8bb766c97ef59c01c8d13302c9fcade52416cf3fba9ac8e5f4dfd85e77fb03c8

Analysis

max time kernel
149s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130542734.html
Size 30KB
Sample260910-ak9g5avthx
SHA256 8bb766c97ef59c01c8d13302c9fcade52416cf3fba9ac8e5f4dfd85e77fb03c8
MD5 c001aff9ae8912b3bd945e2b235ceae5
SHA1 8be9b2f928541c7d6f5fdecb1be13d630d25768c
SHA512 c0782795cd3abaa69bdea6bd70792c8a94411e84e41a49db1174b441cd243c97b0095f3b5f86fe5786d8d51828d504317fd1dc1140249b82c3d44cb2bf02c8b9
SSDEEP 768:eg5CTM0GDLTz+lj54XdRixtUUN244+HJhGysv5dGOyAwNsPGFcWtZqN/jNO79Phm:eQgLqz+lj54X6c1+gYgwA
TLSH
T167D235C072D1E41726CD4FA3FF5EB9F9D06A6C632588754B8298B68C25B9C17C6A0CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4220	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334731997760744"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{11459CFC-E591-459E-B1D6-A60DAC94AA31}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe
1312	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1312 wrote to memory of 3344	1312	msedge.exe	89
PID 1312 wrote to memory of 4220	1312	msedge.exe	90
PID 1312 wrote to memory of 4404	1312	msedge.exe	91
PID 1312 wrote to memory of 4404	1312	msedge.exe	91
PID 1312 wrote to memory of 4404	1312	msedge.exe	91
PID 1312 wrote to memory of 5128	1312	msedge.exe	92
PID 1312 wrote to memory of 5128	1312	msedge.exe	92
PID 1312 wrote to memory of 1628	1312	msedge.exe	94
PID 1312 wrote to memory of 1628	1312	msedge.exe	94
PID 1312 wrote to memory of 1628	1312	msedge.exe	94
PID 1312 wrote to memory of 5936	1312	msedge.exe	95
PID 1312 wrote to memory of 5936	1312	msedge.exe	95
PID 1312 wrote to memory of 5936	1312	msedge.exe	95
PID 1312 wrote to memory of 4520	1312	msedge.exe	96
PID 1312 wrote to memory of 4284	1312	msedge.exe	97
PID 1312 wrote to memory of 4520	1312	msedge.exe	96
PID 1312 wrote to memory of 4520	1312	msedge.exe	96
PID 1312 wrote to memory of 4284	1312	msedge.exe	97
PID 1312 wrote to memory of 4284	1312	msedge.exe	97
PID 1312 wrote to memory of 1296	1312	msedge.exe	99
PID 1312 wrote to memory of 1528	1312	msedge.exe	100
PID 1312 wrote to memory of 1296	1312	msedge.exe	99
PID 1312 wrote to memory of 1528	1312	msedge.exe	100
PID 1312 wrote to memory of 1856	1312	msedge.exe	102
PID 1312 wrote to memory of 4320	1312	msedge.exe	106
PID 1312 wrote to memory of 3540	1312	msedge.exe	107
PID 1312 wrote to memory of 4856	1312	msedge.exe	108
PID 1312 wrote to memory of 3360	1312	msedge.exe	109
PID 1312 wrote to memory of 3360	1312	msedge.exe	109
PID 1312 wrote to memory of 2756	1312	msedge.exe	110
PID 1312 wrote to memory of 2756	1312	msedge.exe	110
PID 1312 wrote to memory of 2640	1312	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130542734.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff897e4c188,0x7ff897e4c194,0x7ff897e4c1a0
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,17529815050949210626,17744545100753873733,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,7950296432028633048,12344610367628937585,262144 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:2
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,13270330761480508739,16843278350352632102,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:13
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,1244019643701092763,11979954208495727221,2097152 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,4527300519219178764,4792908633634752647,2097152 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1720,i,3139323186451486662,4829419985565531643,2097152 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,5349056594821634205,2536919081507387473,2097152 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:9
