38b51ee1784e691aa65de1987138d98ca6f4c8f7b58f7ee7e6ecb7a748d94bbd

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130313243.html
Size 38KB
Sample260827-ajx3psyala
SHA256 38b51ee1784e691aa65de1987138d98ca6f4c8f7b58f7ee7e6ecb7a748d94bbd
MD5 a141125780967d915ec976054f66f483
SHA1 0d9f4b0fa60118b70b7040784af4794db96e6864
SHA512 10bad06c7d6be6aed018e0c1b75018be3aac6cb5513f97dcea2caa41b5118d9911a034baac22469b0f1b1492b3f173dd6283b829a6b1813b65d661d458678c80
SSDEEP 768:8jIw1WKpYShNgh7E4LcmkeQ4LIwih/LRkYRR0yb7+NKOS/JLk1rW11UxAUb3Yp1T:8jIw4KpYSIh44LDhIwu5VlYK
TLSH
T1F603F2D17680E41356CD2F23BF0EB9A9C5ABACBB64D4764782A47A8C24B9117C1F4CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2756	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322633435510040"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{62510774-BC57-44C0-9602-75CC086A00E5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4304 wrote to memory of 1680	4304	msedge.exe	88
PID 4304 wrote to memory of 2756	4304	msedge.exe	90
PID 4304 wrote to memory of 932	4304	msedge.exe	91
PID 4304 wrote to memory of 932	4304	msedge.exe	91
PID 4304 wrote to memory of 3144	4304	msedge.exe	92
PID 4304 wrote to memory of 3144	4304	msedge.exe	92
PID 4304 wrote to memory of 3144	4304	msedge.exe	92
PID 4304 wrote to memory of 2564	4304	msedge.exe	93
PID 4304 wrote to memory of 2564	4304	msedge.exe	93
PID 4304 wrote to memory of 2564	4304	msedge.exe	93
PID 4304 wrote to memory of 3764	4304	msedge.exe	94
PID 4304 wrote to memory of 3764	4304	msedge.exe	94
PID 4304 wrote to memory of 3764	4304	msedge.exe	94
PID 4304 wrote to memory of 1156	4304	msedge.exe	95
PID 4304 wrote to memory of 2152	4304	msedge.exe	96
PID 4304 wrote to memory of 1156	4304	msedge.exe	95
PID 4304 wrote to memory of 1156	4304	msedge.exe	95
PID 4304 wrote to memory of 2152	4304	msedge.exe	96
PID 4304 wrote to memory of 2152	4304	msedge.exe	96
PID 4304 wrote to memory of 1316	4304	msedge.exe	99
PID 4304 wrote to memory of 1440	4304	msedge.exe	100
PID 4304 wrote to memory of 1316	4304	msedge.exe	99
PID 4304 wrote to memory of 1440	4304	msedge.exe	100
PID 4304 wrote to memory of 4180	4304	msedge.exe	102
PID 4304 wrote to memory of 2564	4304	msedge.exe	106
PID 4304 wrote to memory of 3304	4304	msedge.exe	107
PID 4304 wrote to memory of 2308	4304	msedge.exe	108
PID 4304 wrote to memory of 6116	4304	msedge.exe	109
PID 4304 wrote to memory of 6116	4304	msedge.exe	109
PID 4304 wrote to memory of 4608	4304	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130313243.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb7a1bc188,0x7ffb7a1bc194,0x7ffb7a1bc1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,8584048266651681602,9233990033403398766,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,12353191505586411466,14736923725329924724,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:13
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,17710390317061976905,15751189093887625680,262144 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,16608283756749284080,15969647253000444851,2097152 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,14695146683917097684,7769942861275127802,2097152 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,2134547319901999111,4018377436830942707,2097152 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,7010171151948643054,13250179239810959270,2097152 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:9
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,15221303071857406910,10129843710691996498,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,425624333172038501,13752443525811743274,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11339725750681877682,5599348321252972757,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11339725750681877682,5599348321252972757,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,12327259307295456864,10816967772019402535,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=1220 /prefetch:14
