8df8188da994955d293704ecd23723bb05a47148486f596c19e8c50a590dcce0

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 06:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8df8188da994955d293704ecd23723bb05a47148486f596c19e8c50a590dcce0.html
Size 80KB
Sample260627-grhfjsg14x
SHA256 8df8188da994955d293704ecd23723bb05a47148486f596c19e8c50a590dcce0
MD5 d9b2af03dff61f6018d7c9b193319e2d
SHA1 209d23c123d46eab87b199a05e36537fc0fdd474
SHA512 8d4e8a408ccabeb4f6ccb17e1418009eda89bcde2276e87c6e8e4bc27c3684aba785eff2f1852035db52ad0730c883bd1674c42050ad1af5a01dcb576aeb7807
SSDEEP 1536:CaorEr+MGUIgxJ/H9tKiDTzJpRXYQnkiwQWZhlU1j:vrvl9tKezJ0gj
TLSH
T1AB83F9B9F1A170324E23F970412F510FBA3B686BE44C0DA8F154D8F1AEF69894467F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1364	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270137392842101"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-487906980-2895880840-1957110281-1000\{28A89AAE-9224-41A9-B0BD-7775930D483C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 2392	1600	msedge.exe	89
PID 1600 wrote to memory of 4968	1600	msedge.exe	90
PID 1600 wrote to memory of 1364	1600	msedge.exe	91
PID 1600 wrote to memory of 4968	1600	msedge.exe	90
PID 1600 wrote to memory of 4968	1600	msedge.exe	90
PID 1600 wrote to memory of 5024	1600	msedge.exe	92
PID 1600 wrote to memory of 5024	1600	msedge.exe	92
PID 1600 wrote to memory of 1188	1600	msedge.exe	94
PID 1600 wrote to memory of 4064	1600	msedge.exe	95
PID 1600 wrote to memory of 1188	1600	msedge.exe	94
PID 1600 wrote to memory of 1188	1600	msedge.exe	94
PID 1600 wrote to memory of 4064	1600	msedge.exe	95
PID 1600 wrote to memory of 4064	1600	msedge.exe	95
PID 1600 wrote to memory of 1200	1600	msedge.exe	96
PID 1600 wrote to memory of 1696	1600	msedge.exe	97
PID 1600 wrote to memory of 1200	1600	msedge.exe	96
PID 1600 wrote to memory of 1200	1600	msedge.exe	96
PID 1600 wrote to memory of 1696	1600	msedge.exe	97
PID 1600 wrote to memory of 1696	1600	msedge.exe	97
PID 1600 wrote to memory of 4784	1600	msedge.exe	99
PID 1600 wrote to memory of 712	1600	msedge.exe	100
PID 1600 wrote to memory of 4784	1600	msedge.exe	99
PID 1600 wrote to memory of 712	1600	msedge.exe	100
PID 1600 wrote to memory of 3380	1600	msedge.exe	102
PID 1600 wrote to memory of 4788	1600	msedge.exe	106
PID 1600 wrote to memory of 5052	1600	msedge.exe	107
PID 1600 wrote to memory of 5068	1600	msedge.exe	108
PID 1600 wrote to memory of 1520	1600	msedge.exe	109
PID 1600 wrote to memory of 1520	1600	msedge.exe	109
PID 1600 wrote to memory of 3696	1600	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\8df8188da994955d293704ecd23723bb05a47148486f596c19e8c50a590dcce0.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffd0c42c188,0x7ffd0c42c194,0x7ffd0c42c1a0
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,1322907352585869166,905956004519160562,262144 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,2917772219062698586,14062368813662743525,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,9714884106017176696,155571183341970344,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:13
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,14556771540926454999,11546772198666150797,2097152 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,3528735714063006037,18329474937299525852,2097152 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,15601546569592130160,17183461061547185531,2097152 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,13483778851377437895,2639282344014777503,2097152 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:9