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,605776104182915249,13830941727410119215,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,8422293997303468320,7677372638183413774,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,6660374300244046639,17797052610814203006,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,6660374300244046639,17797052610814203006,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,14113391500872167452,7023593320931733617,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,11630822887252583938,4238266627118813490,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,16591704137215249936,14776721267483156169,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3020,i,14292752902425103906,10737935293564269384,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:14
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,14325455616559512668,14195622529630604106,524288 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5988,i,2510065585373919075,10632916512060643453,262144 --field-trial-handle=2600,i,6704150607798599214,10247725656222516825,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4f6f0ec72f83610406f6c3b3c1e2061a7f46739dcf96ef1ef1efc8eb277448ec
MD5 d93014e24c6679176ad2f057ff4833b3
SHA1 51d3538353fb3d334cf06862ee7e75a00b14f630
SHA512 40b81be6c27dab3706b3c2f3d39326f3266ba938c7774037c86caf9b063889cda01276c8d1898dfbb48aff5def47f1cb82890a455b4afba6713877f336b4dfd9
TLSH
T1F25195B133263FF2DBFA497132E1625836FDC44902BB1E25B0906D345C6AF99E9D5063
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596a88.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596a88.TMP
Size 2KB
SHA256 4852f9a31e19f79ff25f03f61053ba5fff5f6da7d6b743175dc1a8180f2e82ce
MD5 000d9055cfb9bd2f4c09012890b6bc6f
SHA1 d8d277ccfafc712f60ec9fae7dc1ebbd4416ba4e
SHA512 0d89c27cd2eb99fcb6870f9c505f8233cf0b71a0b947b2107fce30fa9a3e2aece07553892bf26437c42df9a0d80a60b5a1eb6b16523790e703a6701afc407b6a
TLSH
T18F51957133263EF2DBFA497132E1625832FDC44901BB1E25B0906D345C6AF99EDD5063
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cb13cb9a79546a9c177cd9bbff7828a1ebf992d721067f76824cedf504655546
MD5 8c94e65a99ba325f73481d1594aca4e5
SHA1 22f0cc3ac908b4d4554fc0a9e875de6a6d69dfd4
SHA512 a0bd53664f21fffb4d80609a3480116673e912c4238054801d32901ea0a73acee7ec06cb7c76ff66753e56322c5ab3b71529cd01ac0917532bd5e6183688ffcc
TLSH
T10D31A0F783B4957E9A0186F0AA146E1FCE1D0511436C786685E0AE27D3F3472E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f05e70ce9e2f646d38a03d06ce23d96313ce38f2622e0fc2b1d808e7f6023a14
MD5 5100c4beb4088dc8b65b966b5fe68d95
SHA1 277da087f1b4f4abc23ec53646b71dc1acbf3f4c
SHA512 39b3b9a9982322094ccdc622f5525e6e53c219236d1457f257a00a4063a30124e94333cdf91e74ec71aed8626cfe21894d8cc233a19a72c2afb9197cf77de92b
SSDEEP 192:sxRveRpbt/fDsJDde5lS8zoD8p4l/g6+WNIYCNVuOQG5IgDaJ:sxRG3t/fDsJc5lts/5Ib5q
TLSH
T1C332B8166E28A97B8CC7D30DBB55BF53E6FD5132A1901E58A7FC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 25c998ee7a8f9830fa2777cfa173234f80d402b8fd519b960b5d7019195ccb7e
MD5 6707c9b044b54cd852e0335acd27b19d
SHA1 8ac8cb7174a03ba4ddeb1f901c55ada83cfd39fc
SHA512 93d9736cdec4ca164b7c3abee8c27c1339b26044d66c2cbde6cb94e5f4ab83140f1b3d64197edbfc780b19d5b69a7d469b37a2d7720d5d99397757603f0a0254
SSDEEP 192:sxRkeRpbt/fDs5Dde5lS8zoD8p4l/g6+WNIYCNVuOQG5IgIJ:sxRd3t/fDs5c5lts/5Ib5s
TLSH
T1E132B7166E28A97B8CC7E20DBB55BF53E2FD5132A1901E58B7FC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 35b4d081d595e61f2ad8e6106ed3d380f7baf4ae55893c3fb2b3e51657916f78
MD5 fd05d7beab870bfac025f9e04423eb53
SHA1 b93770a62e7d8a781f33cc8981cc54ac89f08a20
