d13c2d4ade3ddc8a2673e2062f82ba8237bfc65c8d220049f71819286cd013b1

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 01:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d13c2d4ade3ddc8a2673e2062f82ba8237bfc65c8d220049f71819286cd013b1.html
Size 53KB
Sample260823-bnjasaha25
SHA256 d13c2d4ade3ddc8a2673e2062f82ba8237bfc65c8d220049f71819286cd013b1
MD5 ed664a2b7eb197251482fc3aa8963f1c
SHA1 cf49e2d72cebc824daea852fcb3d7facb5e6f5e8
SHA512 4928efdf87fce4274416278ce5557abcb32b5ca2eb34c498dbe84fe9aff1c7c68d596b373f604c29204d7478e6ab8b86ce3fa01481d7ec9927f92376e91ccf47
SSDEEP 1536:WIRIOITIwIgI8KZgNDhIwIGI5ILJ7SOIRIOITIwIgI9KZgNDJIwIGI5IGJ7SKZbM:AZb09LL
TLSH
T1D033D6C8FBAE4E3C07250295B7CA3A19B36FE571DE8254C5F1FBC4256BCAF804169489
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
620	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319214480940225"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{F798815A-8195-4EE7-B1AD-358215622CA3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe

Suspicious behavior: LoadsDriver 14 IoCs

pid
4
4
4
4
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3308 wrote to memory of 4532	3308	msedge.exe	89
PID 3308 wrote to memory of 4172	3308	msedge.exe	92
PID 3308 wrote to memory of 620	3308	msedge.exe	91
PID 3308 wrote to memory of 4172	3308	msedge.exe	92
PID 3308 wrote to memory of 4172	3308	msedge.exe	92
PID 3308 wrote to memory of 5188	3308	msedge.exe	93
PID 3308 wrote to memory of 5188	3308	msedge.exe	93
PID 3308 wrote to memory of 4784	3308	msedge.exe	94
PID 3308 wrote to memory of 4784	3308	msedge.exe	94
PID 3308 wrote to memory of 4784	3308	msedge.exe	94
PID 3308 wrote to memory of 2476	3308	msedge.exe	95
PID 3308 wrote to memory of 2476	3308	msedge.exe	95
PID 3308 wrote to memory of 2476	3308	msedge.exe	95
PID 3308 wrote to memory of 5204	3308	msedge.exe	96
PID 3308 wrote to memory of 5204	3308	msedge.exe	96
PID 3308 wrote to memory of 5204	3308	msedge.exe	96
PID 3308 wrote to memory of 408	3308	msedge.exe	97
PID 3308 wrote to memory of 408	3308	msedge.exe	97
PID 3308 wrote to memory of 408	3308	msedge.exe	97
PID 3308 wrote to memory of 4928	3308	msedge.exe	99
PID 3308 wrote to memory of 4928	3308	msedge.exe	99
PID 3308 wrote to memory of 2000	3308	msedge.exe	100
PID 3308 wrote to memory of 2000	3308	msedge.exe	100
PID 3308 wrote to memory of 3012	3308	msedge.exe	102
PID 3308 wrote to memory of 4248	3308	msedge.exe	106
PID 3308 wrote to memory of 4132	3308	msedge.exe	107
PID 3308 wrote to memory of 4688	3308	msedge.exe	108
PID 3308 wrote to memory of 1524	3308	msedge.exe	109
PID 3308 wrote to memory of 1524	3308	msedge.exe	109
PID 3308 wrote to memory of 5984	3308	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\d13c2d4ade3ddc8a2673e2062f82ba8237bfc65c8d220049f71819286cd013b1.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffcccbec188,0x7ffcccbec194,0x7ffcccbec1a0
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,12854852366089805455,4985750949792095977,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:11
  2⤵
  - System Time Discovery
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,16740768808300821745,6041200707706309594,262144 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:2
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,2777838922144458880,6283187989905312753,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:13
