b267bb3814efce6a154b21e03206679d71231efeabce4e790572a0cb4702b400

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Public/ssa_spanish.htm
Size 40KB
Sample260823-d39sdsxtcs
SHA256 b267bb3814efce6a154b21e03206679d71231efeabce4e790572a0cb4702b400
MD5 43d1f723edb780652eb5d0b8b5b051a8
SHA1 825c51ae789d25430068778b83cc1d01f0d77268
SHA512 15ffc575a4fe2debda61a34f76184735d905af5e9d82c6fcbf12b33a59d3b293724a4fa36aeaa567e328f52aaeae3bfd654cc0d267aa35a668514106344cf98c
SSDEEP 768:ByXVsxum2EG4MUOYmu4sG70rQxrDs9KyV1MVkuSueDa9pSZmZevu9eLzwIFOr/:aVsxuTEG4MGmu4sG70r2D25MVnSueWhT
TLSH
T10403BA74EDD8779201938345BE87F693F92D8296B005DAE1D1EA424B71CE3C8C77EA48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1352	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319296494817754"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{C9DF40BC-F8B5-4672-8FBA-BDA9E11B2073}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4988 wrote to memory of 5664	4988	msedge.exe	89
PID 4988 wrote to memory of 3972	4988	msedge.exe	90
PID 4988 wrote to memory of 1352	4988	msedge.exe	91
PID 4988 wrote to memory of 3972	4988	msedge.exe	90
PID 4988 wrote to memory of 3972	4988	msedge.exe	90
PID 4988 wrote to memory of 1864	4988	msedge.exe	92
PID 4988 wrote to memory of 1864	4988	msedge.exe	92
PID 4988 wrote to memory of 4436	4988	msedge.exe	94
PID 4988 wrote to memory of 4436	4988	msedge.exe	94
PID 4988 wrote to memory of 4436	4988	msedge.exe	94
PID 4988 wrote to memory of 1004	4988	msedge.exe	95
PID 4988 wrote to memory of 1004	4988	msedge.exe	95
PID 4988 wrote to memory of 1004	4988	msedge.exe	95
PID 4988 wrote to memory of 3160	4988	msedge.exe	96
PID 4988 wrote to memory of 3160	4988	msedge.exe	96
PID 4988 wrote to memory of 3160	4988	msedge.exe	96
PID 4988 wrote to memory of 4676	4988	msedge.exe	97
PID 4988 wrote to memory of 4676	4988	msedge.exe	97
PID 4988 wrote to memory of 4676	4988	msedge.exe	97
PID 4988 wrote to memory of 760	4988	msedge.exe	99
PID 4988 wrote to memory of 5556	4988	msedge.exe	100
PID 4988 wrote to memory of 760	4988	msedge.exe	99
PID 4988 wrote to memory of 5556	4988	msedge.exe	100
PID 4988 wrote to memory of 6128	4988	msedge.exe	102
PID 4988 wrote to memory of 2080	4988	msedge.exe	106
PID 4988 wrote to memory of 5860	4988	msedge.exe	107
PID 4988 wrote to memory of 4596	4988	msedge.exe	108
PID 4988 wrote to memory of 3416	4988	msedge.exe	109
PID 4988 wrote to memory of 3416	4988	msedge.exe	109
PID 4988 wrote to memory of 2780	4988	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Public\ssa_spanish.htm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb7cd9c188,0x7ffb7cd9c194,0x7ffb7cd9c1a0
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,9437648489214604697,17109909468217064433,262144 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,8368010856335987441,18111610847935135388,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,15921855571743354073,11200100878107711249,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:13
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,18024511367851126216,12717194750973540331,2097152 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,11484396955502144989,11943809479494296708,2097152 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,14664438995228145498,8315017249718399065,2097152 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4376,i,4999614709220188786,1190247214108042342,2097152 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:9
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,9712267260785567772,2078894106301753841,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,15208918494255961294,18420689171292064422,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:14
