80e7163cc316212c3f17aafba992bebd38f538236c35a15b0867394a43d2a43c

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2.html
Size 12KB
Sample260910-prfkysw1ds
SHA256 80e7163cc316212c3f17aafba992bebd38f538236c35a15b0867394a43d2a43c
MD5 040cadc50fc0788aabfa31ddd5423fe6
SHA1 a92814404dcd9195e72023febf20e114141e7812
SHA512 564b3d3c6f0c4b01cb90c1398370a1b7bc6d606e0a4cbd43a530c7516197ecbb7d2bf4f4f50c2490c30259aee97f50c064092f931c2b1823d56bbc55ec432b85
SSDEEP 192:ZVVDXm6YrWMcjkmbzg1hmlZP6Fq9FciyJZhdKuhBFcExDr:ZVBDgjJEuHX/
TLSH
T1ED42961216F31072645385EC7BE7CA4A6AA9C103C209CA583EDC67889FCE9D5DD637EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5956	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335172362475374"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{8FF7D10A-E6C8-48A1-8F46-5B9986D6B1CE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3592	msedge.exe
3592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1152 wrote to memory of 1692	1152	msedge.exe	88
PID 1152 wrote to memory of 5956	1152	msedge.exe	90
PID 1152 wrote to memory of 4192	1152	msedge.exe	91
PID 1152 wrote to memory of 4192	1152	msedge.exe	91
PID 1152 wrote to memory of 4192	1152	msedge.exe	91
PID 1152 wrote to memory of 3844	1152	msedge.exe	92
PID 1152 wrote to memory of 3844	1152	msedge.exe	92
PID 1152 wrote to memory of 208	1152	msedge.exe	94
PID 1152 wrote to memory of 4704	1152	msedge.exe	95
PID 1152 wrote to memory of 208	1152	msedge.exe	94
PID 1152 wrote to memory of 208	1152	msedge.exe	94
PID 1152 wrote to memory of 4704	1152	msedge.exe	95
PID 1152 wrote to memory of 4704	1152	msedge.exe	95
PID 1152 wrote to memory of 5056	1152	msedge.exe	97
PID 1152 wrote to memory of 2412	1152	msedge.exe	96
PID 1152 wrote to memory of 5056	1152	msedge.exe	97
PID 1152 wrote to memory of 5056	1152	msedge.exe	97
PID 1152 wrote to memory of 2412	1152	msedge.exe	96
PID 1152 wrote to memory of 2412	1152	msedge.exe	96
PID 1152 wrote to memory of 5292	1152	msedge.exe	99
PID 1152 wrote to memory of 3604	1152	msedge.exe	100
PID 1152 wrote to memory of 5292	1152	msedge.exe	99
PID 1152 wrote to memory of 3604	1152	msedge.exe	100
PID 1152 wrote to memory of 4444	1152	msedge.exe	102
PID 1152 wrote to memory of 5416	1152	msedge.exe	106
PID 1152 wrote to memory of 2284	1152	msedge.exe	107
PID 1152 wrote to memory of 1364	1152	msedge.exe	108
PID 1152 wrote to memory of 5824	1152	msedge.exe	109
PID 1152 wrote to memory of 5824	1152	msedge.exe	109
PID 1152 wrote to memory of 3592	1152	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffd1e07c188,0x7ffd1e07c194,0x7ffd1e07c1a0
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,4124805123406342383,11241675401848321281,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,12512048012771770866,3731248331511712265,262144 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,14248487997269232343,1809200156619665199,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,6234896681434410369,6415527665457656363,2097152 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,15837613328461479044,252391340758686434,2097152 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4396,i,7074448277472313000,5568224590253058893,2097152 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,15090794747339197807,11422851118142041665,2097152 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:9
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,4848748456713443426,15842669487250544260,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:14
