bd0e5eb64136fd2c4572aa48217925bc04527ee62967e9d88c6dac1e86791019

Resubmissions

10/09/2026, 15:40

260910-s4hgvstygy6

10/09/2026, 15:30

260910-sxykhade965

Analysis

max time kernel
148s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 15:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/app/node_modules/sprintf-js/demo/angular.html
Size 690B
Sample260910-sxykhade96
SHA256 bd0e5eb64136fd2c4572aa48217925bc04527ee62967e9d88c6dac1e86791019
MD5 61276ccc42eb16f69df6f9dc82527ff2
SHA1 ae98e1e4b9fa756c07172c2afdbcdb1a32e307bb
SHA512 b42dd3cfb7f550cf1ac49d9c43d11e94428d7df3908519d0371dbc42667c469ebb815a6606a630b4df1b694f54bba9a64afb72de8ec2bc4a5363d1dd0be4114b
TLSH
T17801F7B79DFAC6411601A9C989826E0F2C4F65DAB8B2DDA873DCD030AF0575C54A3638
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3572	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335280700236391"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{17600C03-BB17-4B64-B2B3-3A78C13E48D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 6108	1752	msedge.exe	88
PID 1752 wrote to memory of 1252	1752	msedge.exe	89
PID 1752 wrote to memory of 3572	1752	msedge.exe	90
PID 1752 wrote to memory of 1252	1752	msedge.exe	89
PID 1752 wrote to memory of 1252	1752	msedge.exe	89
PID 1752 wrote to memory of 2940	1752	msedge.exe	92
PID 1752 wrote to memory of 2940	1752	msedge.exe	92
PID 1752 wrote to memory of 4972	1752	msedge.exe	93
PID 1752 wrote to memory of 4972	1752	msedge.exe	93
PID 1752 wrote to memory of 4972	1752	msedge.exe	93
PID 1752 wrote to memory of 3320	1752	msedge.exe	94
PID 1752 wrote to memory of 3320	1752	msedge.exe	94
PID 1752 wrote to memory of 3320	1752	msedge.exe	94
PID 1752 wrote to memory of 2448	1752	msedge.exe	95
PID 1752 wrote to memory of 2448	1752	msedge.exe	95
PID 1752 wrote to memory of 2448	1752	msedge.exe	95
PID 1752 wrote to memory of 3120	1752	msedge.exe	96
PID 1752 wrote to memory of 3120	1752	msedge.exe	96
PID 1752 wrote to memory of 3120	1752	msedge.exe	96
PID 1752 wrote to memory of 5848	1752	msedge.exe	98
PID 1752 wrote to memory of 4712	1752	msedge.exe	99
PID 1752 wrote to memory of 5848	1752	msedge.exe	98
PID 1752 wrote to memory of 4712	1752	msedge.exe	99
PID 1752 wrote to memory of 4156	1752	msedge.exe	101
PID 1752 wrote to memory of 5404	1752	msedge.exe	105
PID 1752 wrote to memory of 4760	1752	msedge.exe	106
PID 1752 wrote to memory of 5496	1752	msedge.exe	107
PID 1752 wrote to memory of 4996	1752	msedge.exe	108
PID 1752 wrote to memory of 4996	1752	msedge.exe	108
PID 1752 wrote to memory of 2916	1752	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\app\node_modules\sprintf-js\demo\angular.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffa5ae5c188,0x7ffa5ae5c194,0x7ffa5ae5c1a0
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,14672249258639783759,5387601558611126118,262144 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,14046608338157607323,7663743395950303412,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,18122905003044621113,12659492536523610405,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:13
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,13847503722473346804,10235358921906431719,2097152 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,3329546194551529223,5845828145979477265,2097152 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4404,i,15738231895980882570,7958329493045967175,2097152 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,5547095578603846195,5122953017814707904,2097152 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:9
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,231886908777237676,6871185660475016746,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,12806568297749426397,10110985913388952167,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:14