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,15422521364900209400,7496282453328722053,2097152 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,943232588095342927,11714247353809508711,2097152 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,11084458870470900533,3450987750902945407,2097152 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,6194900823844050779,8370995083386849446,2097152 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,17757000810179985555,16264963153692018598,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,7265098864921010775,5575738155810465531,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,2894447820526880556,7180024273641364764,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,2894447820526880556,7180024273641364764,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,9299210508159384191,17320693424953514046,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,15000611136868084326,7909715358665565211,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,11386506749561917196,15817446358512233973,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,9339896756849484531,13002793216746252971,524288 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6916,i,10318363397506110325,1786393609626688149,262144 --field-trial-handle=2952,i,15711410225591646181,14923814823479970662,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4500

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d873f11a0b7980ffcf5fd578239dd2d28c4ccabf5b5b14b58c7d90e9db96027f
MD5 b4ac1df1b2fe9762c9ee6ad3a75b75c1
SHA1 ccf550add77023938f0e8583ea03b16d285bdd37
SHA512 29e0b873c4acd81e23d3d836300c03a78eba66abaeeaf293c2ebf307a08d4c4658ede29c466ae0374479f96c569a0d1d21f21794d40b26e06e2eebf200da267f
TLSH
T1A4613C51032C16D3EB249831D3F042C92A77B85D09076E92AB73FE74DC973D8A7003A9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5935fa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5935fa.TMP
Size 3KB
SHA256 30f84a3b384c0ee6301dadc6ae78ffa35de7d151fcecea9ce1c397b732074d1a
MD5 80dc3100c855436950dc1a501dfb8ddc
SHA1 7bbc21a29ed21aeca4e26cd774fb78273a85ca62
SHA512 c29305c6dfd960990e5d5daa79925bdc8387659f061d9338a5acaec6fe33adc9d4af34c8561bf3ebb2c176889c6bf2a091ea8a8078ac5e4bd525c0bef8d6069a
TLSH
T103613B51032C16D3EB249831D3F082C92A77A85D08076E966B73FE74DC973D8A7003A9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fc45d9e4b4392c24b2a4940c7a71283fa55898ab4012e495a0758349843319aa
MD5 e4ffc90c5af6baaeef9b6f63205fbd82
SHA1 abbf41ae9264a4acb32cc8e9b588adc4295a6569
SHA512 b0b1a5b37634b7d19bd9f21b102a6624390e6407c549f6689b9afefe937d0031d6a55fcfafa3cce7c641872f21438e4f334eb04a39a3ed3321e86f82dc5cb1c9
TLSH
T14B219BB7C7E4866EC90156F09A24AE1BDE2D0616432C3C1699E4EF2BA3F3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d6783fe04f7658d92b1e4b424e200f6281649aa56e30800e1d633f3fb6e58521
MD5 b9affa91f629bdcb779c1c9ed48b13a6
SHA1 f3264784e0f077bba6cd3e21fc2e5f85b015c363
SHA512 fc2743fcad3f78da47ca9092d05b69c438647414034e27c8cbcbc2fd55a9eb2987d660afa591b7bc9388cc48099b8a297413331ecc8c26d2defc6b7ffd2e3557
SSDEEP 192:sxRMRAbo/fi+s+H3SsmZnzoA8p4wz/g6+WNIYx/lIJkGxIgD3J:sxRMgo/fJs+C4N/5Izd1
TLSH
T15D32D8165928A93B8CCAE21DFB567F53E2F95032A0D01E44ABFC961C04EB6DD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7a23b7dad9e0e06ac94f0346f6bf330df7724c04a05e90a78d54bf3663dd1190
MD5 47a2be95eb86c07b1268b345e92b7fad
SHA1 392ab6f172a4f18d2908f376ae90c242350eefd8
SHA512 5e986ea5025919c65bc07f0dc7b460832d49592673f667e1bd2f5ff7dad3a7d57ce0af3dfd58961292d02bbdf81938bfa8d927ae917291185069aec26342a01a
SSDEEP 192:sxRMRAbo/fi+s+H6SsmZnzoA8p4wz/g6+WNIYxZlUJkGxIgDJJ:sxRMgo/fJs+b4N/5Irdv
TLSH
T12642B7165928A93B9CCBE21DBB567F53E2F95032A0D41E44ABFC961C04EB6DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b01c16cf239686ab6faa2ebaebdb0efb6f012a139059bbeff8f8ce4b682c2e33
MD5 6225146ceb3337420c776f5aa79032c4
SHA1 cdae0da12a5bc648e935269a4996791cde059ce5
SHA512 309bc51a453f71ee479397c909069a73ce4a24347e99785cc1f89c84c157af7ef4dea13e1930fc59a1bc1a61cf08e4bc68559eac943657b8851b98cb168746ec
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3RkMMrorR:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0Vy
TLSH
T13DB2DB3B604CC77E9F800A9DAC596FD77D9802C796988D444BFE990C03C77EA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4cb8a04a59032669cbb7422263d2492cc67aab55b7c2620e0f05b30f187ee3ac
