d16bcfa31e7f769a26ae081daa7309459e78399c71e77c2efdb00ac10f4304eb

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
254958.html
Size 13KB
Sample260827-g17rssyscv
SHA256 d16bcfa31e7f769a26ae081daa7309459e78399c71e77c2efdb00ac10f4304eb
MD5 014762d13bddb88c429b55ab7d4f0152
SHA1 e9a54ae0dd7e7743120cfc577f4667e3ead8ad07
SHA512 134705092ab147b4c3fc6589a3ad521f54e865cd5e5075e470989813029a853e66774a4a3bf11c30f1eab4113753bcd3340340fec254b2c54aaacd126848b070
SSDEEP 192:tupmPX8/VVL84D1imRk2nPc1yBI/KIR7UQctaUJ/5DQtIQ5QEKQuQJ5QZQ8AQ7fm:tupvEcUKIR7UjtawStxaEzHJa6S74oE7
TLSH
T14552C643A0B20225B02D75A5F27E3B194657E30393C7EBF2B1A8159CDFCA1CA9693749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4944	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322850504098486"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{84A012E5-E28F-43E7-B625-CBFFF05A55C3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe
1720	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1720 wrote to memory of 5784	1720	msedge.exe	89
PID 1720 wrote to memory of 2676	1720	msedge.exe	90
PID 1720 wrote to memory of 4944	1720	msedge.exe	92
PID 1720 wrote to memory of 2676	1720	msedge.exe	90
PID 1720 wrote to memory of 2676	1720	msedge.exe	90
PID 1720 wrote to memory of 5656	1720	msedge.exe	93
PID 1720 wrote to memory of 5656	1720	msedge.exe	93
PID 1720 wrote to memory of 2312	1720	msedge.exe	94
PID 1720 wrote to memory of 2312	1720	msedge.exe	94
PID 1720 wrote to memory of 2312	1720	msedge.exe	94
PID 1720 wrote to memory of 3336	1720	msedge.exe	95
PID 1720 wrote to memory of 3336	1720	msedge.exe	95
PID 1720 wrote to memory of 3336	1720	msedge.exe	95
PID 1720 wrote to memory of 4780	1720	msedge.exe	96
PID 1720 wrote to memory of 3752	1720	msedge.exe	97
PID 1720 wrote to memory of 4780	1720	msedge.exe	96
PID 1720 wrote to memory of 4780	1720	msedge.exe	96
PID 1720 wrote to memory of 3752	1720	msedge.exe	97
PID 1720 wrote to memory of 3752	1720	msedge.exe	97
PID 1720 wrote to memory of 4752	1720	msedge.exe	99
PID 1720 wrote to memory of 4620	1720	msedge.exe	100
PID 1720 wrote to memory of 4752	1720	msedge.exe	99
PID 1720 wrote to memory of 4620	1720	msedge.exe	100
PID 1720 wrote to memory of 3932	1720	msedge.exe	102
PID 1720 wrote to memory of 2720	1720	msedge.exe	106
PID 1720 wrote to memory of 6104	1720	msedge.exe	107
PID 1720 wrote to memory of 4088	1720	msedge.exe	108
PID 1720 wrote to memory of 5064	1720	msedge.exe	109
PID 1720 wrote to memory of 5064	1720	msedge.exe	109
PID 1720 wrote to memory of 2104	1720	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\254958.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ff82c97c188,0x7ff82c97c194,0x7ff82c97c1a0
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,4151685358625659943,18256093354612549439,262144 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,16188553950105671225,8300110696216235350,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,10602071775633757176,17183699395033735009,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:13
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,6189445303469067900,889167992911812904,2097152 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,8957067477273332570,1155928323830726467,2097152 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,84313558151309929,1258006811360898253,2097152 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,4647049705067104402,8593274609620956125,2097152 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:9
