552ee1933d50e995acdd80110e6355a32df2df96b959d4db2075205384f9ee53da96aefc493229c182e0f66d14315c7b
SSDEEP 768:4c3RRlYyFZ7Hucys6BRvi82oP4/z6himo6G0uTH9JBuL:4c3a3imOz6Imoh0cH9JBG
TLSH
T11DF2B07198119D72DCABD2C9B4467A537EE4932382CC6DD0DAED9F0F02C7A6D031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 867f75eea7b3c5b0eb790b2194d30002b4f006eb6fd18b8542c2dd8cc7614971
MD5 d2440beeaeefa4d43293f6f404e85a51
SHA1 7964d52fabcf96794e25adbc472d21ab3973c9d1
SHA512 e53f42e791b6690d6ea45ffa38d578bbc5a6fefd2ab37270f17167acbc6f0c7108533f43aa956cfa63c3c77a3c662142f9f2a4372a7d38f2dff3c17945eb3d19
SSDEEP 768:drv+4UNbdz3wRlYyFZ7Hucys6BRvi82oP4/z6himo6G0uTH9M:dbsbt313imOz6Imoh0cH9M
TLSH
T12C13BF31A815DD73DDEBC188B0477A537FE4522385CC5994EADA5F0E02CB9AE131B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3c04d3c63ba8fa0bcab9366c14113d9f0f999645e30f6c1c9526574110f13400
MD5 3c8a9881289ca99cd054ab4c2599b3c4
SHA1 31b66eacd98b88c044975d6ce984ff2cb92beb14
SHA512 690f8687a1f011d49f1dce93365ccf33d534344fcf001d9c94e7e087e5baaf0964eb30d85209c22c70f11e6f0a583db768c227d25d4fae3540e595816d0c244e
SSDEEP 768:zc3SRlYyFZ7Hucys6BRvi82oP4/z6himo6G0uTH9JBuL:zc3f3imOz6Imoh0cH9JBG
TLSH
T136F2B07198119D72DCABD2C9B4467A536EE4932386CC6DD4DAED9F0F02C7A6D031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 9c7216f0463aed40dd0e5ff9657d3b1e2ca18ccac59ae23e4b93a2e588c39872
MD5 e96af82a945160daa60cf67535857088
SHA1 d0f6b7db9db15d9959bc2735a5ac3d3288568234
SHA512 7dc94674aedf0cf9684748c8032824d95c98e96aa3eca852d1807224e2150b1ba5f1154ae93049f63e6097354b06eeeacdb420a205010d50581735e5e2911190
SSDEEP 768:PFQ53PwghRlYyFl7Hucys6BRvi82oP4/z6himo6G0uTH9JBuL:S53E3imOz6Imoh0cH9JBG
TLSH
T17A03AF729841C977EDABC7C9B54A7642AFE05223C5CCA9D0E7DD9F0E11879AD031BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 534bfcb3241c86d36ff2859ae25238f6cd5dda2e43cc1599c2b9c1191e24a27e
MD5 c322479cda3112a9491c528e82c47d48
SHA1 9ef8357397b4607b9ab9f996e62b7a3d633fc03a
SHA512 0184051d551eb3ff2c3c0efbe533c41a2bf6148c95a8796cbbbf64d2cfa07603c188d6734de9c2fb421bae37bcacfcb8b0967492ee252f715188451273170af5
SSDEEP 768:Orv+4UNbdS3rXlYyFR7Hucys6BRvi82oP4/z6himofG2bwn+h:Obsbw3S3imOz6Imo+0w+
TLSH
T18E03BF36E4189D73EDE7C184B046BA937FF4522345C91AD0E6DE6B0E029BA5E131BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9afbbc9f79ba0ef55bb325d9b811a8ab84fa5f3c1198f0a628a5e2ba83065cbd
MD5 bbc224c3758524c03c9f07288b962377
SHA1 5e90a955f8b35b6c68cb395b49b1a5034c8c2e63
SHA512 95a55294cc6ba26a120172461279cc81307e45ba134cbb283ed61ebe48d4d763441b43f18000984efac7bd3fc9f8f6792a42794de8ccd569f140893cbc999230
SSDEEP 768:xGrv+4UNbdS3KvKlYyF97Hucys6BRvi82oP4/z6himo+S2bwn+h:xGbsbw3Kf3imOz6ImoF0w+
TLSH
T18B03CF35E4189D72ECFBC18870467AA37FF4522345C91AC0E6DE6B0E529B95E131BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b637d7d-0bee-4fde-9c3e-923407b292bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1b637d7d-0bee-4fde-9c3e-923407b292bd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download