1ac4c936611a9736435d4d418a3ce19d64241aa8dc6f616df14432cedb9433af

Resubmissions

22/08/2026, 22:44

260822-2n92lscn4w3

22/08/2026, 22:40

260822-2lnetsgf663

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 22:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
455289.html
Size 14KB
Sample260822-2lnetsgf66
SHA256 1ac4c936611a9736435d4d418a3ce19d64241aa8dc6f616df14432cedb9433af
MD5 1b0d83c6e3e41876d6bea6fe10dd07c0
SHA1 39afdd5cad574b694a4bb0a59e4a488d63f36b85
SHA512 94bcc601d4e0eeb0854d25388e61de08d36f74e64dc706adeb5f5e122830c929bbb75b8ad03125c975d8fe000b37c6539d13fb627952320fae5b360f78f4fc0a
SSDEEP 96:VPFHLtIQKGhPCJfc/ifEiCXH4ahTPBjG2nx/IR:VPFrtxhP+f8ifjmxdnx/k
TLSH
T1F062407671405D0A1B09FF59E1C2A09CB4A3671F2889D4F6C8EB20B56952FF24EDC93B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4236	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319120319188120"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{53349CD8-633A-4306-9100-61CFE83074EB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3296	msedge.exe
3296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 3988	5112	msedge.exe	89
PID 5112 wrote to memory of 5824	5112	msedge.exe	91
PID 5112 wrote to memory of 4236	5112	msedge.exe	92
PID 5112 wrote to memory of 5824	5112	msedge.exe	91
PID 5112 wrote to memory of 5824	5112	msedge.exe	91
PID 5112 wrote to memory of 4572	5112	msedge.exe	93
PID 5112 wrote to memory of 4572	5112	msedge.exe	93
PID 5112 wrote to memory of 2116	5112	msedge.exe	94
PID 5112 wrote to memory of 5364	5112	msedge.exe	95
PID 5112 wrote to memory of 2116	5112	msedge.exe	94
PID 5112 wrote to memory of 2116	5112	msedge.exe	94
PID 5112 wrote to memory of 5364	5112	msedge.exe	95
PID 5112 wrote to memory of 5364	5112	msedge.exe	95
PID 5112 wrote to memory of 3744	5112	msedge.exe	96
PID 5112 wrote to memory of 3744	5112	msedge.exe	96
PID 5112 wrote to memory of 3744	5112	msedge.exe	96
PID 5112 wrote to memory of 2616	5112	msedge.exe	97
PID 5112 wrote to memory of 2616	5112	msedge.exe	97
PID 5112 wrote to memory of 2616	5112	msedge.exe	97
PID 5112 wrote to memory of 4684	5112	msedge.exe	99
PID 5112 wrote to memory of 5948	5112	msedge.exe	100
PID 5112 wrote to memory of 4684	5112	msedge.exe	99
PID 5112 wrote to memory of 5948	5112	msedge.exe	100
PID 5112 wrote to memory of 1144	5112	msedge.exe	102
PID 5112 wrote to memory of 1124	5112	msedge.exe	106
PID 5112 wrote to memory of 3108	5112	msedge.exe	107
PID 5112 wrote to memory of 3180	5112	msedge.exe	108
PID 5112 wrote to memory of 4468	5112	msedge.exe	109
PID 5112 wrote to memory of 4468	5112	msedge.exe	109
PID 5112 wrote to memory of 3296	5112	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\455289.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffbad80c188,0x7ffbad80c194,0x7ffbad80c1a0
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,10465145506771911836,5163958110825739748,262144 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,50506009462519552,1747738893017900218,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,4441603903875865577,5600401699392217300,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:13
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,9480993840389943922,13097063230644905904,2097152 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,15449477353008817553,6001077588402855289,2097152 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,2746036622779216160,11337539617608903555,2097152 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,7816150677327291119,1984438321099330900,2097152 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,11390543208769637418,12532027155467674693,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,17287874043135102960,9813082843563002749,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,10206100854774164626,8923825032891319401,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,10206100854774164626,8923825032891319401,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,14132561118167247209,12030694562314593595,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,12090472731842899952,1472911227945472284,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,13938764018046540911,2768247798294712344,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:14