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,9591147738463540836,11864056341463749438,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12977094629433067509,15445215556245260632,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12977094629433067509,15445215556245260632,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,4135060926950396159,3586451258040998003,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,13767702416874779125,3078915595902988678,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,6332730410235727370,952447152310000801,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,8586645461294905154,3691131906803832867,524288 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6464,i,11822159967335080578,12356167183477427656,262144 --field-trial-handle=2600,i,1446859630758371340,10330008959301884189,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1ae554718897ab02406fd4560ee7b47e57b5478a33f67643041a2cf44acfc440
MD5 9517992478b96cb95990d1de4007ded6
SHA1 1e1bf285d04ce875662dfb71a64ba4ef878de745
SHA512 05db134dacb3a03119b7df2da3e60eeae15cfdfece5886337b208de15b8bda7142487ead6b7a91c92b0b170d602c375e49673e1e7c81f515df1441cd6b75585c
TLSH
T14D411E5C833CDFCDDBA409B1BCF0D6943ABED8CE0307AE50D4A41BBC4A46B844991193
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a8d9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a8d9.TMP
Size 2KB
SHA256 9282ad67d651079f1bab0b8235408854db7830c355731640ecfbe48943175331
MD5 a849f221384bee45250967d83e19524d
SHA1 0a9d6528517f1019e7dee871da0be7f03afafef9
SHA512 5c9a1d766ba9e0cf29d3bd0e7866988c8b17fa582d559772b46373b437a79e3db3e26f04af5d9baa088fba2215ea23fbc92fb4b4ebe7ce68d1463418bbddf952
TLSH
T159410D58833CDFCDDBA449B1BCF0C6943ABED8CE0307AE41D4A41ABC4A06B844991193
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ca0462d7582866751ee81d3ad31688f3926ef602159351fb1373f4b2675d87db
MD5 5ac460d5cd7d90885c005698026a0b62
SHA1 b30e7fe6f1aa77a8e8c27db13dbc729a22ce4872
SHA512 4b2af5bd71c01ba3d3b271aae17e351cd782e63733d5e02a635cf6087b0d82c088d81ddbba9ace29ead1282121beebae174a628b0edca5d818ac394f428622f4
TLSH
T14D31A0F787F4856E8A1196F0AA14AE1FCE2D0511431C7D69C5E0AE27D3F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c256649f2b3131b17ff90cd14f9174f0f9d228b90c37a8e1fc861c29a517acd6
MD5 e14aa9d60d59d7d20c9ffafabc5ecaac
SHA1 a513b27a08c3217110ccadd4710fa1bbe0061c00
SHA512 e8e26e46e9ce90499692bc6a19962cfd6c5ff48da17e91667a357eaa9dd2c653b706f4c25218b0e97207ef9eec452e675a2cf9ee2822476b8b14afa203e4e417
SSDEEP 192:sxR6RhyM/jK1Ml8wbc/fZsPprQ5JzoA8p4h/g6+WNIYn8UMbh2e+GHIgDuJ:sxR6blc/fZsPp4/5ITxt2epe
TLSH
T1F852D915AA346D7B8CDBD20DFA41BF93D6F85473A1901E44AAFC8A1C00E76DD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 12c84f2ffb7e2987eb887f82d467502393af2a763a2d2ece5077a2833226de47
MD5 a43b2fde9da23864f2ad56b20010a23a
SHA1 a0cd9736ea8a3e9c5d7c6d0dbd07e8677abf5a8e
SHA512 e75c1e5ab101c2f080efd0c4efdfabc1b5ef9b7bd5883ab1c1ee03e5e627e27bd8e6e385eb1984575fc02b9eef71ce425a2bba27fd02d9e789ab94db23c5627d
SSDEEP 192:sxRhRhyM/jK1Ml8wbc/fZsXprQ5JzoA8p4h/g6+WNIYn8UMbh2e+GHIgIJ:sxRhblc/fZsXp4/5ITxt2eps
TLSH
T1B052D915AA246D7BCCDBD20DFA55BF93D6F85473A1901E44AAFC8A1C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b42ea842bfebf55571ac9330656dbdb7b4eae88391165cd990b33c2e41261074
MD5 9a72ae9d053e70ee4f73352f9ada427a
SHA1 3c42a08993dc719feaf14a1382aa2b30a5434622
SHA512 793e66d9abb5968f705e3d4898d36346e2a1d8bb75d5c397fa7e3ebd9ed3a4019038dff391e44562e943c80e300ddadfc21daa05eea9d985d81fbba25394d658
SSDEEP 192:sxR6RhyM/jK1Ml8UQ6bc/fZsVprQ5JzoA8peh/g6+WNIYn81Mvh2e+GHIgD0J:sxR6bqsc/fZsVpm/5ITGJ2epc
TLSH
T1AA62C815AA246D7B8CDBD20DFA51BF93D6F85473A1901E44AAFCCA1C00E7ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 72986a9d1eaab589274ba4b58449de52f0ab98d888c117edf853efa61743ca7f
