e3c596dfd8659634be8625e0b271ee79b2e6dd086ed5560e2ba61b0b4ab4e9a1

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e3c596dfd8659634be8625e0b271ee79b2e6dd086ed5560e2ba61b0b4ab4e9a1.html
Size 79KB
Sample260626-grdscshz2p
SHA256 e3c596dfd8659634be8625e0b271ee79b2e6dd086ed5560e2ba61b0b4ab4e9a1
MD5 15af97dcb7ee47776dcd04922a3fe786
SHA1 bafa309e62842bb5340ffadc48b0b7a5e1e4271f
SHA512 616617e8019fb33315972ae4051e2fdd47b94af48300d5db85ab23757f464fc7e1aa847e92c14aef8ef9a8cf02a71f773cc46940c28bde04e2b391375e35c94b
SSDEEP 1536:rqoKBEr+MGUIgxJ/H9tKiDTzJpRXYy1gPwQWZhlg1i:nrvl9tKezJrsi
TLSH
T1F183F8B9F1A1B0235E23F970412F510FB93B686BE44C0DA8F294D8F16EF59894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3668	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269273271066601"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2894455325-857903158-4263030270-1000\{01F80A0A-A8ED-4B24-8F54-3FC828A20070}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe
1968	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 1888	1968	msedge.exe	89
PID 1968 wrote to memory of 4236	1968	msedge.exe	90
PID 1968 wrote to memory of 3668	1968	msedge.exe	91
PID 1968 wrote to memory of 4236	1968	msedge.exe	90
PID 1968 wrote to memory of 4236	1968	msedge.exe	90
PID 1968 wrote to memory of 1020	1968	msedge.exe	92
PID 1968 wrote to memory of 1020	1968	msedge.exe	92
PID 1968 wrote to memory of 1256	1968	msedge.exe	93
PID 1968 wrote to memory of 1256	1968	msedge.exe	93
PID 1968 wrote to memory of 5188	1968	msedge.exe	94
PID 1968 wrote to memory of 1256	1968	msedge.exe	93
PID 1968 wrote to memory of 5188	1968	msedge.exe	94
PID 1968 wrote to memory of 5188	1968	msedge.exe	94
PID 1968 wrote to memory of 5888	1968	msedge.exe	96
PID 1968 wrote to memory of 5888	1968	msedge.exe	96
PID 1968 wrote to memory of 5888	1968	msedge.exe	96
PID 1968 wrote to memory of 5008	1968	msedge.exe	97
PID 1968 wrote to memory of 5008	1968	msedge.exe	97
PID 1968 wrote to memory of 5008	1968	msedge.exe	97
PID 1968 wrote to memory of 6132	1968	msedge.exe	99
PID 1968 wrote to memory of 6132	1968	msedge.exe	99
PID 1968 wrote to memory of 5036	1968	msedge.exe	100
PID 1968 wrote to memory of 5036	1968	msedge.exe	100
PID 1968 wrote to memory of 2172	1968	msedge.exe	102
PID 1968 wrote to memory of 4496	1968	msedge.exe	106
PID 1968 wrote to memory of 3200	1968	msedge.exe	107
PID 1968 wrote to memory of 1964	1968	msedge.exe	108
PID 1968 wrote to memory of 3476	1968	msedge.exe	109
PID 1968 wrote to memory of 3476	1968	msedge.exe	109
PID 1968 wrote to memory of 2464	1968	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\e3c596dfd8659634be8625e0b271ee79b2e6dd086ed5560e2ba61b0b4ab4e9a1.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffaceadc188,0x7ffaceadc194,0x7ffaceadc1a0