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,4894663840248705768,10875562327839059214,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,16109528513500875269,15331158123224723388,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,14567634503699143287,6599628694968304668,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,14567634503699143287,6599628694968304668,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,17970684268955400973,3784800622253139654,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,524974412771476133,3425747124956621827,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:14
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,15306420783567574268,15313769915685061973,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,9507749546310885916,4961877359656827782,524288 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5480,i,9717205278506942222,17545226633833963564,262144 --field-trial-handle=2144,i,16763646551326452918,5770798547119533383,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 86bd3a0f7328ff17cf8f5c348bd8ac04b7d41c52ef238ad0b048b09e5a964859
MD5 c6e3af776b1f4463a76e29cca079d5e5
SHA1 19b7f1bc72393d7717302ee15e0e4afa431cea45
SHA512 b15ef012a17356e47acc81e1922c433a19e6e554795a46fdf0ae05df1e9abbc87a47b05bc831bac2c6c32faad3f39c7a7cb21ae65ceb4f96f3deb3ea0d83e9c6
TLSH
T1D7D080613B05A616D54B19729C18E7117237844234E3D9097171D10EDABD3C4F3C51F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 be05b8d7f0bed3c8d0e89a1a49e4bae1f45619d94149f9abd8291f558897f2f2
MD5 e02c579c3ab95f9c3a77f9c2199a30f0
SHA1 f96c7c58830f56a993117d75a3b0f9e30bfc93a7
SHA512 264a83561849b0e2a1c42c3e478b7d5a3b3fa31f901f29440fc853108e9046e73ba21a692d0dbdef7d9fd76e9b6aac64489fb603c47ab551280df09d26d7e2a4
TLSH
T140D080613B05A516D54B19729C19E7117237844224E3D9097171D11EDABD3C4F3C51E3
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 cfc928e0708c7463eb801c00949fde1698a03179eaeafdfad20148fbe7a40c74
MD5 b1fce63df13f6227c180ad97db5e8ee0
SHA1 a84d671c197be54a0859cac3ef8b95a96f70229d
SHA512 e10fdacb514c9be40b11611c920d5f703f2e6515a93dd9b3a857016e586be08e4767d2dc015448696f80ad51c452b507f188b9364041da7173af710db4fb9825
TLSH
T150619659D6650F62D7E0853C50F4DC8AF7F7286E463B2E23589060F86A1773DE4318AE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594126.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594126.TMP
Size 3KB
SHA256 9247e8d03064de1f4b3d40122484106353e531d8834aba07ee905aed42f3f3ad
MD5 f41e1a3d990c21844d09824b22b86001
SHA1 70fe3dd50a2c61e8807c8f4ff8161086c7555156
SHA512 5d8db6e43c44188ffa2bdec02582aa3e296a76a07c01e4157b7fff1af2e1efa98a986e00dd9fa4fa33d67bed35adb124bb9f8df824fcec0e0a34237734bff4f6
TLSH
T1DD61A659D6610F62E7E0853C50F4DC8AF7F7286E463B2E23189060F86A1773DE4318AE
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c41165ae01f42d29cdee1938b00c198599d77b372f2046acce57c9094e149f0d
MD5 2ce556e742bc698c7b515e6992a262aa
SHA1 6819ffe6a42149cd73a9944510ef3e4a25a6e963
SHA512 61f3752dfd211c2328d3885c89159f45a58ac9b962baa6a42aa669a7c9c777b1dfcf80673b89a1811b240914931bf73025a8d1700d9d0b901bbf00ed4cfe11e4
TLSH
T192518AF7C6E8867D891146F4BB242E1BCE2E0915432C3C5689E4AF1BA3F2871E24155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0f9913fc7f4c49dbca7663ca634ef7d70fcf66ac2d2aa6e127d7a68a9a103bfc
MD5 ba33c3338b2f137bbb3078ec82527ffe
SHA1 33dafe0a24e0bf2d538e8dfa0d9a358cefaa370c
SHA512 488954558eeb401598160bf5ad12864e7db30d3ab211fc44f026cd3f73a94708a5717ba251e8fedad9363a489df9e5bffeec3df8b5100efa361a9d42451f481e
SSDEEP 192:sxRaR8yM/jK1Ml8wFt/f6s2zGiJIzoA8p4Q/g6+WNIYAizwWgYQGBIgIJ:sxRa2bt/f6s2qERp/5IiwWgYJs
TLSH
T1ED52D816AA34993BCCDBD21DFA557F53D2F91433A2901E44AAFC8A0C05E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 94c40fee386a4adc0a60fce2bd105e386f409a56de33c853ccd0270b004242d5
MD5 a652d2d5768e0345e41a70bc8a7f9086
SHA1 dd4f7e203f27c2d01b59bf34b492b456a54ffdfc
SHA512 4ea147284516483bf63ff20fcaebf2271c6d23fae27561cffc303b76b29574bba56a01d96ecfd2ad2982069c1cd60db1b2588113d66e3b319aec4787f8ac52e9