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,6910692955621152264,10001866775885601431,524288 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,11173050865100002963,15554483111253855609,262144 --field-trial-handle=2764,i,7394343986869920390,16168104809602623468,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2f13708f4eafa0d1783135578d1c4b12835478b0844e37f17b9941859820d3f0
MD5 5557bb84ad2d00345aa87be0215593f8
SHA1 05a3b2ba3f9ec69f1fd59610a988b9d4f54bb32a
SHA512 e25eedbbfa59cf27a023547251a207f5a3e04f534d233174b717149d26b13f5bbf69295c66491683121e19285d1e3abee891715de8b4254e400cb76ca7df336d
TLSH
T1DD5198566FB9D6E1D338E37163F4574433F9A8A94A079E122052FD32198EF97B0E0253
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598fd2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598fd2.TMP
Size 2KB
SHA256 8a3174050509b89c91c70b259c7919ae17b57d9c54e68f183dd982af9e80647c
MD5 83e1b1bfdb2f7eccecb36c74d3906102
SHA1 dfc3f1c647eb17d02bc32bc58f4bcb0ab34028c4
SHA512 6c41c1b621b46388c493d5671f39118e30eef07dce949caee2a5d93b6b0c173cfb1c7cfb2b4074b247c125aaf63ca65165d14d0bcc2492e5cc88fe06331e1374
TLSH
T1C451B8566FB8D6E1C338E27163F0174833F9A8A94A079E022052AD32198EF87B4E0253
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0489b17fb5609fcf46edff227d6916bcd72273bc0b2ebb7c6c9d6f40554e7c93
MD5 bb086c179ae79cff4d14f735ee1af487
SHA1 64a12cc537f01f04cf0f438f1193bda3c45ed375
SHA512 ade33df2df96f05eb3b45706f5d01a5bd2770516396e3e16bc3e268fea8e377ae0714cd63c38fdf15cb7edeb0b773fed3c9de30d07672773ef8e52bee2813fde
TLSH
T1E8419CF783E4866E8A1196F0AB14AE1BCE2D0515432C7C56C8E4AE2B93F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 284c4d251a2eabc3955d843e81dbaeca220fee349e9e2b9356ca70ecc7357be8
MD5 da4989e7c3230bf9ff644ccaac8061cd
SHA1 eea222cebdca983a2c9d9507e5a28e771d0cc1fe
SHA512 93a1f5b2eeff1561ded6f387bfedd925e0ced83278feeb191955c1b63e8900b5f8e708c6e025d23995076a0e05deebb0939f4a60236fc83594618879a720e1ee
SSDEEP 192:sxRYRZyM/jK1Ml8wbq/fdsw4KrjD7zoA8p4F/g6+WNIYE/CiKwGEIgIJ:sxRY/lq/fdsw4zs/5IH7s
TLSH
T1A052E8056A349D7BCCDBD20CFA517F53D6F85573A1901E08AAFC9A0C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 780f3fb582a99f3e6fcfc64fc9f3f18733ddbeac870571f915b455014c94c8fd
MD5 9d32faaabcbf115dc89cc8bfca5f1012
SHA1 b4ffd67bf8544ce05b09b8ed6505e66744e5cbf5
SHA512 fdb967c543996ebf2f4d65d06ef637e5061044207d55e36e783e65f7cec0ba952d080f20bc4cf9e203384020d8ebe224738494768505dc5812d42b58d33965b9
SSDEEP 192:sxR7RZyM/jK1Ml8UQVbq/fdsH02KrjD7zoA8peF/g6+WNIYE3UiKwGEIgD2J:sxR7/qNq/fdsH02zK/5Ix7G
TLSH
T1C162E9156A249D7BCCDBE20CFA517F53D6F85573A1901E04AAFC9A0C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1a52db554bbb87ef14de39110ce2859a112df762428d21fe55be31c66c693351
MD5 4f0f132785c76f02b49bef686d392c19
SHA1 5ee5e7faca1b8ffe95a5d64b861c79a1adcbbe1e
SHA512 b00f883be9cf2a621957160388ac21221b3b8f4e85edcdc15d3a7902515b129cf5716e5854ef94b7fe88e937372ee8aac8be0fcf1230a436e7ed14b840d32923
SSDEEP 192:sxR7RZyM/jK1Ml8wbq/fdsH04KrjD7zoA8p4F/g6+WNIYE/CiKwGEIgDEJ:sxR7/lq/fdsH04zs/5IH7c
TLSH
T1B752E9056A349D7BCCDBD20CFA517F53D6F85573A1901E08AAFC9A1C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a149c348bf1072067addd283117c6c0f074eb24d1f6bdb0fb1d50a625fd222e4