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,8029446595962146319,16688956892988108680,262144 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,14828945570152675935,15609724002149565571,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,6967327987524283744,10182629162453201515,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,8723419193357500192,5068771379875763305,2097152 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,6773634728834100377,10821596108023858737,2097152 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,9634737679434266477,9114143629223372767,2097152 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,6527871023536022541,1002975190796308996,2097152 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:9
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,15721923926695399437,4304646413782304811,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,5211766016671548569,13651984315038400970,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,6387463664938112095,2599080540824145154,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,6387463664938112095,2599080540824145154,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,7295529264401463608,6673801771939466853,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,13053133090199090280,8394431514929630884,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,10138394490360990884,8412865137779111087,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,17330457585454640411,698512428492501001,524288 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:14
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=804,i,15709283963687744018,5166313845410961038,262144 --field-trial-handle=2284,i,12101382422617524505,9742339091450063793,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4921dac989a582c68ea2ce6e44eb3bfcd7f8bf3d87dd155763734d09e46d6684
MD5 6fe58dba083868c4939df3729856b544
SHA1 2946fc6a531247a5afe5d20c0abec1329e76da1f
SHA512 435b892e3c3ced9c341bcad7627e98220f381783f6c0d232345dd92e9cb28357bd93211262aa046fe541f6bd0686d5084ac7e92c687fc72829288aa7d9c823de
TLSH
T1B7D08034FB45B745C78605F2D514A720637A864534C2C60DB1A2D50D98681D0B7E79F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0f06119439d622a1a5078cf90d2c84d55bc25c179cc319a31bc271a3e62dc8b5
MD5 39897ff436f6a2795449c696417893df
SHA1 b1e15f7b2c6f5ca94bea9d8a160cc9e6864c1d06
SHA512 75fae24fb44003376ccf64d6c3715357ca6f73fb6cca4422a2574a4960dc75c830ef617f5476e7fc21942b321e9fe764ebf9ae64abfc2b05a73fdd7fb96ad95e
TLSH
T1F2D08030FB45B745C78605F2D514A720637A864534C2C60DB2A2D50D98681D0B7E79E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c824d6270b7f276ecf58c7c2951af141d5de3645655aff8b9e249aca7ef149c9
MD5 a87491c0495c0288fbb35efb71de9ae5
SHA1 0ed5caba0694bad08eae853cb4ecb7eb1948f1ec
SHA512 34dad02fe51d99d48bf7609ebcc40fbffbae099c32b5f53f78f7fd9e594f09bf5d93a2c3972de4f050c26075d51775fef7e7f3c2043d5d9df399293b8e90a502
TLSH
T1B751942A8FE915E9DB62453A51EF3BB43374A8472F03BE4904AC90748E83745D89302B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9e3189c737eef49a320cf8078b7d437bc8cfa5aec1075360cc7ffdfa028716cf