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,5108293449387848155,1940417435800867567,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,3574483280538767435,1750685708669446276,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,4650325985920050077,7606537314944478783,524288 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5016,i,4590222042864510037,3232987506665925294,262144 --field-trial-handle=2496,i,13101896710910973913,13397954919780460742,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 39bb42ee07c62829e68f321da74c54164fd31354a418fe9766e2162929630220
MD5 c1e2c001266083a40c8b1f484b602f84
SHA1 d863c19169cf3f7d1de6b06469cf3b55fc6da628
SHA512 39ce2f06fb6812976710ff2167c6f42c4d3e927811dd50ca96b29866f63e4d12e391dfe60047b26d9d4248449833ae7af15e618f9451694651bbfb11e90c1e59
TLSH
T1E8514D4D2B6D89EDD736287991E3784976F08A3E22C36A51C380AD708D13FF524D20E7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e2373bcdf8cebd4f4da0ceed832e11fad5a3da5dda11fb93ae7e2d17c0b421b3
MD5 a4a989977aab1e3ad309ea419f7f4d13
SHA1 f0607c55a27aa2f5d65e90c8003ae75974754a25
SHA512 ad01cf13ebb3d0affff7b0d548bdf85d8daf64f9f065a2cd479b2e6ec817868c8273f6a0f73cb1f3e1d83cb0035985e9c3b42678ae5471bf1c5784b8c24484aa
TLSH
T17B31A0F783F4956E8A1196F0AB18AE2FCE1D0511431C7C69C5E4AE2793F3472E045A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 99dfac06836619a4070f817e9bbbb255030086003495ea5a543b39e2a00cc5f4
MD5 eeb4ac49623565dbaaa08a877b5471a6
SHA1 c487901bd14a6185546e7e22768072be2998a13e
SHA512 3797d09865fa419b9feb2ae90077fd5ae2d97e7ed1abb946fb658b5d2d8f19ea49b499658862b8e24dbe648dbe7ba36986e17fd116f424e382be64046cbeb405
SSDEEP 192:sxRLR0yM/jK1Ml8wbw/fes74wGbzoA8p4k/g6+WNIYo56qYcGYIgIJ:sxRLWlw/fes74p6J/5I5Ls
TLSH
T15E52DA165A349D77DCDBD20DFA55BF93D2F81573A1901E44AAFC8A0C00E6ADD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b205c8e6d190baf06ce579d52ac9aab4a1c1ecca64233a10aea296432a16ac77
MD5 50b70be7d34ea0ff9ff21ee9d502119d
SHA1 06f3e67cbd8b9d3a4e5774372d8ceda6b7131ef9
SHA512 80ade3823dcb21341a6c6e9065a5deb342e8203a0f7ff193a5ab39bd7ab55f4ef055a4aefd7f8b537b6eadbdcbc0cacc8260ae51c9870314801bc535d193f330
SSDEEP 192:sxRAR0yM/jK1Ml8wbw/fesvMwGbzoA8p4k/g6+WNIYo/MqYcGYIgDRJ:sxRAOlw/fesvMp6J/5IJLv
TLSH
T1D662D8166A245D7BDCDBD20DFA51BF93D2F81573A1941E44AAFCCA0C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b31fd7cdb856dd208ba3eba0b7374c0054a73344941beeb8a03d66b883118dfe
MD5 4597bb6c9166e87073f78101ce8bd2ed
SHA1 441f26f8389dc7b550735219d6512ec205f67547
SHA512 6a9bb7973a8bb8648d940fe806d24ea7ac8de41b95aaff8afadd7470a0389c7e10790bc90636bcb3828b7704f25029888fc1f4c2405f592ab348ba623c492619
SSDEEP 192:sxRAR0yM/jK1Ml8wbw/fesv4wGbzoA8p4k/g6+WNIYo56qYcGYIgDvJ:sxRAWlw/fesv4p6J/5I5L1
TLSH
T15162D8165A245D77DCDBD209FA55BF93D2F81473A1901E44AAFC8A0C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4dac3d458aeaa2a31d02b7e8db3a89c12c3b7a23c1dec46df8e9ca08e6d906de
MD5 e8117ca00cd1f306ace1501784cec13d
SHA1 54cecc22def3aaeac25d2d90402a60564f7abb42
SHA512 69385a1cb800b849c18b5042d55b0f0ce7e780872e83fc1e52145a78936bb8cf3b66d357d1b079ece3b46ab3c55e7db6bbf72829d4d373ed411d57b769ce0b20
SSDEEP 192:sxRAR0yM/jK1Ml8UQmbw/fesvMwGbzoA8pek/g6+WNIYo/MJYcGYIgDRJ:sxRAOq4w/fesvMp6v/5I6Lv
TLSH
T17762C81659249D77DCDBD20DFA51BF93D2F81473A1941E44AAFCCA0C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5a0673026bd5292a5e5ed5b5d668625ece4b2c5358cd2bd974a091db13a23d26
MD5 9679f613575aa33091974a2f053f14c5
SHA1 1e5fc7094a9d6511042e1d796c7adfe21d1fdc05
SHA512 df94cbe5d2a605e058f91d99ab8ae7792d5fe700a8dfc1155c4f1a4383c848c50f88bc018c9b9d6aac43f06d7ea18ba6ad5a70dadc1955b3f53142ab1e19a2b2
SSDEEP 768:jXwHSRWgs2fJ28F1+UoAYDCx9Tuqh0VfUC9xbog/OVbVuG4rockye0UrY:jXwHSRWgs2fJ2u1jaO4GDdzY