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3000,i,6888392895531078223,10545972597214202296,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,5043885037645542705,10799820847305044177,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,16995034672026135235,698399764192757177,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,16995034672026135235,698399764192757177,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,765355594648716293,17607508500644500552,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,15135696362931636056,9235935025734812457,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,16188457428121722534,442483399488193702,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,7182184797695213219,8662031607235464244,524288 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5372,i,6554396552644521183,646243028913391922,262144 --field-trial-handle=2136,i,14887829260794636569,18336760527588483199,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2104

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 10c7d78705694bd7b57cbf2ef65e63f7644c4e305135bc3f381cf6c0dc30f0f3
MD5 fbc802442d5e6c8823f1cb72c167458c
SHA1 2e3486254f031377ad629fbf2b8711ca3b263ec6
SHA512 59fea567ae5fbe22c3a67dc05113da7ef80718348e487b2ed3b2d60740220c5171f3fa57d6f84ed46b652a253d61b57837669258329d6e4f3676a7138eeb7ef6
TLSH
T1B36195615B22A6D1E721C97775E254993BF4845506872E3160816FF0CF0EF2860DF8EF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596fc7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596fc7.TMP
Size 3KB
SHA256 28b1463f5b853d872ddc5fdcd4acee0b42bb32574d3a78053e8aba61744d61d0
MD5 8781990f03084520b980b27bb96c44f1
SHA1 18dbae03f3dbc99179af6c4d32fe4db45c4814bc
SHA512 64990a6fc76cc528926936f46e79f8a6ded887d3af49660a338de1027ece95a095a0b48f6bb879154974bc792b19ab9fbb5e05508edb73cdda2253112eda1218
TLSH
T1F86195614B22A6D1D721C9B775E154593BF4845506872E3160816FF0CF0EF6864DF8EF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37443899-79c3-44d6-a0ea-f8dac7afb677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37443899-79c3-44d6-a0ea-f8dac7afb677.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8434a1e8350d1b39882f1d4fc93e9d94fa1df602d6138bdc18af3c2c9a22d55c
MD5 ab43e17049f642f54232ce57d8e4c6ac
SHA1 d8a828f4c5f38169f89f2a08c8febca0c264c570
SHA512 c7770c7a5bdeb3f504d830478d7bb98f99ab71b76ec4fb74e6f909f6f772f5f343995fb75feb147e129f7581a1108d236342856beb2b7c17b6617bfcff9a6252
TLSH
T1DC51BFF7C7E8836E891156F0AB157E1BCE1D051A422C3C6789E4BF1B53E2471D14269F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 14f8d50d883c04b2eed0d9ae913674823ce8ede899dbaa17d7d6a0aede495001
MD5 ebfd4c26c33dd1fde386b918c6917b0e
SHA1 70bdc2b277bf5a82afe5770fbbd55f8b8553c2dc
SHA512 376e58d7de3657bfbd7e6d7ea81aed19d9e7d01f0b817fc2b5856b79fdd7131817b09aaf9f836e6a49abb48cd2313736605a431c371c70aaace392dd2c401229
SSDEEP 192:sxRlLRPbZ/fHsMbnmzpq1zvMzoD8p4a/g6+WNIYGw4kIGbIgDRJ:sxRlLNZ/fHsMs47kz/5IufH
TLSH
T1A342B815A968AD3B9CCBE20DFB557F53E2FD5032A1952E58A7FC860C04E7ADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b1c4901ef06e6423e112ec6ce681b92d2240c72efac10fa31338dc3c82da9ce6
MD5 1eb8fe30a0bf801a7aaf396376e06177
SHA1 03b8d3c80108200ef71c0573271a1564bb028cf4
SHA512 7557bf76f80517f3bdcc5af1f6e18a7197e123ac3079c880dced74d34e2eaf8f5e7d9acaa5b91d17d1caec77dbdc083859192e00baec65d4f536e1e734aae886
SSDEEP 192:sxRlURPbZ/fHsVbnXzpq1zvMzoD8p4a/g6+WNIYGlbskIGbIgIJ:sxRlUNZ/fHsV/47kz/5Ipfs
TLSH
T10B32C8156968A93B8CCBE20DFB657F53D2FD5032A1D52E58A7FC860C04EBADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f1f39626a3798cb26a730179071577fd3d34f3663a2407ec638ed86692b3e4e8
MD5 4ac79ff5111995ecb079a6cc00103926
SHA1 d735082e60a5e89fd927c38da28aca4e544ab2a0
SHA512 ab99f1cb78629226d5e734734f472d33ad8c3e387eb303436459bfad1a3df52b8b702330a4c3956c71e6122752bf8dbf6faf0c0d7cebd8311157157ce9969e66
SSDEEP 192:sxRlLRPbZ/fHsMbnXzpq1zvMzoD8p4a/g6+WNIYGlbskIGbIgDvJ:sxRlLNZ/fHsM/47kz/5Ipf9
TLSH
T14432C815A968A93B8CCBD20DFB657F53D6FD5032A1D52E58A7FC860C04EBADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 da4844b3f3bc8dfd43903686d979965ed4754f978921263630d69593c6303f67
MD5 62d09fabb1a123c86da848dc606b6576
SHA1 a8f69502f9ee29105f9e801e608942ae55487103
SHA512 4c01232883b8664e6ac43ac8f7e3f50adb13aa68ef109232b148002788481c454597d44e5c066c3a64d754129a088e336239ffa9068d796008f6dd1f7b4805d1
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIGrowV:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0V4
