e45cc0c5c0d158ff6b46160088f6eb596edff66dc4fd2edb600b0248aff9e7da

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e45cc0c5c0d158ff6b46160088f6eb596edff66dc4fd2edb600b0248aff9e7da.html
Size 79KB
Sample260629-gqde7set3t
SHA256 e45cc0c5c0d158ff6b46160088f6eb596edff66dc4fd2edb600b0248aff9e7da
MD5 11ad2ec41f68f89adda260a3b66a6ccf
SHA1 85304e1547ddede767396cd42e11223eed9ef50a
SHA512 c744d4249074180860733ea06bf49dd68a299974c18e1c56fc80eae807a0e22ad68c65ba682ee2653c511445ef4e440c726e697698191d9761e15500a9ef32c6
SSDEEP 1536:vyGo5Er+MGUIgxJ/H9tKiDTzJpRXYnyHAMwQWZhlF1H:trvl9tKezJ27HH
TLSH
T17183F9B9F1A170324E23F970412F510FB93B686BE44C0DA8F154D8F1AEF69894467F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5792	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271864191485970"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{328A2EA5-E66E-4FCF-B5A5-4248236377F1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1616	msedge.exe
1616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe
5572	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5572 wrote to memory of 5564	5572	msedge.exe	89
PID 5572 wrote to memory of 5384	5572	msedge.exe	91
PID 5572 wrote to memory of 5792	5572	msedge.exe	92
PID 5572 wrote to memory of 5384	5572	msedge.exe	91
PID 5572 wrote to memory of 5384	5572	msedge.exe	91
PID 5572 wrote to memory of 2744	5572	msedge.exe	93
PID 5572 wrote to memory of 4568	5572	msedge.exe	94
PID 5572 wrote to memory of 2464	5572	msedge.exe	95
PID 5572 wrote to memory of 2744	5572	msedge.exe	93
PID 5572 wrote to memory of 4568	5572	msedge.exe	94
PID 5572 wrote to memory of 4568	5572	msedge.exe	94
PID 5572 wrote to memory of 2464	5572	msedge.exe	95
PID 5572 wrote to memory of 2464	5572	msedge.exe	95
PID 5572 wrote to memory of 3428	5572	msedge.exe	96
PID 5572 wrote to memory of 3428	5572	msedge.exe	96
PID 5572 wrote to memory of 3428	5572	msedge.exe	96
PID 5572 wrote to memory of 3368	5572	msedge.exe	97
PID 5572 wrote to memory of 3368	5572	msedge.exe	97
PID 5572 wrote to memory of 3368	5572	msedge.exe	97
PID 5572 wrote to memory of 4508	5572	msedge.exe	99
PID 5572 wrote to memory of 4852	5572	msedge.exe	100
PID 5572 wrote to memory of 4508	5572	msedge.exe	99
PID 5572 wrote to memory of 4852	5572	msedge.exe	100
PID 5572 wrote to memory of 3376	5572	msedge.exe	102
PID 5572 wrote to memory of 4632	5572	msedge.exe	106
PID 5572 wrote to memory of 3848	5572	msedge.exe	107
PID 5572 wrote to memory of 2644	5572	msedge.exe	108
PID 5572 wrote to memory of 1096	5572	msedge.exe	109
PID 5572 wrote to memory of 1096	5572	msedge.exe	109
PID 5572 wrote to memory of 1616	5572	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\e45cc0c5c0d158ff6b46160088f6eb596edff66dc4fd2edb600b0248aff9e7da.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb3e43c188,0x7ffb3e43c194,0x7ffb3e43c1a0
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,1138868937793625688,3450011517120548876,262144 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,12993714337952124182,10329326342195888192,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,15010354765731732100,11116986525537391295,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,8897712328710479130,10686951975399188657,2097152 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3404,i,14763246100472775786,475574133240459477,2097152 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,17801455664495221187,4641961975437553061,2097152 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,3991254957141060584,12990129994947816584,2097152 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:9