TLSH
T1B8C2FB2B640CCBBE4F844A9DEC25AED76DD801CB9B984D5447FA890C03C67EB511B4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c593ad1e1a86c6682f68fdc38e3f731bf5c8a8b5606791dec230ec2a19c10dc7
MD5 688d01469d20212dc51df781876938de
SHA1 d306a9d32dbde467e96921daa4f8bd16013955eb
SHA512 c757186054bfd74dcd79c21223bdc4faebfdd5eaf13fe9eefe857f4f7abd9c8730b491e17f9702a4badb4bb8199a2fd6f2750e83ee39bd69d3ba9507a39cd4cd
SSDEEP 96:KR8H8Q818x8H8F818ZW8B8u80g858ZK48wg838Zc8/83828p818qH8d8q8j8X8Ne:CWLa2Q445IdGWWrgEN+W10m/Hc9oMmqD
TLSH
T1AA911F0134BA025138BF6A0C85768C6E528178B33368E53B77B906E60F67E235DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2e93.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2e93.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5367fc6ebd7507c4bb8be9971d1c2a57d4efa1464b798d8dbd4498e0b6035c1f
MD5 69e6ed10403d6097b24f2d01ff05d935
SHA1 f4f06e76ee1c84d4b32d0840de6c632512a9ed5d
SHA512 5a1eb5a4c87ef8d4641a5b9a2a92d1e4e69390c1f9799724f162a9f717fcf9c03f7a1c734649329ed99d5b18c078c68aabaea5c82c497934c7c986a8579818dd
SSDEEP 768:trv+4UNbdX3v5/TBOWc8nDONXyer1IRCzni9hr:tbsbl3B1SIqnyr
TLSH
T11803BF31E5A89E339CF29285F407B2437FB81457D5C44A90D9DA2F8D06DB85E230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a4b9260f30ae9d71f0b9d578c39653edd02f553c00ec355a2e0ad2b9e93c1760
MD5 1b988efed8e0768dd5783bbab43bb3e5
SHA1 cf58a964f4fddd4eac907ab66a35c3465f48d916
SHA512 bec38070f71a83f2cfe33101cc8e4eff05f73465d9b965c2f643ad069d38db157044cd237fe209c3a20f64cad713ee04a009f3ebce91808bd0b8ce2c690d2268
SSDEEP 768:Dc3x5/TBOWc8nDONXyer1IRCzni9hRCSb:Dc3n1SIqnyhb
TLSH
T14BF2BF72E4A99E735CF1D382F60373836EB84057D5C45A90A9E93F0E06D796E130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 08fcc96682eb591876e322bae922e0af029ce206ef3e12878043ff831593d08a
MD5 ba1b6cc0ae0fd0fd9bc37534ef45afc1
SHA1 4953472c7208de24e424c2dcab763b893d1644b2
SHA512 36a7e4e9aeeb4018aa1f43336c4dedd14aed134b83b98df46941021d2e8fe192f104c52b78fb6bcf50abdaf7cb267c7fbc46810eb7610e74bb814adb58f8072e
SSDEEP 768:yc3I5/TBOWc8nDONXyer1IRCzni9hRCSb:yc3e1SIqnyhb
TLSH
T103F2CF72D4A99E735CF1D382F60373836EB8405BD5C45A90A9E93F0E05D796E130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 c30e04365ea3c0e9634a3ff6ee9a1ee93e9d8d24228ea467a17b1a25cfce4cea
MD5 7d35d7b98fe9c20e2b6a006617fdae6c
SHA1 1eef0b1004ade1d82e9cbc41b927e499744ca2a1
SHA512 710d0b50ada423e3178cf10bf50a38708209ac1765bcdc10c18cc1ced834c9f83c24a6900a7ca13b1c7301d858867ddf9b6fd6b4c8070874bfeeabd2892df377
SSDEEP 768:3FQ93OwgV5/TBOWc8nGONXyer1IRCzni9hRCSb:K93kISIqnyhb
TLSH
T1B3F2BE73D888CE77ACF59382FA067343AEF84067C5C49A90AAD96F4D019799E130FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0c10b0c3588d71b5621919c6f566d3c4cb5c2dfc164036ce6e9d06799a92b55a
MD5 6e3cc203efcaf0d92304811d8fe4eb54
SHA1 bd6e5dc940840c834cf47cc036c3f00ee74b89f6
SHA512 f72ab29db4bd932649c13123c539d2db264f78add00c7245f4140e8a346744c04dfd9b7580800bbb85fb03cef6f3b0d7c163d7c8d58771aa5c3b0ffb859682d6
SSDEEP 768:hrv+4UNbdz3UN/TBOWc8IONXyer1IRCzniB8eVH1SK7:hbsbV3aCSIqnjEH1l
TLSH
T1B303BF32E4A89E338DE2A3C5B14777477FB86057C6800790E9DE2F4E069B59D230B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 2378fe66652b019adb4b2448027c29c674920a05e2ebffe1b32ffd0cd70a86f8
MD5 ebf3897a12c6b9573d00b6c11be23ff1
SHA1 3e71cf7e22f278f6ae80a5a4e59a7b73423e61fb
SHA512 bb11bdf37af2aa9b1492f0627e4847384b32bc72840801a1333eee9825c687cb5ed58dcb3bf35c37509a391ae514e62cc611e61807a8947a9f6cf5afacbe008b
SSDEEP 768:Yrv+4UNbdz37v/TBOWc8nOONXyer1IRCzniwheVH1SK7:YbsbV3bkSIqndEH1l
TLSH
T1DE03BF32E1A89E335DE293D5B047B2437FB8515BC6840B90ECDA2F8D069B59E230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f390f9d-5581-4f70-800c-dbd2d9281ba9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f390f9d-5581-4f70-800c-dbd2d9281ba9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download