TLSH
T156B2EB3B604DCB7E9F800AADAC197FDB6D9802C796589D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a44496cc52f7815efc253c1992d26c18147ee950567ac029adcb2cff2cc85389
MD5 d9c1b0e580a40aaf52cc2d2719841343
SHA1 372d44684f64132447638cbe7779045df2b177be
SHA512 a238c3705b2b3716657e5f270aa0ee446333f3db7ccb60b6b8f584d8930f65e5413a4816002cd97532f1129e19a46bbd759128fb23f455f3237e824eb7d8750d
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkdqjXNn7vWj4mgfvK4+gBvcldQzLkHVCbvlfF:Cm7KmgIIJ4tWGm7g09OGlkdqjXNn7Oje
TLSH
T142911011727A12C4387EA60C81B88C5BD2C175A37158A52F7BE911AA4F37E038DFD8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a15ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a15ac.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a827fc4f6afb71aae6cb2c5c09e013d03d5eaacf820ddad1c8e3913ca89a699f
MD5 3f5df301bd61826bc9ddc0f3f2a42a64
SHA1 12b737ddbeb3ef9ef4495c8cb12e11f5f96b6560
SHA512 848685ddb8967822f447daf1f43e88957715e8f1cd38b2c019d217567cc65557638d1a6bb5f72a7bf09c9fe9de3936a1e97daa443281a068a4384cf896e9c0d0
SSDEEP 768:+b3jClYykV7Hucys6BRvi82oP4/z6himo6tFN596:+b3c3imOz6ImoKFNz6
TLSH
T1AFF2AF71D8948D77DCEBC298A54A3B526EF0423345CC6E80D9EEAF0D16D765E030E832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 17cd2a871c3be3f3f1228eba88a72c32715ed935083aa382397221ec9c160203
MD5 86fad0c819fbf19f258888f0a93bffa6
SHA1 2298ad6824c4f78658a2f9fcf34af0a478e508e6
SHA512 53d398aaa9d57aa6c27d2866e7438a767208aa8be6f9334223b75fea112695810ed850f57976f113936653ac56bb39e45ce6badc703fb9f5cbb46c6e9b979f8e
SSDEEP 768:DFQv3iwg0ClYyks7Hucys6BRvi82oP4/z6himo6tFN596:mv3r3imOz6ImoKFNz6
TLSH
T18CF2AF72D894CD7BDCAB8788F64A3752AEF1427384CCA990D6D9AF0D11D769D030EC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ccadb2221a1bae9912821b4e34504668e5c3a211283405c1e2ace5cd0bfb97b7
MD5 c2e68d8678a115559c96a855269f1d75
SHA1 fd702e0987906ca06e9c67bcafc0a423aab97a96
SHA512 af8011c988cd640c4da038464e7ef9148918eb5944462efa1762cce896c3f8a0fd861ceaa1815958c6cb6c38437e6134fc855fe87a1553c0973baa236ae9051a
SSDEEP 768:orv+4UNbds39ClYykV7Hucys6BRvi82oP4/z6himo6tFN57:obsbK3O3imOz6ImoKFNJ
TLSH
T1E903CF31E8588E77DCE78298B14B7A537FF0422345CC6A90D9DAAF4D16DB59E130E823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 41c1b7634e04a71b43f464b03682a33279b65520bb6948709204c9835bbd1e00
MD5 9805a6c15a8362adc53ff813b5090843
SHA1 412cb5aa636d4f7d6dfd5e3592f22aa7547e8538
SHA512 fb01bc7f01e314ffc15f5a6625ae0f0400d639a0db4c864ca9292f0430b08a1292cde2ba1f7a43b9558d41bbb6f2b31982a3c0954f9ae3d25c6063d8f28a7a6b
SSDEEP 768:Eb38ClYykV7Hucys6BRvi82oP4/z6himo6tFN596:Eb3t3imOz6ImoKFNz6
TLSH
T1AEF2BF71D8948D77DCEB8298A54A7B526EF1433345CC6E80D9DEAF0D16D7A9E030E832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 3bc9f722f02de6710fb3cb75a6e408cfeaae98cf9e0abe72f59d36d51cc2e808
MD5 c8654cc179e5ce32ea22a30ebcecd3b9
SHA1 ccae4a7f639740b2375b76d6e7c1257c69186539
SHA512 416803aa4a5e139eaf2d31a59a3dc8f5c52c7249d7707de3572e7b1fc2a3bc6fe2cf46795421635c21bed2c2a7a79e91f0366ef038a9a1983dda4e86ce1f17b9
SSDEEP 768:nrv+4UNbdS3TklYykP7Hucys6BRvi82oP4/z6himoft2bwn+h:nbsbw3E3imOz6ImoF0w+
TLSH
T12903BF31E4589D33DDE78284B1467A937FF4526345C91A80E9DE6F4E029BA9E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dfa372110f22b1329d14cd571d1b5cfa6947eb80d78c6370407b7c2a9f10e9cb
MD5 b47f1483dc641c5b401aaaf92903b4a2
SHA1 80a39aca1b77fa8e7f6fe245fea98e9c8360fce4
SHA512 74da290c6d857868d4e8699d1530fa014a3d1fc8f738d36f78b5ba191e09c29b9d258a2e9b87f8ee53a0a139fbc40aa6da2cc7566a9f12c62719516ca360ac73
SSDEEP 768:xGrv+4UNbdS3Z0ElYykW7Hucys6BRvi82oP4/z6himo+S2bwn+h:xGbsbw3ZO3imOz6Imoh0w+
TLSH
T16003CF31E4588D73DCF78288B14A7A937FF4522345C91AC0E5DE6B0E429BA5E631BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

304d0ab1-1f3b-4b1c-8115-a60a296d3998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\304d0ab1-1f3b-4b1c-8115-a60a296d3998.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download