MD5 0401d80108ab330b0770ff16c309bff8
SHA1 ee242caddeed37ffcdefb57d3ef3aea1aa26a772
SHA512 0ea5e32ea16d636e959da5593c137e5bdd5e6150cf54ac2ba63ec7020dae4463e357ce856d9aac55bed27d95be253f956dbbf9f51cf3c82720ca70f1bba48b22
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YSCroSh8Fl5C:wGedp6WgoufDMu1jatVYSZRU
TLSH
T188C20C2B640CCB7E4F844EADEC29EEDB6DD801CB5B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a21013316a66b719b0b89766247c25f5d955548af8c3b0d97227e63c7e65a2e9
MD5 26636019faf410bd5af1849e32bb4ad0
SHA1 f9429bcc2a1f81946c76057b43fb46255eb23929
SHA512 5df1f61a71f33e6f5e2b500b791595ae260fc3a46e7b4952c80e19257f2c537be7204b5eb4e1bf041818d336f4ddfa007e3926eb345803a21f01528d0ba6041d
SSDEEP 96:KRwBUAyeSIWWLbgIIK4Ng6Icoob6AFHjsJ9rhhdW18qgjbK4igtbcx50HPoHpm3w:CwBUAyeSfWLkIMNg6noob6AFHjsJ9rhk
TLSH
T17891E245717E02403C7EAA0981F9981EA3C178E23564B42F77E902E65F66F038EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1a623fe9a042416d969666a1369d051096d90a5136e412dcd4da9b8f7d657f9a
MD5 1239356bea8cefee0ffe721879939306
SHA1 7b21b6f2ceb2ca249d41a9424620cb057c923509
SHA512 283418874cd8dfbce78e92b65499324ed1eb7867d0627dd8cf2c6123383a80cba678bc4de995016c0dd87c1eec8624767c7d3050ca96715e402eab6ff2ac1948
SSDEEP 768:DV43sL8V9DZIO0WhTaNzc4ReyIsPnD184p2o6:h43xatc44bsfWbo6
TLSH
T1B2F2BF71F864DD67ACEAA385F5067202BDF4911785CC6E80DAEE6F1C05472AE032FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 4afd2e4e1d7c658701a93cd44499de4667717286483a249e6a83bc7339f24695
MD5 4f14ab44e0526668e6aef0fe25b25734
SHA1 b6f660189a95696062f0065a4ff2d1d8b4d5f6c2
SHA512 97539c99c4a70f16a07939091b61a2128c9d058f8c8778493c5ae1c7ef9e0e691f1909aee5b84de99787de69c7c84c680a17f730c87252577d616d26af4b813e
SSDEEP 768:943JL8U9DZIO0WhTqNzc4ReyIsPnD184p2o6:943Zqtc44bsfWbo6
TLSH
T199F2BF71F864DDA7ACEA6385F5077242BDF4912785C86E809ADE6F1C05472AE032FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f4a660e90684482d286eac4ead6e291d5d44ff2967fcd6a873628f1d170c5ed6
MD5 72fcf2bc5235cae9b7c7669f3cafbe0f
SHA1 53eb1c9f3591972d35b8f4267908255a9c7412c9
SHA512 8bae0374f8a65d5febf384db480e4b96f07a176bd44a91e810d9caa0377718fa67268622178d5b07f1cbc766d8f5114494a0ee4e5557d305b3c8993b2d03e9fe
SSDEEP 768:7iI3sL8V9DZIO0WhTqNzc4ReyIsPnD184p2o6:OI3xqtc44bsfWbo6
TLSH
T1BBF2AF71F864DD67ACEA6385F6067202BDF4911785CC6E809AEE6F1C05476AE032FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 039bbe80026b75b46b384cf15589c5cfc0ca5a445f9710e6ee3dd446e54f3879
MD5 3c6f126fd1584f4c57285740ac2da6ae
SHA1 4201386a702e5a049346a6da4d9c5caed2d63c2a
SHA512 aa6dc0eb08765ea67225d315afd754ac2ae8c367fe8fc6bcda5ef9b969dfa73fc4616009b19f7af4ad609c92f4c076ef1692beb0c986974c3439ccece8b459d2
SSDEEP 768:6rv+4UNbds3BPDZIO0W/Nzc4ReyIsXgeVH1S5D:6bsbS3ptc44bswEH1Y
TLSH
T1EF03CF32E8788977ACF66785B54B76133EF8912782981B90C9DE2F0C4A4B1DD131F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c96238d7e34c8af8bb90bf1184cd526b2b18ef0ef8c7a6bf4a3df094b84e4610
MD5 958b1414a4429bf433e0d5d3ce1b8d80
SHA1 65937d2d16c775d2a9ea36be1f88edcca3e147a1
SHA512 425dd3f3c70e442568e17695bdd5d19e547646825692ae0795aa8cf24985ea6f66521d20e8b95ba8cb83cd22617a5e8d51f1fd67e52a6d9de30ea4f679adb973
SSDEEP 768:7rv+4UNbds3b/jDZIO0WhTqNzc4ReyIs2neVH1S5D:7bsbS39qtc44bs8EH1Y
TLSH
T13403BE32E878D977ACE66786B10771137EF8911B82C81A90C9DE6F4C4A4B1DE031F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7747a92d-3a67-4f34-94f1-507a5f8f7fba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7747a92d-3a67-4f34-94f1-507a5f8f7fba.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download