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,8390190500656844411,8236447407902838866,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,8390190500656844411,8236447407902838866,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,8643562663412836063,3310587862340314657,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:14
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,8122377796310604833,5546420605139686843,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,11876059576513301290,17858207704908063622,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2960,i,7223114299061737304,3833080097524013799,524288 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:14
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6488,i,18233100723073532345,4783694123882002843,262144 --field-trial-handle=2340,i,6080470938630454391,1517901392684831430,262144 --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

17c9d276-d777-4679-885a-d8bbe5d4be97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17c9d276-d777-4679-885a-d8bbe5d4be97.tmp
Size 11KB
SHA256 208a585b3a5cb5e89efbc572b76576edb0bf42594935809008179350f64be80c
MD5 6a660c6a338dc1bc1e9ac8ae59f2b1c9
SHA1 56e1ad96b81f7af9a6b0e1e5bb96453889ddd978
SHA512 93b20d65c1367c8432864032d16e9df1dd76f942e819f8c5c31f3ed41aa0450d74d27f5167675a9abae58d368bee07db0cc1310d9672e8bfae487a294bc09815
SSDEEP 192:sxRaRDbj/fosrSNA3AtHzoA8p4b/g6+WNIYZFLKLwGoRIgIJ:sxRa1j/fosuNAnm/5ISjs
TLSH
T10532D8166928AD3B8CD7E21DBB55BF53E7F95032A1901F08ABFC961C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bef3063290bc7ede914fd96c2abd38cdc326d7fbaddf0b6f35c0bca81ff97eba
MD5 c1996f8b0a4df7ba350912fac6cea709
SHA1 dc6c0bb16d2ec9ca49eb545c035928f7dd1d7d43
SHA512 d9057bc821322db6bc85c7d2b47489a0179189c564da381d7ded11531938fbba439ab3e5f3bd44fd4e96aec055112c3578009accbdfe6b137d809dcc276d8c73
TLSH
T12541BC50472719C1CB3275B7D9D1CBB67EFE847D4607AF1D81B4A1B8AA02F749412632
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59dc1e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59dc1e.TMP
Size 2KB
SHA256 593e6efad430df2ffea42eb708ed4ae373d7b02ac3c722f9c18baeeb67ab97f0
MD5 5f5db006f994ebedecc7629b2d202f87
SHA1 8081c0c9ab7cb6318790bbbcd6c2fb9d3f3ac19a
SHA512 1e89761f38e91581b826a0e8b091710a4a745675511b92effde0ecdab9d140ca0c779890849c4d3d5a3a7455d6cf648fd9171b00b0792ebd0b1e9c0aa3d95433
TLSH
T11C41CE50472719C1CB3375B7D9E1CBBA7EFE84BD4607AF1D81B4A1B8AA06F345012232
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 940abf664a66c2dcc1df62e3d7f1aa4acb9da84359e4032ed50a5738c7fa416a
MD5 abec89f1d5b27d19d40d04d1ff81e19c
SHA1 57554c0fcb59525f10937e72da27dee9a59eebbb
SHA512 135e0359efc1ff7c426e63ae709bb55d5961721c7c164631146299415310839f86083fabc5367de7dc98c02bcf7074f481fd68a2a13fe10ed42fd90dc7713dc9
TLSH
T15D31C2F783B5857ECA1196F0EA14AE1FCE2D0515432C7C6985E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 760286ce724ead367df11d4c8f9e9e7f24a4bdaf24c70739b370821bc29bbc3e
MD5 886f501b159feaff3fc521cf3fae1de1
SHA1 6be3366b106628e155753a87a2c532ec1545d5c3
SHA512 c5fa81fc4e6d3e9141033324960b2ead4e8a3f1bde44487591bab39857796bdb55552cc2bcbbc258887b682bacb3dc562798eb58d3542eb76dc72b298b0b52c2
SSDEEP 192:sxRVRDbj/fosHSUA3AtHzoA8p4b/g6+WNIYZFLOvwGoRIgDTJ:sxRV1j/fosyUAnm/5IS9J
TLSH
T14842D8156928AD3B9CD7E21DBB55BF53E7F95032A1901F08ABFC961C04E76CD221B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9a927ae855764379428de96fa206fa9c0d408302cd7a7c7fc75ed30e691962be
MD5 b84badb27cb521eed6e5f32a9cac83ce
SHA1 bf40d93718430930074b30735db8a1c7bbfbcc0e
SHA512 351452a93b75bb6ae2e9161453997c87b9e09b964972d2b527faf2bd167466297b3331af7bfc12bff206b526db9e28f6df29fd405d0967463ba9d73b8f04deba
SSDEEP 192:sxRVRDbj/fosHSNA3AtHzoA8p4b/g6+WNIYZFLKLwGoRIgD9J:sxRV1j/fosyNAnm/5ISjb
TLSH
T15132D9156928AD3B8CD7E21DBB55BF53E7F95032A1901F08ABFC961C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 186402b9c4ace79ce8fd1f25e5bbd350d6a09e78c226bf374fd6b33f3ee88c6a