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,1212636325214671967,2989585045934396123,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,1212636325214671967,2989585045934396123,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,18197721963416059637,14055063983518723583,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,10848541743125969470,8762787585646395874,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,8477387531916782178,7539490080802126689,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,16314908348206605216,16106099529391729904,524288 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5888,i,11291933955483245729,4792247665360178737,262144 --field-trial-handle=2160,i,13815362534037143899,5683546985031189325,262144 --variations-seed-version --mojo-platform-channel-handle=824 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6dabfd564ab66696e3737052eb504b20e0e3d1bec9ac12ebc9cac1a0c62ec167
MD5 d370a659991228e52e20e1a00688d17e
SHA1 e3ddcdf6f2ddc37e40e6bfacd89d5d7a2790f1b1
SHA512 db3e76c04c0af35b4631d636c6e7804c4c791215dcfd1fc05ec1a4cd6c063172ff2791f4320fae487974d497c87c56df30495287cc290b4da0ccf670efd81b23
TLSH
T1EE51611D133A3DDDE3A406F12EE1D6643BFD889E02072E1062442DFCDA46F3851D25A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f35f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f35f.TMP
Size 2KB
SHA256 4d2f16da7083a2c06617b64582b2796b54cb86c13404d91021d4b104f5dbad01
MD5 2dc0caf51ba8f5dfb44f44360d685a98
SHA1 c0d39610c379a7a80509a4da76cf8e0ebc16623e
SHA512 28071c014b05688037c2c72d8c0be1c9e1df144b6cb752e463774ba4487ec10c9dbff5fd3779eaf51e835f4ce959ab6d43bb34fa7378e85c2152c9065176e6fd
TLSH
T12B514D5D133A3DDCE3A40AF16EE1D6A43BFD88AE02072E1062542DFCDA42F3851D21A7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 330f27de2aa0ed52e687b83e6d5ed8991f376e2dc84b749ad06c5ae6ed1047c2
MD5 44dc361f0bfdd5728a232b4a744d3b20
SHA1 7200b25117519b518d01ceff2c95eb2b629e887c
SHA512 586f4a716455a21cedca231ff23a9b9f7a7f8e0f21cf54c223529b4897f3003b19aa11a7516e3eb6fed4427d230e5206337dfe15e1b7fb41c5984aa0f2ca3a00
TLSH
T12B4190F783F4867E8A1196F0AA14AE1FCE2D0515431C7C66C9E4AE2793F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f5fa288c13acd7002f12efde2d96f70d697ac3674b955915d16b21594a3ac570
MD5 31fd1f1346ec9300d40be21c3842a22f
SHA1 a6d8e4b95202851dae989af3cd0018fa5d30d7ff
SHA512 3b99ce622cae2ab9fa2727ef642216fdfd0859f2229a7059ea3aaa046c12625020d196069780b6cb4317444e5b7ca5e1ad6a1ccd70d4d0e30316630231381b0d
SSDEEP 192:sxRYKR1b8/fWsTxprQ5rzoA8p42/g6+WNIYn8uuoKG1IgDCJ:sxRYKb8/fWsTx37/5ITEz6
TLSH
T12832A7156928BD7B9CCBE25DBB55BF53D2F9503261D02E58B6FC8A1C04E76CE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ccf2dd1e330fde46d8a1214d68fd10311e3a55f1166225318f6fafc1b6839e49
MD5 1ca5c09aa0ef971d77a7b42b65a0cf7c
SHA1 20b332a26808935d8e032596b2fe47b0316f3b7e
SHA512 f191cf5f567c1abb26786280f8592e84e092a7ba67364399fbb59c62639ad97d95349556f5686d50d8d97ab5d092f420612e8dc1fe7a358e3048779940d51198
SSDEEP 192:sxRYZR1b8/fWspqprQ5rzoA8p42/g6+WNIYn8UMoKG1IgIJ:sxRYZb8/fWspq37/5ITGzs
TLSH
T1C232B7156A28B93B9CCBD25DBB55BF53D2F9603361D02E58B6FC8A1C04E66DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3bc41a2e9f24139309cd4ba4cdbda935d5b814c2f782cc6496902848dba7c174
MD5 8633d61e900521bb6a74563e29e890d3
SHA1 998cfeb869748d87bc6112ff441ff511f441b2c1
SHA512 0eb97eef090d806f612f80def6409e3ddb22b331baff06468fca6c28431fcd9201d24a3a74952de8f8e5866a7437e52d97913bb5d7ff99566c834642edf7ff2c
SSDEEP 192:sxRYKR1b8/fWsTqprQ5rzoA8p42/g6+WNIYn8UMoKG1IgDgJ:sxRYKb8/fWsTq37/5ITGzw
TLSH
T12232B7156A28BD3B9CCBD25DBB55BF53D2F9503261D02E58B6FC8A1C04EA6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9d0445de91d0e7c06f165c34685479d797ce6d14f969a43040bb49979efe9a4e
MD5 2a45eedc47535376548e1b6c9e671cfd
SHA1 4556f88bec5d20584d27ab24da11a1143af5c4b4
SHA512 855471d150f745771170bd689be9551a6c4ba2470d1a7abf78590340ad97206bbe3ee83c53159ec9bb12b4b2b64e7aa24d7512a0c64fb9cd5e56bd59af68c812
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPgrohMu:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VI