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,3920678062927924794,6754176360143996981,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,7285150200404516860,6059911471628502182,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,15796855092970181703,4085422235281406550,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,15796855092970181703,4085422235281406550,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,14074962195695860076,15265145009512743918,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=1380 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,9569975398874044869,11219000496934229870,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,8491663931518061217,11942066026172617665,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,6980627865119603430,6743216951810166182,524288 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=1236 /prefetch:14
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,4498306409114075442,7473891307301186090,262144 --field-trial-handle=3140,i,10745719408093594039,15800192100788541959,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 34b002cbb1b4e904f725c1f8d2579a923b922aa51d872c21da4c1ae30c644730
MD5 c4c30de1124c778bfef8d271ea258f37
SHA1 635c513fda9d09f57530e0cb3e4e0240c4cf64a5
SHA512 2573fe51978c96b6e13f164ef7739c07a9a55ad08e97245ce00db034103dd9509f03f0d8e135234f86276c6f13910691d5c690a491453d56d5eabb580373e3bf
TLSH
T187613CEA303F0562EBAC82FB74E513483370FA41D3771E1204DAA2374A17374189C49D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594491.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594491.TMP
Size 3KB
SHA256 5ab8fa4754bc24c52446c8b748ee9627e1d40e80a376f7c5d098b8ec87b1ed2d
MD5 d6fa0b8c2778b6aa12327c7559f9e16b
SHA1 c8b9ef09445b51cb93a4350c24983ee6c51e8f22
SHA512 160fe420f7fba7a14ce141f8f436c549cd46eb6fc1ecc80ed46d220376094f9d0e9500afd5e91f11b627932ba218675a973c0f6b301c2ad2ce683cec01c741e8
TLSH
T15E614EEA353F0861EBAC82FBB4E513883330FA81D7731E1204DA62374A17374189C05C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 56c6aa3bb088d760f8217d89d3c093e90054e3f4d5441024fb592054c40a451a
MD5 2ff53833b6759b1643707f2719b7b163
SHA1 093196c4d6e1c21003401a6bac5cf1c0c2324fc5
SHA512 ed4a58d788a3e23e3330309a52718baa361a538b838f349b380433952903c02260050fcfb31e7342faa2675e871ceeb807ec2e74d5aa00b7eb97416e1ad49b2d
TLSH
T12C518BF7C3E8866DC91156F0AB156E2BCE2D0955832C3C5AC9E4EF1BA3E2871E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d4b0387d9e1c2c9ad0e42bdd8ab45445fb2ceac4c16ab1bb7691679bf29f5c10
MD5 3606844f5fcf653c3501d73415cb7326
SHA1 ee72ba7707ff7ad9f2fa70e1256e3dfb11d16375
SHA512 a3e77d721abe46dcad0bf9f93e9eec18c01cad0a08bd54b8486a677506674ec72f5790ad233c8c588d763003566af4fc49a223d6816ec76015d75cec5c2a05ce
SSDEEP 192:sxRKRryM/jK1Ml8wFc/fwskOmI1NkUDvzoA8p4y/g6+WNIYZj0GtIgIJ:sxRKHbc/fwskOmI176H/5Igs
TLSH
T16F52FB166A285977CCDBD309FA517F53D6F85533A2900E44AAFCCA0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b4c85e46556ee6463a0145159f6998d4e6b588cf2ed34471ab431ea342411f70
MD5 d5a8c9b22a9ae19417aaf1309fcd1cf4
SHA1 20c17cfabadcbc20c04478a06a1355020a3686e2
SHA512 400afb5ca69d7a578ee68a5eb66b4be4934ae10201904ac33c0b93e373dd7b1b49dec5f9ccdccead2c27df750b36639e8ff41a90c86481052452207127315c38
SSDEEP 192:sxRRRryM/jK1Ml8wFc/fwsdbOmI1NkUDvzoA8p4y/g6+WNIYZj0GtIgDYJ:sxRRHbc/fwsdbOmI176H/5IgQ
TLSH
T16D52D916AA285977CCDBD219FA517F93D6F85433A2904E44AAFCCA0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 02e7bffbc5c5d3ad4132fc4f4579b301065c9daa2782f6dc718ce7ee47b94c0a
MD5 262ec557995db328d60ec8f4aa013ba7
SHA1 badb8363e5bee4c6853a57898342d1bbf19d3a70
