add4a04dae702ff816d13987a2d07cb759dcc5a5a54a1b16a29eaeb5b9d58d6e

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130379380.html
Size 37KB
Sample260826-g32csshk7w
SHA256 add4a04dae702ff816d13987a2d07cb759dcc5a5a54a1b16a29eaeb5b9d58d6e
MD5 0149a5ea782a148f78879daa60dd478a
SHA1 461fa42136f5447ae80f1d53e86f806c94e31730
SHA512 2bda5d38e5ccd692c143f8450b8d93a19cc83d394e96fb1ffaf305d217b4fc9d35591a20f15fdef4ac0ad4106360e5399911960a5bcb595e66947bb7f720a0ea
SSDEEP 768:jCULWSbteXjtOvzGMJmJLS/t42yEKzElRLxR6clwZR2i/u/OFamLTraLNM/1YvKH:jCIW2eXjtOJJml+y7GL69cCOjvUP
TLSH
T12F0331D572C4F51712CD1A33BF1FBAEAD16B9CA36484B547C2A4B68C24BD117C6A0CB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321989382461361"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{C8A3A4A4-0417-4872-A694-441563947548}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 5944	4680	msedge.exe	88
PID 4680 wrote to memory of 4980	4680	msedge.exe	90
PID 4680 wrote to memory of 3308	4680	msedge.exe	91
PID 4680 wrote to memory of 4980	4680	msedge.exe	90
PID 4680 wrote to memory of 4980	4680	msedge.exe	90
PID 4680 wrote to memory of 992	4680	msedge.exe	92
PID 4680 wrote to memory of 992	4680	msedge.exe	92
PID 4680 wrote to memory of 6064	4680	msedge.exe	93
PID 4680 wrote to memory of 6064	4680	msedge.exe	93
PID 4680 wrote to memory of 3908	4680	msedge.exe	94
PID 4680 wrote to memory of 6064	4680	msedge.exe	93
PID 4680 wrote to memory of 3908	4680	msedge.exe	94
PID 4680 wrote to memory of 3908	4680	msedge.exe	94
PID 4680 wrote to memory of 2512	4680	msedge.exe	95
PID 4680 wrote to memory of 2512	4680	msedge.exe	95
PID 4680 wrote to memory of 2512	4680	msedge.exe	95
PID 4680 wrote to memory of 2560	4680	msedge.exe	96
PID 4680 wrote to memory of 2560	4680	msedge.exe	96
PID 4680 wrote to memory of 2560	4680	msedge.exe	96
PID 4680 wrote to memory of 2840	4680	msedge.exe	98
PID 4680 wrote to memory of 4596	4680	msedge.exe	99
PID 4680 wrote to memory of 2840	4680	msedge.exe	98
PID 4680 wrote to memory of 4596	4680	msedge.exe	99
PID 4680 wrote to memory of 2944	4680	msedge.exe	101
PID 4680 wrote to memory of 4044	4680	msedge.exe	105
PID 4680 wrote to memory of 4032	4680	msedge.exe	106
PID 4680 wrote to memory of 3704	4680	msedge.exe	107
PID 4680 wrote to memory of 4344	4680	msedge.exe	108
PID 4680 wrote to memory of 4344	4680	msedge.exe	108
PID 4680 wrote to memory of 2272	4680	msedge.exe	110
PID 4680 wrote to memory of 2272	4680	msedge.exe	110
PID 4680 wrote to memory of 2708	4680	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130379380.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffb5309c188,0x7ffb5309c194,0x7ffb5309c1a0
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,1059124365860087868,5524363759405242528,262144 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,11461394505724277632,11872075779898672587,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,3807190041736278719,2410701026191996138,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:13
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,7183036703974006358,3525793510375338410,2097152 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,15067374486407596203,5536586382874107113,2097152 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1744,i,5204687889578271575,12325826811051873046,2097152 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,8573714193656235514,7044026959219869756,2097152 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,8976505377406843665,2222614017134468122,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,11466841323115941214,187628742859858036,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,16573711280671236197,9818393743169279987,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,16573711280671236197,9818393743169279987,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,9902454755870494519,3727820422450165684,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:14