SSDEEP 192:sxRdR8yM/jK1Ml8wFt/f6sfzGiJIzoA8p4Q/g6+WNIYAizwWgYQGBIgDaJ:sxRd2bt/f6sfqERp/5IiwWgYJa
TLSH
T18E62E916AA34997BCCDBD21DF6557F53D2F91433A2901E44AAFC8A0C05E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c2e935c27706299beb5370e1ccb20744f0d2d1967d9f26cba590d84899fa2ade
MD5 f8f0e685917b06af3a679ec816d09c33
SHA1 c438b3abfbe55026d5df03f5a0972fd0865a3a16
SHA512 d7ce61683f1d7d8fd70cbd7c6ae5db81e5398f10a7e646852774cf39650bbdcf13740d7f0b3cb0c2b29a1def8b105ebf2ec1e17860e7d0d6b03076952e1bfc1f
SSDEEP 192:sxRdR8yM/jK1Ml8UQ+Ft/f6sfzriJIzoA8peQ/g6+WNIYAqzwWgYQGBIgDAJ:sxRd2qst/f6sf/ERD/5IywWgYJY
TLSH
T1A962D816AA24997BCCDBD21DF6557F53D2F91473A2900E44AAFC8B0C05E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a3925fc26e6bfd19eb58a2ffe9df3f2e5623a33cde82b6669891f7da3e3f920c
MD5 2ef9081061c6c07c21f1ca6cb85ebde7
SHA1 ae9d6f9e891d6241ab5f0848317979d90c2a6049
SHA512 1262bbdc60d47c860f58abcc25805a57cb6173273fca3990445b7d2e00ae69ef73920e03e520d334561003b9f1bacfaf581e6c0e96fad18bd88d48c9837e91d1
SSDEEP 768:l1Av9+WgI+f2z8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZ7zVTro9so0:l1Av9+WgI+f2zu1jaM/VgSo0
TLSH
T14AC20B2F644CC77E4F840AADEC2AAE976DD801CB9B584D5447EA890C03C67EF511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

691a0eb7-cc8f-4c3a-b6a5-b6e3050f281a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\691a0eb7-cc8f-4c3a-b6a5-b6e3050f281a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce24d376fccac6fecc3758c4b6cb7f555153d629e91558c1554def87c51570cf
MD5 1d2c0d4786711a56d3c2c685b1971825
SHA1 9a40147a0be185ab125f51e49b12ec350fb08373
SHA512 2b3977b561a7c809b38fbd10247b5b9306f586fad5c0be6823526ad47787ec5b2ae07428b755ec006f6f1497789fac75d31e1ba8f0b454e9ae45840c5f78f704
SSDEEP 768:Wj+9j3xWBGjwvPz5BwT7VWs+DoLSpG0/TIo5Mzn12bfy:F9j3MzmVmoTiTeByy
TLSH
T128F2AE36E8689D735CE6CBC5760B66472FB58223C1C93A98C5DD6F0D46C739D230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 57d06038e057dbfe55736420d83053cc68b9883f231fdf41d7cab021f9c6c8ea
MD5 cb71cd19bbb9287a2a518bd76a0d502b
SHA1 9f150b788be1941cbced1685e01a932cb84892c5
SHA512 06658f05fbbaba75754d425007ff0fc65b9f463d8eddcc5f5483dc5ceaf3d493f5c3e64f1f93b644dd0d0a0f4cf36ce4874fa0924c4a92d34f562382123b4d4b
SSDEEP 768:5j+9j3yW+GjwvPz5BwT7VWs+DoLSpG0/TIo5Mzn12bfy:k9j3tEmVmoTiTeByy
TLSH
T1BCF2AE36E8689D735CE6CBC5760B66472FB58223C1C93A98C5DD6F0D06C739D230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 17518fe41826ab74fed8a2e210fece6fd13d1deed58d1bbe08ade2429c13be26
MD5 b3e33ed10d0fa105d98bbd0c886f22b5
SHA1 47309cf0f2dd65dfdc30ebb61fad90e4777a27b4
SHA512 ed0c26d15793a0dd2ad2f5c53dad83beacfcbfdb4a94ef20e4520c47b272d0f91bd256eedf1c86cac70df750a45bd07dfadb210443a8d98581c017602518fcb8
SSDEEP 768:VF1j+9v3Cwg6WBGjwvPG5BwT7VWs+DoLSpG0/TIo5Mzn12bfy:89v3ezzVmoTiTeByy
TLSH
T1E4039E32A8A88D77ADE6CBC5BA0B66475FF14233C1C53A94D6CD5E0D05C729C130BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa37ab20-6649-48f6-b9f0-e4e115cd4cf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aa37ab20-6649-48f6-b9f0-e4e115cd4cf4.tmp
Size 38KB
SHA256 1569e5fbfe9e666c2728ff2dfbbc43d471f75eb24c6fce27619230aa3d30d409
MD5 b068ae5850335f82f8c0902095caa7e3
SHA1 1184ac620f33b9895ab7e0df4d49202e25ba7f5a
SHA512 dcd6fe41a31941e1639ca8a4cc33e9ef7301545a2c968cef3d08bf9d9c2ddb215c3bf81d63c8efedf7a91c93bad2590d4c0f47771304244f464eeb70fde2ab29
SSDEEP 768:ojaeqD4MlshiLdMmp3/r2jwu5BwT7VWs+DoLSpG0/TIoFR+ApXGFTX:oqcjhIdMC3lLVmoTiTT+KXi
TLSH
T16203B07AA8A89D739CA7C7C1760BA6431F744363C6D83BD8C9DD2E0D02972CD630742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6557e8c7-a772-43db-aed0-baf5d6c2643f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6557e8c7-a772-43db-aed0-baf5d6c2643f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download