MD5 7727b6ca5135b87119cbf4f529a0e31a
SHA1 b8a6cac751248a3289a2683afa3ed584166d9d9f
SHA512 963261d5d990cd2c1e7920ffbad0bf8528cd84a645850829ed0c01f9f3bf0b418767f5d4bf14eec8b0a73578db564330ddfef45a4fc007de3e9189174b03b3fd
TLSH
T1C051BAF7C3E8866D891146F4BB282E2BCE2D0955832C3C56C9E4AF5BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ac2141ce96d9d23025fa8cc397bf16fcb3f450af1986d09a0ea4a7a74335a42b
MD5 9fc7a2af10d0afebe19ea62d444b98ff
SHA1 7d05eb855ef593ec9b670ef14e5dca26fa376a83
SHA512 08d44c8771d02fa8588987091b41b7913b248bbe63b0212fbc157c78f57130114809d3a8401dbb678d7dc5db215991fa16099c7c6abbc366678e8d5d5ab251fb
SSDEEP 192:sxRoRcyM/jK1Ml8UQwFy/fC+s/5ZIyLzoA8pe1/g6+WNIYPtUNG9zIgDBJ:sxRoeqmy/fps/5ZUa/5IpKLH
TLSH
T17062C916662859378CDBD20DFA557F53D6F95572F2940E04AAFC8B0C04EAAED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f4951addae58eb4c6923a86f6e7e5d83b7cd4b9a607a3691d3feffa6aefed0b9
MD5 87d1c2253605c2e4d4b6401aaf9b4833
SHA1 951323b817dc9f5cd5b352d4590d6729fe785ee0
SHA512 ce4212346e0f07e95071f54c00f738b5f34b534116ab99b53a8a9bd819f7925823b868002aee58a27173b4b637fe6e658c850ee2cc8ca9548416a48fed3fedd6
SSDEEP 192:sxRoRcyM/jK1Ml8wFy/fC+s/SZIyLzoA8p41/g6+WNIYPPUNG9zIgDfJ:sxRoeby/fps/SZUQ/5ILKL9
TLSH
T12B52C916662859378CDBD20DFA557F53D6F91572F2940E44AAFC8B0C04EAAED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 55737d325d0b6210ea16c416f09971a7758bcb5a27564a3527dbfa03159aab31
MD5 7c2be9115d901742d6c0bfbaf6fb5156
SHA1 017ff344fed7ccbb9514ea684a111503588b9850
SHA512 7abec3e025b34b916ba45c21575b3b6336240069bbe92bd115938fc61322606ee9b8620f86f231b768c94fd2ece2e7772541453aa1804b1bed0e92360f267e0a
SSDEEP 192:sxRDRcyM/jK1Ml8wFy/fC+sPSZIyLzoA8p41/g6+WNIYPPUNG9zIgIJ:sxRDeby/fpsPSZUQ/5ILKLs
TLSH
T1CD52C816662859378CDBD20DFA557F53D6F91573F2940E44AAFC8B0C04EAAED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4526653bc69facc9ca84c565c7d28eaf72a48ec1f16e2bdcbfe02572f3bf7ce4
MD5 9fc7e6c009e0e1b6a8d44042228d71ab
SHA1 7d7a3d6f74ff58f6cd38b890152fd92e7a6d3cd8
SHA512 e6d62fdee576b53a527df4ff3c42b7e29d92a18bf5aa879b9a6f6ba620fd41cb023894158a7dd4ad2d22dc7671e900d4c1cc50f7db1dbe608c1fc3fd9b639195
SSDEEP 768:LKKg6xWgdVf7k8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJ3nY7rouevdW2mf:LKKg6xWgdVf7ku1jaY3YIuevdW2mf
TLSH
T192C2FC2F240CCB7E4F844E9DAD2ABE976DD801CB97584D9447EA880C03D77EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6670281c195f3dd67bf7601f2f5b133f6e6f81f4d5b7e8f5c36017613578daa7
MD5 45c420a0b6e4d17f601a9cd841560d84
SHA1 6fc6098880960825b4c0e165fd69cd8d29ca701c
SHA512 902aeccabd283b02eda6e7f36e15530f909cea1c4e774078034b88ce79111dd32dc7835e254275015f1a457298449a0a9d979440a48524de7bbbd89266f7a461
SSDEEP 48:KNyvmywQgCuIVxI3CCKsn08C4iSJd0yrye7gd5j1l1uBiII3h1KsE0z14blJqBs8:KwdSKmMKqUwKVSa/SKM4yl
TLSH
T10C917862757E234138BE3C0894949A9F52853073310BA57B7BFC50EE8D2AE441EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