TLSH
T104B2DB3B604DCB7E5F800AADEC19AFDB6D9802C79A948D4447FE990C03C77EA91194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 45991cbc3070d8f2f5ef73965d61a3bc79d5e125ed75bf58467afbe875fccf90
MD5 9b8602018d4b3383682a33cd104fc0f6
SHA1 e718dced21db0ae222b10dc66147dfe677d64eb0
SHA512 eeb41797e4c1f9cc389501d936b868fe3b51f9a363f22f25c35c4d9517f3745d0d29d94fe464f7eb4f07d6c8f5c4d4d209d7d74b9c7d6ac35975d3b49ffc5f2f
SSDEEP 96:KRv4dZvtNhW528gBhK4Igvhc3f+BtiHKoKZKsK4KqK2K6KgWKeKDKzgKgKgK4K1U:Cv4dZvtNs529BLIgvO3f+BtiHN6zn9Xt
TLSH
T187C12410323B0644387DB61981789D6E86D278B2B55AA42F37E803760F6BE478DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8f60.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8f60.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 dfb4dc2afda28736830ebdcc7be43372024fb549cb1163e93981e640f5b360dd
MD5 e8c734013e2565ac6321610d93b42a06
SHA1 7da7f4d9dca8d375c67ffe66925ab5728f792fe1
SHA512 8e1761ac0b6912d84ba04711102e5d20aeab1ac836f3db8b346b46be8574dfcfeba82959d68c02949e42b750131d38f3cf025639134024dcd7397d0a8b1f5193
SSDEEP 384:4LZcIv38NMSEwfJAJDZNfNoXOVSUU0XtdXqFGETRzcoXfK86sfxEZxxsIj4lBDlL:Qv3s0DZIO0crgNzc4ReyIsPDMgtl
TLSH
T1BBF2BF72AC649D679CFAA7C6F6077202BDF4911782C82D9489DD6F0C054769E035BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e5dec6183674c894ee9b961af5757ed9884e2d4f9a332d40048fcba1b9f1cbfb
MD5 4accda59698735bf71486826d2de67df
SHA1 e45a5d50ec7b23c1300473d62c68e250e37fd7a2
SHA512 f788491ce4a3065c903af69abc475001c6bfd5579164240b2f3a96c40ac2421e9bf8888546af1e6453764e600ded3190b0f91265300bc700fb11c4ed31887757
SSDEEP 768:Hrv+4UNbdY3l/C0DZIO0crgNzc4ReyIsPDMgp:Hbsbm3latc44bsrMgp
TLSH
T19C03BF32F92899779CE69786F50772137EF4911B82C92A94CADD2F4C0A4B1DE131BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 387a8444d0eee0b9e9fc76bbc598310352acec52e4ea2547af4ac110837a3ef8
MD5 bdc86158793cccf7aeee663f72bb427e
SHA1 89c6fc8d596923091cef8b70571442c8ab1eebf1
SHA512 15b75760dbce66953f7b0b78e28891c403b7027bf20c5bd28cb09e659cdb62097ed8923e90bde75fd453e0d111324ad3aa20a83ce912034412ccf18844f6ed35
SSDEEP 768:srv+4UNbds3seDZIO0crDNzc4ReyIs2DeVH1S5D:sbsbS3Btc44bs0EH1Y
TLSH
T10103BE32E8789937ACE66786B10771537EF9911B82C41E90C9DE6F4C4A4B1DE131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 497b55b23206d618c683f3c64900bbe10e89dd41a8bc1c72bdb7eab3df28b8c8
MD5 71dd03627882c011b85a76faa91aeb9f
SHA1 5acfef589999d03e7e52b19b19123e2a0a3c5f76
SHA512 d717316779119eb4d04e46db42f63dd183ccffcfe51f7c4c965a74878174247ae97e4b3790c5bf2a3160412b5a6fe041b664f973e2157c28a2e92b57c9ba3123
SSDEEP 384:lZcIv38NMzEwfJAJDZNfNoXOVSUU0XtdXqFGETRzcoXfK86sfxEZxxsIj4lBDla6:dv3b0DZIO0crgNzc4ReyIsPDMgtl
TLSH
T11BF2BF32AC649DA79CFA93C6F6077202BEF4911782C86E9489DD6F0C054769E035BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a62653bb7c5f341bfe09043c35277961d83f8156009b516b008800ac92a68ba2
MD5 d87ff1aa3a20bf8b99a47860a6c94a41
SHA1 6f1043d9e46935a16098c15db82af0e0c33033ae
SHA512 a68ef1ae37c87a3fff1a8424b29d0f3a38646e19325c208056cdb7fa1e4f144f0700bf1ed8cc3485c13e057c15fe7f2fbc990954284f976e1b94b7a48f55129b
SSDEEP 768:RFQ83zwgw0DZIO0cr8Nzc4ReyIsPDMgtl:g83etc44bsrMgtl
TLSH
T16CF2AE73AC54D97BACFA9BC5FA0A3202AEF58167C1C8A994D6DD6F0C05471DD035BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cb8ae19d25a1b4e1ad0902afd034a66e3404674e7579223e8e4b570d177755c0
MD5 eba07f2f93398fd49d668fc3ed72586c
SHA1 84102846530aef114abc3eb3e6e7c9eb013f5dd0
SHA512 a4e43180e0812d12a6d73f41bf606cd3b62487cbecb554630e90e74e2841fce4f4ce7affb1361ababe2177d03effe67bef56ead840d46d8c7b017770566c9965
SSDEEP 768:6rv+4UNbds3XVDZIO0cdNzc4ReyIsXYeVH1S5D:6bsbS3Ftc44bsoEH1Y
TLSH
T15C03CE32E8689977ACF6A786B50B72537EF8512B82C81ED4C5DE6F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2598d9ef-3e8a-4fdb-926e-76ebc5d36165.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2598d9ef-3e8a-4fdb-926e-76ebc5d36165.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download