SHA512 0592e82684dbecb06f1ecd5056a80128f824e26ef35dbb3724aae86adab0ec9d08dc601bfcaf39a790b59f542072b9f57b4e1ed13fafbfde59d3080c5e327a5e
SSDEEP 192:sxRRRryM/jK1Ml8UQUFc/fwsdbOmIONkUDvzoA8pey/g6+WNIYZts0GtIgDqJ:sxRRHqic/fwsdbOmIO76F/5Ila
TLSH
T12062F916A9289977DCDBD209FA417F93D6F85433A2900E44AAFCCB0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 59214b6b7eab2fb1e247db39adc861826e586b936d7cb2024e56df0cdba17ed5
MD5 411d65142b18aac55d4b8fd66f4fac08
SHA1 baa43a6cc6112ad7eca995f9db6e08248d107e63
SHA512 b71d515151a00b755b60de7bedcae6c494cffa21b6c1b2589e69d990619fa769fe141d8726f525b78526b835a04678393949ee5040096cc651bba9671c9d75a6
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQOro7ov8n+y:eOEt7IWgKgf16u1jaZ/QF88+y
TLSH
T1EBC2FB2B240CC77E4F844E6DAC2A6E976DD801CB9B988D5447EE890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59f91c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59f91c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1eef55a55275db83787286a38db41ee5b164c9a1b0c8ac8fdecf55337d93d3e9
MD5 2f872e545215cf5664950de99958b8d6
SHA1 d12da40e906a7326e50a07a54977695bc2885ddb
SHA512 c041fd504eb0dab7469354fa6b4bfaf0df172d40d3cc0ebf687172f93c9c71e6aefbdb5ea37a3d953c1db6e0ddfc324cc98700f2e68b32e72b4a0dc35db96694
SSDEEP 768:Drj+9v3nwbyPfcOJfBfnV5R4HTytYYqgHvPwvzn12bfJ6:D+9v3nwGfdfBfTWTwJqByJ6
TLSH
T12CF2AF72ECB85DA76DE2D6C472062787BEE8822783C51664C9DC4B0D0ADB6DD130BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 14c470043134cf89affafdfa68911007836cb90c5c8eac2e4f5e336210a1df83
MD5 598585bd061ad18a1c9f8faf9bd51f46
SHA1 d0c945bdc143cd521ea14523d8e75f5be3622f98
SHA512 ac0de5a51cc2e69c993f534421bd1e5f74a73b55106b7ebd106f72e53684dc8228a582383e6b03a3b331630a76bbaa5f95b1256ffea284fd42453bcd2bd8c687
SSDEEP 768:sjaeqD4MlshiLdMmR3uwNyPfcOJfBfnV5R4HTytYYqgHvPwvzn12bfJWTD:sqcjhIdMq3uwofdfBfTWTwJqByJ2
TLSH
T13813BF76ECB81CA75DB3D685720677877EA48267C3C86664D8D84A0D06DB6CE130BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2bdc89207963b59c9ded5fe820ad017fcafad27fed2063ae3f18e022ba2bc12f
MD5 5097c2e06f3046ab5d78c91022508c7d
SHA1 dddb76ee17f5610bbb160476eaf31af6c3eb3e7a
SHA512 cdc1310ecaa3e8f9ddc7f8714c6d4dd5f601bf9a71a930b49258489074f72f08b71e068fcf1a6e9c35bc02b575f7512b13dcad500d843f8688afd61da1d2cd63
SSDEEP 768:zj+9v3AwbyPfcOJfBfnV5R4HTytYYqgHvPwvzn12bfJ6:W9v3AwGfdfBfTWTwJqByJ6
TLSH
T15EF2AF72ECB85DA76DE2D6C472062787BEE8827783C51654C9DC4B0D0ADB6DE130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2a0ed4623dc06cb6df156e6255efa78d08179b512f5da4a89b5bb8c9b50d71b5
MD5 0e363fe90bfe9a0245c59221680a607e
SHA1 ff3b29251de72dbb50ecaf488e8f380b2fd8ae40
SHA512 c7433811b396ac4573fa1b28f8da6452472c6cf5d46138b17b71f4f06bd80dc450504b04a86224a832139a4fcddd06ca23cb13647535b953ea84de60d64ee5a6
SSDEEP 768:bYF1j+983SwgIwbyPfcOJfBf5V5R4HTytYYqgHvPwvzn12bfJ6:bV983JwGfdfBfRWTwJqByJ6
TLSH
T1D5039F73DCA88D6B6DE2CBC4B6062787AEE48277C2C56660D6DC4E0D06DB5DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 84a9f644e08a18cfdddd3bc5078a5b6511e19092025bafe649a2902f9955a590
MD5 68ed1d5a8cb106df93e3de876e16232c
SHA1 524929cb7e9d0e4ec1749fdcfbf177404f547662
SHA512 01cd46d01321664f596a504689ead9486d08869d127944bac3daac198d215c151d74e321e8ea0fc25947179b61dcede84e0831f65a3b988107fb2b4bd12b49cb
SSDEEP 768:EjaeqD4MlshiLdMma3uWPfcOJfGV5R4HTytYYqgHvPgNyjWtxjTo:EqcjhIdMh3bfdfwWTwJQyj2y
TLSH
T12903CF76ECB84CB79CB29684770677976EB842A3C3C52B64C9DC5A0D059B6CF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fdb39c16-8bf1-43c8-b01b-2da2bbae9785.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fdb39c16-8bf1-43c8-b01b-2da2bbae9785.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download