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,9102098482213938394,16981819524790702661,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,8231029251792512364,14064409183969344736,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,11588189656399515514,1314494034971009008,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,7021619637273024485,16723162063561518993,524288 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6464,i,6293409680293097725,11703407101811040517,262144 --field-trial-handle=2940,i,4984633593215936580,1167056994034437112,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 74b5426506bcaa7e53650df0be4b6f8bcbde5dc33d42f89a1afc71ea1103e64e
MD5 a32da6e7d575419ed20f24d7f1b98fc3
SHA1 d2e87b1ceb9bb02ae9be69c0c625baead65358a4
SHA512 b6ae78ea5412584219bc63b258f7a89e03b2005744a5e4a4ce88fab1827f2947230d4a287ea84c57be31b0ea24cf1485ac9b8803ee3ad43d6552f3a1bf3fe9e1
TLSH
T16F51F9CB433704E7E3AC48756CE28C6E3E75C5E900CFEEC0AD4865B84A4A31B2CC0092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0929.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0929.TMP
Size 2KB
SHA256 22a1128634080c44b62dbec8e627641254fe2d662a596053699746c146588ffb
MD5 fdf531959d4001c8ff373c6853205837
SHA1 8d1b7eb11ec0bb794a8373ef3f52811d0817f612
SHA512 c3a14c17859214c47c6d4c3a2dea5939094b981045366b303b3425552cd09bc2d2fcc1caf4fd17e8e3a2a86ca834c1b9886c0c6811e7997e63405108e36c2a5b
TLSH
T1F351D9C7433704E7E3AC48756CE28C6E3E75D5E900CFEED0AD4865B84A9A31B6CD0092
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8a82148c159367b39bcbb46c29bc9a4eb358ea9954ed117192ca8fb05cf84149
MD5 83134c25eee0d67d11c87d40e6903fb2
SHA1 69ccc394ff4ccd862cd91dedf64a1383d5a13f9f
SHA512 b3e224f476461b1f1f04801002b9538530af1ad63cccab17685d38e45eb2c33acd38983ef6618a8d0b298f92c24196260ca54ae7e373ea4bd0868bede5bdc330
TLSH
T14231A0F783F4957E8A1196F0AA14AE2FCE1D0515431C7C69C9E0AE2793F3472E045A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bfb6d1683f208e34256c4017f096ed16c908a2df73e88c8b0f204e395a25c0b2
MD5 896b8becf01245a326caaf56382aa96e
SHA1 6c46f542c4ecf0fadac6f0f4f70b5593a1bb1c15
SHA512 90b83875cc17c9711efaa92286e5b2aa64ad715eda8f58e088ac927edbefe2a5d91a132a2e1404c52c0659dfd4149879093ee9f08f5b8abb602e89e4a3ec2249
SSDEEP 192:sxRUR1bE/fjsEmprQ5hzoA8p4p/g6+WNIYn8ULhsGMIgDdJ:sxRUDE/fjsEm5U/5ITo4r
TLSH
T1D73296166A68B93B8CC7D21DFB55BF53D6F95032A1D02E48B6FC9A1C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9d52142631b702e60881ae9bba8965cab5da0216f152cf103060eee5e9568574
MD5 abd9280b5e23cac851f855c51ed19150
SHA1 794ecdc584eee0f58590b12f96f55b158d66b9cd
SHA512 4b8436513a83794c48cf77dc142ffac5183cdadc77ecdcdaa388904a32f6e9b7ff73c7a69dad524bf2b532f38dc9167e588c87813428b64dcfec8b1f02986c00
SSDEEP 192:sxR7R1bE/fjshmprQ5hzoA8p4p/g6+WNIYn8ULhsGMIgIJ:sxR7DE/fjshm5U/5ITo4s
TLSH
T1503296166E68A93B8CC7D21DFB55BF53D6F95032A1D02E48B6FC9A1C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1849b67df88e83f8298d684dfcf3e935da567799e3676249bb019f35dbc97c2c
MD5 492fc64b105f6367004fad7f125eacc9
SHA1 b14f7c40a96ca9eee930e499e5b16801f524cda9
SHA512 bdf3d9555f350efce64bb547922f4758c1540bdcd65d2caab8527431a606121953060d94167cb15010b42b924edbabbd394be694f75a740752332899d570bfc9