MD5 87718ae244a0ba2632d7e07eaefa5633
SHA1 cc4b837c81a3bca30f678a267e0ef429b6425eed
SHA512 8f895ff53d0f1d6aad4343e0f87fca54a65a79ecb9c418b9b4c69fd9b8d4141b92d758c0daad61e5d0cfbdeb1570dc8efcc01d541e428b612a5785dcf7cb0282
SSDEEP 768:0hiiBaWgH7f3Q8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsOV8MroU6N:0hiiBaWgH7f3Qu1jaNI8XH
TLSH
T11CC21B3B640CC77E4F844EADEC29AED66DD801CB9B984D5447EA884C03C77EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2a4fcc0bfc658506078fd02184179f4d82ced9977ec590a43695872e18fb0b66
MD5 0c99f3f69bca8ac57a021008e6a76134
SHA1 47fe6a3dac242da27923ee960317f7483d4fec11
SHA512 257a09d66649103ea9997f8fdc358338a2adefa9a3e5b7ea3672b6b9931393ca0a81bc15f59eab7a2226130e3c209edf351f793cb4a61962dd55269b82f0a339
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XH7kh1DZpVW9yogdVK4kgzVcbDa9puHYp8c:CeTieYgQxAl+eODgc1W+9M+XH7kh1DZ1
TLSH
T1D791F341707752843C7DAA1D82B88C3E92C27872301C697B77A865E64F66E039CFF9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2711.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2711.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7f36f76c367e12a0111a1c32760c5567f0c65b5d179e1fe898a01dc0e82d334a
MD5 20499a1644c1e67a22723cedad320271
SHA1 47bbcd0019310396b86bbf30181d4a9f514ae340
SHA512 6751a7084c5bf0eaad5983d07dd950cce0d6443b37db44901f492569a11a8a120f6f130493e0f6a810b5bc899cde08a0a826b17118e600592926367fe9748ebe
SSDEEP 768:vI3aqGhYD0vK48dHeByERRFzjK3YufluDP:vI37G60C48dHSyw/IflyP
TLSH
T159F2BFB06CA56CB70CBBD289B6437757EEF0811391C96A2495DDEB1E04CA5DD070BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 07bc26fa6331f9a5799e277c1b97769f837f36ccfbb0e937a6c7b82f1941d4f0
MD5 1eec7018ce89ca42d5ba3e99aca79e63
SHA1 ad0872af46c7fb0a01cf18c588ab09174ac4c47b
SHA512 757340d9eacd6274c8a8be1c0c86fb1cb000e6f5885a94dd50b7bf3459d85ccfbc1fccf8fdcdace9e41692856fbe0c555590b352dbd0ea3a5068fe0ca6f2bca3
SSDEEP 768:JI3xqGUYD0vK48dHeByERRFzjK3YufluDP:JI3UGP0C48dHSyw/IflyP
TLSH
T117F2BFB06CA56CB70CBBD289B6437717EEF0811391C96A2495DDEB1E04CA5DD070BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8e071fa9beb738191d9c1ff14c8c7d9fb64c736b690aa0d0e5d898973a507f48
MD5 04d8ada4e6e30702b0c1f74fabb26f02
SHA1 0e335cc17c51e330a7ee54f8c537e1a62a659699
SHA512 b621f215b73ceb1f96a7bda0be09b0311b73ab063662aac46e0f9aa64da7e191523b6b74171a751cc27133fea5f86aaa33d1ffaaece40611ce9186df5cfc9390
SSDEEP 768:Orv+4UNbdf3HqGyCD0OK48dHeByERRFzjK3JueVH1SCj:ObsbJ3KGr0H48dHSyw/zEH1Z
TLSH
T12603BE71A8A8AE734DE792897543B617BFF4425382C81BA4C5CD6F4E468A0DD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 5d88c1904a09e83fc13bcdf77b43538b81aa6eda9e2cfed0c95a7e39e8a82396
MD5 1c6fd4260a2138ca226e869e5e1c8b23
SHA1 010bf219dc2e10c80eb46a86ad7465c3b620122a
SHA512 9fedadbf23504b1862f896458f7ffc5016a2d56c678ea69f3b9e122382269fe6704c1e6d22d29b85b261c19d73ec572c9f1576003ac85227022c53660eb4b060
SSDEEP 768:aFQg35wgjqGUYD0pK48dHeByERRFzjK3YufluDP:Bg32GP0A48dHSyw/IflyP
TLSH
T1B3F2AFB15C949DBB4CBBD789BA477217EFF04153C5D9AA6496CDEA1E008B0DC070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 72138228c77051ebab4a6a8cd668578ebe41cb9420f4fb30dee3b2c6ada694e7
MD5 788f46701a365079c75bc5edf0a990ef
SHA1 c17acbf23bc3eb7c58e29b4d1ddd4ce2f5240b63
SHA512 2eb5ed11ad9796dc4e1eca78d4b3e3896ea00272d57293e0d52829b253d50826ca82892a6c61e49423ed6c53b19416b146a704a2feddaf066aa09c902fd5cddb
SSDEEP 768:Qrv+4UNbdf3/qGzRD9K48dHeByERRFzjK3YceVH1SCj:QbsbJ3yGhU48dHSyw/SEH1Z
TLSH
T12F03CE71A8A85E734CE792897643B657BFF4411382C81BA4C5CD6F4E828B4DC130BE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3790e65c-f4d4-4ec0-9093-ee460b7b98bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3790e65c-f4d4-4ec0-9093-ee460b7b98bd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download