MD5 b7c86d9549d21226d4490a8ecbbdf19c
SHA1 0b46cf1425fbf7d0e1c1f998b94bee1058054c9b
SHA512 8ed052e167dc4df093155d5fee4e2b774423221bd5c314a603b9828b284716d8ae80652bc8d783f1ae6f037cd9a1cdc6877765264c6fdee6676e00f4f712bd66
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGarocmD:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0V7
TLSH
T177B2CA3B640DCB7E5F800AADAC196FD77D9802C7A6988D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

62877384-8f33-4647-b833-b8a4cc28d409.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\62877384-8f33-4647-b833-b8a4cc28d409.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7489aa034722735a13e1df7bd95c25a2cb4126fdeb8f76b0105e746a7d301f1e
MD5 4e7b8ab5babc41c56d597747ff0e536d
SHA1 ec3d9cf679b83d25b3ade43d24a354ca14060bf5
SHA512 629b947bb0f57eb4150bf95126008f26da263cdf22bda2ffe8e1807af3952b2019d9e321eb94e30450a71144d208c36f993ffb99bd4a5ad6b0fda49c87917857
SSDEEP 768:drv+4UNbdH39+T+LeSFOUJtX4fouOToPvB2thtA9VABueVH1SlX:dbsbh393snnwthttEEH1Y
TLSH
T14403BE32A8A89933EDE6D398710BB1432FF4915396940F8499DD2B4D069B9DE070FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4df0a9a11d7bafb48d8aa7106906abf5a1608a90d3a3d3fe7d3835cd4f51545c
MD5 f68654d935bca9c2ffd4822f943c0028
SHA1 c66bdadddfb470de79e8cf3d97506e4984bdeb9f
SHA512 13d3579012e73fc4c5bbb0201dc49d4b277b329548c315ab2465d757faaa0e5c1a8d4c878692f02d5063bc3f303e924b3e8d8cb085a44c75145b6a228c061c3e
SSDEEP 768:Wrv+4UNbdN318Z+LeSFOUJ8X4fouOToPvB2thtA9VAguoQk:WbsbH31Usnnwthttbot
TLSH
T19C03BE32A8A89D73DDF6D398720B72436FF0815396C40B849EDD6B5D028B99E070FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a85a0b0e3d6972d153b45aa2b99bc7ccc83f6e110100b88b8987238054e6ea63
MD5 7bc855cc32259c4af02e87a678d9e35a
SHA1 3500d60836310898eedbac5212cc9b63356d2adf
SHA512 515f2c3980360ee5290c4b74ac50a5d81ec6ec530ee1c889d9e376b3a1eba435b2dfdbe8c74f3561babca442856e4109ae18965f18f05b2544f433f66f658f0b
SSDEEP 768:zi3VCZ+LeSFOUJeX4fouOToPvB2thtA9VAguf8lLb:zi3VwsnnwthttbfcLb
TLSH
T132F2BF72A8A88C63DCF5D3D8730A72526FF0812396D81F845DDDAB2D019BA9E070FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 54b96422b76c6cbfd95dbde5d5bac82565eebfb48a117a5625038f99944cc729
MD5 8bb13ef12c943e07aa14293c3f4d0ce0
SHA1 65b7182f416338d1104e4de63c2d3160282adff8
SHA512 ff77935cdae32d5f5ce11e8e92ee3994c94b51b42a6b55ab72695480013196ded119bc65ebd6261d5505db10e4c7b13132161081b8160e3b63e8f98918f0c066
SSDEEP 768:qi3wCZ+LeSFOUJeX4fouOToPvB2thtA9VAguf8lLb:qi3wwsnnwthttbfcLb
TLSH
T1C8F2BF7298A88C63DCF5D3D4730A72466FF0812396D81F845DDD5B2D059BA9E071FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dcb0e47f71400a9b51bbdaee8ce910745f9ef9b9326d58daf7775052363ae3d0
MD5 cb06b2788c63acb1e729954a1e8c05de
SHA1 ae8cf9e229d5421dfa5b6160cb041a4a8ad28d4f
SHA512 861a3e681f9df11e7e7160c3c6df192c5598423291f3269d8fc70901d0891b20cbcf6985a0ac447637a743afe5d92fb3615c29e7676da2a4231923b1f168ee13
SSDEEP 768:grv+4UNbdH3NI+LeSFOU5X4fouOToPvB2thtA9VAwPeVH1SlX:gbsbh3Vsnnwthtt2EH1Y
TLSH
T14903CF32A8A88A33EDE6D398710B75572FF491639A900FC499DE1B4D079B9DD070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 3ee923281c7dcc32a52a08e30eea46102ac2b6fa024f2af0d2c72da20bcca039
MD5 dcd16d136c32014a54ef68d6530d78b8
SHA1 d69d51f4ebab2f2254a8920bcf357735b7640d9d
SHA512 aed5f0b25fdb1e626673b426fddf8b7441bf76a0c2142dedd0ec285852b68e4e887e12284b3ec02a950d1c872e5eafdcd010d9623f2672c784963471e9209e57
SSDEEP 768:OFQM3OwgkCZ+LeSFOUJ2X4fouOToPvB2thtA9VAguf8lLb:lM3H4snnwthttbfcLb
TLSH
T11EF2AE7398A8CD67ECB9D3D8B70E3252AFF0816385D8AB946ACD9B1D01576DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a825deba-4ca2-4df7-89f1-ebdf66a273e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a825deba-4ca2-4df7-89f1-ebdf66a273e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download