SSDEEP 192:sxRUR1bE/fjsEGprQ5hzoA8p4p/g6+WNIYn8clfhsGMIgDzJ:sxRUDE/fjsEG5U/5ITs4Z
TLSH
T1DB3296156A68A93B9CC7E61DFB55BF53D2F95032A1D02E44B6FC9B1C04E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cd7f752a421a22361e1f9f79a473e10f1823591a5e3ad75c351df01ba3beb3cf
MD5 4cd62b61ab97b682641a79f95515915f
SHA1 0df10b32725577634b6490367be9b5b0b755cbaa
SHA512 5c4dd48bc69931e0336dda85a1cd301922d454ab2d139887bd72e4c5e432adfc0ab0d97bcdee97f3b186ad128eb6b6fb0e14a2734be0e6ca1ffe12039c0a7a4b
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPurohMy:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vu
TLSH
T1E2B2DB3B604DCB7E5F800A9DEC19AFDB6D9802C79A948D4447FE990C03C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

45387c7d-4762-4146-a6bc-db0bef480b7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\45387c7d-4762-4146-a6bc-db0bef480b7d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 46dd78cd8ee89e89df88a1e997e0a8318f16271ab927086eab917528914f1884
MD5 3b0507937e7eb6b6cf81d3e647f4320f
SHA1 c6f17d0f8a7c4ccab9f5f9bd964b3670d2050ce2
SHA512 9cc62ad914e001cedee176ef68ca895fb20744fe695d4607d534f35ea3f518ba14fb63b65bb0e0af533f3c387dcffb940b4eedfda1b0f54e031b8a8164842b9c
SSDEEP 384:/ZcIz38NIfUTiAGqJDZNfNoXOVSUU0UhyztETRzcoXfK86sfxEZxxsIj4lBtXLB1:Xz31AtDZIO00U8iNzc4ReyIsPtFN5GCN
TLSH
T1BDF2BF31EC64986BACE6A642F60B3643BDF4552BC1C83E94D5DD6F0C09876AE035F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b80a553dec1116d6114a98d84af4d85ee15af52cbc4e46a0e2b14d8fae531cc6
MD5 790efbc853dd064a1efc38a451dcc269
SHA1 45bb242c6a3f0eba7ea30e7f270e54af5755bed6
SHA512 f05fc01deff8309f15dccd47a89211f13b68ad0c9869f260cd2d661935cef558498f9e946002d2ffc63e6ff97fac9667a49b21cd5870cf2426a0dadaaaa15137
SSDEEP 384:oZcIz38NIuUHiYGqJDZNfNoXOVSUU0UhyzRETRzcoXfK86sfxEZxxsIj4lBtXLB1:Wz3wYtDZIO00U8mNzc4ReyIsPtFN5GCN
TLSH
T19EF2BF31EC64886BACF6A642F60B36437DF45527C2C87E94D5DE6F0C09876AE035B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a1b9166f18df52c59c4f7e1d93512317f3058c1b4f2c52e973a91854a503d33f
MD5 8ecc90e89da8906b5c8c55ff076de4e6
SHA1 d68444d32d02015d44b2278e4f935e96d93be0d4
SHA512 a22549d7f48a4419ea74a630f191751c1139ce43d7f383c333a14b81208d0673da02abbceceaf50dead58920e548016b66e42fca9ff63eb38dd467af64211e34
SSDEEP 768:oFQi3Hwg9AtDZIO00U82Nzc4ReyIsPtFN5GCN:Li3IU82tc44bsVFNIy
TLSH
T121F2AE729C64C97BBCFA9B85F60B3243AEF54167C1C8BA94E6DD6E0C05475ED034B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 95937464de885dc37e49b20ddeef063e00e38c00fcbf94ff952c25112d47f116
MD5 be50211f887a989edb1fae5a1ca1d790
SHA1 309beb0edb10c44a9382d407454cd7fa3045d637
SHA512 902d17aa621b00028df083cd4f945c37383a876cb6a10dbea16063cb102655c7749949fe956646f76b6c2f914d7aa35a9ca50501077458c0d3b1ce7ba061510d
SSDEEP 768:6rv+4UNbds3YzDZIO00UPNzc4ReyIsXPeVH1S5D:6bsbS3WUPtc44bsfEH1Y
TLSH
T1CD03CF32E8788A77ACF6A686B54B76133EF85117C2881AD4C5DE2F0C468B5DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4fa6e2662ef056ec2d6c2964af8b8377c743b7cdf86ce090cf93d08efa07c2d8
MD5 ec1883074e7b6bd1407411123cd8dcc7
SHA1 8b1454fd853267301ae4ce89230a1f3fbf2478c1
SHA512 c7995db0bf2ac7bb1f189c384f93127d1a0ac7f7a49108e2d3ecc229aa36ee55d6a12386f616271e102bf3720c1318c1cb78c7ef0d149cf9c42e37982863f30b
SSDEEP 768:irv+4UNbds3YZTDZIO00U8TNzc4ReyIs2teVH1S5D:ibsbS3UU8Ttc44bsCEH1Y
TLSH
T12303CF32E8689A77ACF69A82F54775433EF8511BC2881AD0D4DE6F0C0A8B5DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc2d1fc5-c82f-4488-9732-7f89957a9dbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dc2d1fc5-c82f-4488-9732-7f89957a9dbe.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download