SHA512 b0c97a558f8ba28885c0ebc19e22f1e28f89b9e8640e0d83f359db34b188f77f0c3dc9e4a74a53385586b938e5c92db3fcb94d9c638d7cf0fff9ee71de1bd7f8
SSDEEP 192:sxRveRpbt/fDsUDde5lS8zoD8p4l/g6+WNIYC/3uOQG5IgDAJ:sxRG3t/fDsUc5lts/5Iv5o
TLSH
T1E132C816A928A97B9CC7E30DBB55BF53E2FD513261901E58B7FC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5040dc66ecca5b53e54e6a832a6d9498eca16b2846d39584904c381f8b68f1e0
MD5 b8699b687f6039c4cae3bdd3d7ee2079
SHA1 7c9d38abdb09af693f2c2404d7e0f4d4fc524f4d
SHA512 d5c3ca9d93dc65916e0d60575324b6fa27bca46e1c6fcde02a11ce1a363e8ed1ad3c3df1956f2372b3ff8f2f793a9c409ae6edd7c2b94d44486c679d7be14c73
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvfroZSa:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VV
TLSH
T178B2E92B600DCB7F5F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e6372100-1fe9-4069-9447-f92c7f0c9bc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6372100-1fe9-4069-9447-f92c7f0c9bc4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 19fd92f6c2df8bd9db33c12cddf7d563bbf3608ee4bf80d1b0d89c9218843dad
MD5 12f62a012f7dec467e2d6ed1bca9770c
SHA1 3c1e66f215954dcfbd6b64ea187e2f16b62952d6
SHA512 8e558d3dd8fb2ee7d4ad7a870e1bb1a9651bdd79c6b4d00e630facec97fdaf4c4e1ad0c408ed682993a630f0288c5516f59d98e4f5923777c7acee9c52a0138f
SSDEEP 768:grv+4UNbdD3iZFCtQ3Np8+p3bd66j+4BRv86aLITt2bwCl1:gbsbp3WL8+p3Z6n4yU0ww
TLSH
T15E03BE73E868D9339CF6C684B18A76437FF8519396C10AD4E9DD2B4E019A19E630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 71f3183560512daaf040a96ab691118eac03f474549b3b9d696f56e949450dba
MD5 fb567a948014f5fca511b4a81842f73d
SHA1 8c7a8d95623dfe52018ebddbfec076dfffa1f31d
SHA512 2504d32ac15602c3590bcab36789fcf72f4d141a9a324af833f7cd9330fe6d46f9762df0ac96798a7a50ad3d31f7b8bc4052c205d3957ff4eba28ce75bab06c8
SSDEEP 768:irv+4UNbdb34PFCtQ3bp8+p3bd66j+4BRv86aLIWt2bwClP:ibsbt3K98+p3Z6n4yP0w6
TLSH
T1D113BE73E86899339CF6C684B14A7B437FF8519396C00AD4D9DD2B4E059A29E630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5e531e3a2c776178ad68cb144617690340930565b440b5f54b7e08fbe0cb6737
MD5 9d8c01e5bc8341809fe316fe140f0999
SHA1 d742736f93833ffcbaf2317ee97e9817977d1709
SHA512 f52bc9837ab537bb7a539dae8e4f955cfa76eef970152b3ca1c5595acd4655450712d6503a0321a81852ddda734120a04d4f93253a0d1fcd5da00979800828a4
SSDEEP 768:2E3fPFCtQ3ap8+p3bd66j+4BRv86aLIWtMggD:2E3vE8+p3Z6n4yPMggD
TLSH
T187F29DB2ECA8DD778CF6C384B6467703AEF4515396C41ED499DD6B0E04962AE130BC3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ec89506af0af4b85d6aab66133884680fd19eff12ecc1d1bb77883349b94b946
MD5 7cbc1f0c5886b964481663b7a32371db
SHA1 a4187c3617934299b4e7b37f6dd1980f1a70bf3c
SHA512 24221bfe62abbbf9d533d12e4b947f459310aed6169043afce2e8a163990f47164bba6a86098acb32379f4477f37bcd57f330a2d1486684c83c34af0d17d8a5b
SSDEEP 768:DFQJ3TwgLPFCtQ5p8+p3bd66j+4BRv86aLIWtMggD:mJ3R8+p3Z6n4yPMggD
TLSH
T13AF28DB3DC98C97B9CF6CB84B64A3303AEF4516395C46AE4D6DD6A0D00972AD130BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7e8b41b7b559bcc6cf4a483986bef3f84c6a204f9d5c33fea8cd885a8d9c152a
MD5 e415b27bba06c9fcf8c9a588b584b7af
SHA1 5d65227026c47d93866904b222b77b521fb896c2
SHA512 3a5c7c0c6d107f7a6bbce25c2aa03a608fe1c01442342ca770ac365302ca65aa3b3e8f6feafb3451085c47dc6bab0fd0f4ffa6cc769f8cecff2bd94f26ee8044
SSDEEP 768:Irv+4UNbdD34cFCtkNp8+p3bd66j+4BRv86aLIig2bwCl1:Ibsbp3TL8+p3Z6n4yy0ww
TLSH
T1BC03BE73F96899339CF6C644B2467A437FF851A396C00AC4E5DD2B4E019A29E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

336a670c-3fba-4503-83b3-a576f09fd766.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\336a670c-3fba-4503-83b3-a576f09fd766.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download