MD5 f03746378f4ec0a11e581162e8893cd3
SHA1 0c258e55e0d0b9fd300c338e79d2f80beff7f28a
SHA512 136df41c746bf27234d4cfc0784db3c7713b73112b4493b8a8a481bc3f67f344c7ee7586e88b8b2a40e56bfad3bbdb81d201959016d8d2fc507139c5665a3348
SSDEEP 96:KwzeKEguclIhFH//+FPql3l+KfL3D+r9lybZiKCAai1:I1clIhFH//uPqVllL3Da9lye54
TLSH
T1ED91519570BB43003CBE694EA2E59557978270B33019A46B3FA800B36F66F425EFDDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a494cdf8-5f7f-4cbb-b141-d82f78f6f60f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a494cdf8-5f7f-4cbb-b141-d82f78f6f60f.tmp
Size 11KB
SHA256 25347d58dfa76eb9b23a704753068e9b1701a2cfda7705785244c73b7e6deede
MD5 0a9ff53ac521db39fb3de4d367867892
SHA1 dec1a58ab720eadf3346f14a7a6167b964c9e0e4
SHA512 b859155a876f6e221418a9fed6786c089d3031e4adebbaa3182669da24b85c7b67fb0938d3cb6e579810629fbb27cf5721500491f8001264e9122ec579534b03
SSDEEP 192:sxRLRAbo/fi+sIH3SsmZnzoA8p4wz/g6+WNIYx/lIJkGxIgIJ:sxRLgo/fJsIC4N/5Izds
TLSH
T1E332C8165928A93B8CCAE21DFB567F53E2F95032A0D41E54EAFC961C04EB6DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b359497-28d6-4aa8-8554-5df15d1999b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2b359497-28d6-4aa8-8554-5df15d1999b6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 3592aa0993ffd56ece92118224ef3421f699c101f5155208105630917c08147a
MD5 c0cfc3c1692998153392e4c833bb0068
SHA1 126c2718e9b0e851ba83769d71f89c430e995d01
SHA512 9d8a7c4d1ee980cae151d41038296d6640a4caf1a25c54667d2365958e2590eed97d175d63fde32e1f460320fb3b3ee47ebc96b65312353ca22fac1245e253a4
SSDEEP 768:Jmw3rf7MkKL2SEjF669yrqUjWiIwwxMtwfml2w:Jmw3L/HjF66INWZTMaf62w
TLSH
T146F2BFB06CA49DB788F6D385B2123387AFB0805782DD4F9889CCFB1D055B9ED174782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a208e4f84cc2a7cf26dce3ada7122c4531b170a16abc6fed083bf554b8397d3b
MD5 650a71b5d6702ed6136ce0bb6a206418
SHA1 eac1866296288f07f320600e0973c1d7dff2b756
SHA512 dc6ed0d9768b667228440b5db5fbed52dbaa0bfe8dad04066ccdbef97c738c08ca39c22493eea54fe91411d50b867be41c70097e44534be57ab93b23298d3fe7
SSDEEP 768:Jmw3ifGMkKL2SEjF669yrqUjWiIwwxMtwfml2w:Jmw32GHjF66INWZTMaf62w
TLSH
T183F2BFB06CA49DB788F6D385B2123387AFB0805782DD4F9889CCFB1D055B9ED174782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 8594a9f3f671feef8bb8932c56971d2e23a8899ead8b16d5256512a4197a5d8e
MD5 0117a9f0816d3ab3ad9f78d00885c477
SHA1 74553b871d79039c5a5e553d7cea229b25c22c34
SHA512 3ee052465ba7ae67221936e04ca0a3d347ecd36b167b0c9f1da70c03ef9bc8246bdff21f16f558b3ccc968660317e98b1479e01bdcc6e41509dc8e2f18f59540
SSDEEP 768:xzFQ63HwgDf7MkKL2SSnF669yrqUjWiIwwxMtwfml2w:xW63F/PnF66INWZTMaf62w
TLSH
T191F2BFB15C9489BBCDF6DB85B2123343EFB080A7C6D99E9896CCEA1D015B4DD1347C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f53df4e8d16c5bf6eeb6591687ba429508254f31ce79d3d8d9fd65aa9ad15a96
MD5 d07edab4b5e398cbe01faad5fb731ed0
SHA1 ece3fa44e5f05adbc8e6cb8d499ae2b6781c3b4b
SHA512 89008f4667b86718c92c9171389afe81879e5254a8f2d6c12ae1eff583e211c6b13a673fb86e5537c677edb58a42c9156a41feec3a67ff1a4138adb1a50f8e61
SSDEEP 768:arv+4UNbdl3hPkKL2rpjF669yrqUjWiIwwxMR1Uiler:absbX3uTpjF66INWZTM3UsQ
TLSH
T14603CF34AC589AB7CDF2D28672537783BFB4509392C50B88CADC670D469B0DD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4fb275beda450aecaf667ee272071d0f5ba25afce781aff3e11f35e99a318b7c
MD5 6f4b7f525101d5fb5cc90bef10807dcf
SHA1 26c2ccb33fe62793e88ee04617971ec79c2bca94
SHA512 5b65595b59231502f0c764a81f831ecdd61f837f2ad8f391f0a9f089ba48afb496d90ca1e498efaa586b30671c1acfbf2b5b4b7e6e4306d72647296b7357bc1f
SSDEEP 768:Nrv+4UNbdl3jGkKL2SKjF669yrqUjWiIwwxMAwUiler:NbsbX3B3jF66INWZTMtUsQ
TLSH
T18103CF30A868AAB3CDF2D28671137683BF74519382C50F98CACC774D469B4DD234B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32dea88d-a734-41a6-bebf-a6390131d15c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\32dea88d-a734-41a6-bebf-a6390131d15c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download