7828b1d9-96eb-463f-be6f-41a75f8846d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7828b1d9-96eb-463f-be6f-41a75f8846d3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d284f4810e83518a0456e6c7973c869c885edcbbfbd8144acc8ae05303b054db
MD5 3307c20a2ed790580b18bb0521310e08
SHA1 3c5dbc164d9fa90520575f74a1cc3319d77b11ab
SHA512 a3f826185dfaaa5764a4d0027104f6573bc35dc8c1147b1ee8506bafe5861e5ce75a5752c94767f0715dd908ccee80c770b2551a79fcd5019fbd8111b2acdea1
SSDEEP 768:TqjaeqD4MlshiLdMmS3t6j0cOIlbZb75riXYUsZUgb9eHchoSTy:TqqcjhIdMx3tOH1JiIUsZUgb9sYy
TLSH
T16E03C0799DB89C634CB296C5F21775876FF501A386C62ED898CC6B0D02E76DE420BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5a243cc1246c5f8d994db7279d93a1f4861180d78385b86633ac62c4959db0af
MD5 777a055ce16c3c53bfaa8be0c8a67275
SHA1 1e3ede6fedb38d1455c8ee3a7afc13129ab1b64e
SHA512 2e4e39f2bb8162dc20dfa096a1ca503d8a05ac794b026548030e00e2dbebf2735bd0930e9bd6b7cbfeb1e011770a0a2fa5d894f129a8d6aae91991d3d401f269
SSDEEP 768:8lj+9A3cFj0cOIlbZb75riXYUsZUgb9eHchzn12bfR:8Q9A3c1H1JiIUsZUgb9sYByR
TLSH
T1E3F2CF719DB9CD630CE29BC4B216268B6FF6416351C529C488CC6F4D06DB79E430BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b0ebe1ed693f0bd2b1263b9e2a53a61bc3b492e6648964cde7f33d688bf007be
MD5 3b2ee50ccf85d1f3da9025954096b6ef
SHA1 0319aaf81216bdeebe0694543b5a5c4ce6773e4f
SHA512 9dc84a2a3bc37ac1dfa1521bf1512d5185c367d46e93e95109a4cbd445b862e62045ae7e5e04ce9febad5586e330ef3fb00eaf56f0fe73e80310adae9a91416e
SSDEEP 768:Tlj+9A3ZFj0cOIlbZb75riXYUsZUgb9eHchzn12bfR:TQ9A3Z1H1JiIUsZUgb9sYByR
TLSH
T125F2CF719DB9CD630CE29BC4B217668B6FF6416391C529C488CC6F4D06DB79E430BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4163b2c9d7e6bf497c5dc172435b40a27909827d5ba99de1bd66d0b1ba6becdc
MD5 8afd2ae554bf9646ccd3d53d298005af
SHA1 5496a438a698b21e26a41d2553fd0a51eb38ea6a
SHA512 20132ed6d641fe50b96b9c2e4ce6557b922573c67379cac579e6054c0ab76642ebf3c820ee5a5ba995cd121cd17dd8334d2838bd52a8c01287294b6fa18078da
SSDEEP 768:EkF1j+9n3XwgEFj0cOIlbZK75riXYUsZUgb9eHchzn12bfR:Ep9n3W1H12iIUsZUgb9sYByR
TLSH
T10E03BE729DA8CD674CE28FC4F61A224B6FF641A385C529D496CC6F4D02DB2DD430BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fa0ccdc2fbd0fe2d7596e94a3b0002b9c3ff546ad2bf7571eca8c4f71f4f2813
MD5 186176fb27c97b8c5d438e49bebc52ef
SHA1 fa94e2553c96353e17fa573b631a218c5bbc26cb
SHA512 d71ac6cfb08de6485b7575d8befb5d6bba66d706b9487b161445dd60ba97e389e57cbcdb151370e84d509fbb6d477bc9ff0062251007e9872f1b5922faf96e92
SSDEEP 768:ZkjaeqD4MlshiLdMmJ35UIcOIlY75riXYUsZUgb9eHU8O+ApXTcHT+:ZkqcjhIdMG35EYiIUsZUgb9sc+KXP
TLSH
T1B303D0799DA48C678CF2D6C5B35766972FB501E386C52ADCD8CC6B0D02E36CE530782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6dd17c4-4d29-420c-b47f-53d10340cdb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c6dd17c4-4d29-420c-b47f-53d10340cdb3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download