ac33cd13e517dfde0060d1111f0fe6ec8f3b7fedd4a2737649ee52096f7faa17

Resubmissions

15/07/2026, 13:32

260715-qsxfjagx213

15/07/2026, 13:19

260715-qkkf1adt5n3

Analysis

user interaction
yes
max time kernel
130s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Signature_Required_Review-ref_6418722927e54e56543ac2669a94147f8c93f54ba492037fda_-.html
Size 3KB
Sample260715-qsxfjagx21
SHA256 ac33cd13e517dfde0060d1111f0fe6ec8f3b7fedd4a2737649ee52096f7faa17
MD5 31e1652ab9a51c01549ef3c3574e2c6d
SHA1 e6af1b5f758204640242c7de56d3165e8fd30f7a
SHA512 af62b62d8950af65b300da43f153ddbae8eb099d3fd1e9144750d5137ad118d8abb4f5d739893cd431f532dfe765ee4e52ee242f1f538d09dafac3367600fdc5
TLSH
T1AA615495BDC075C613564FA7397B35CAE66FCCBA3DE28602E20074C07D61A31E583A75
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4212	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285959314531680"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{C0771D0F-C65C-4E0B-8AD1-015417BB703F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 4800	3012	msedge.exe	87
PID 3012 wrote to memory of 944	3012	msedge.exe	88
PID 3012 wrote to memory of 4212	3012	msedge.exe	89
PID 3012 wrote to memory of 944	3012	msedge.exe	88
PID 3012 wrote to memory of 944	3012	msedge.exe	88
PID 3012 wrote to memory of 2912	3012	msedge.exe	90
PID 3012 wrote to memory of 2912	3012	msedge.exe	90
PID 3012 wrote to memory of 3488	3012	msedge.exe	92
PID 3012 wrote to memory of 4904	3012	msedge.exe	93
PID 3012 wrote to memory of 3488	3012	msedge.exe	92
PID 3012 wrote to memory of 3488	3012	msedge.exe	92
PID 3012 wrote to memory of 4904	3012	msedge.exe	93
PID 3012 wrote to memory of 4904	3012	msedge.exe	93
PID 3012 wrote to memory of 1388	3012	msedge.exe	94
PID 3012 wrote to memory of 4540	3012	msedge.exe	95
PID 3012 wrote to memory of 4540	3012	msedge.exe	95
PID 3012 wrote to memory of 4540	3012	msedge.exe	95
PID 3012 wrote to memory of 1388	3012	msedge.exe	94
PID 3012 wrote to memory of 1388	3012	msedge.exe	94
PID 3012 wrote to memory of 1728	3012	msedge.exe	97
PID 3012 wrote to memory of 1728	3012	msedge.exe	97
PID 3012 wrote to memory of 1636	3012	msedge.exe	98
PID 3012 wrote to memory of 1636	3012	msedge.exe	98
PID 3012 wrote to memory of 784	3012	msedge.exe	100
PID 3012 wrote to memory of 5000	3012	msedge.exe	104
PID 3012 wrote to memory of 4072	3012	msedge.exe	106
PID 3012 wrote to memory of 5892	3012	msedge.exe	107
PID 3012 wrote to memory of 5040	3012	msedge.exe	108
PID 3012 wrote to memory of 2000	3012	msedge.exe	109
PID 3012 wrote to memory of 2000	3012	msedge.exe	109
PID 3012 wrote to memory of 4380	3012	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Signature_Required_Review-ref_6418722927e54e56543ac2669a94147f8c93f54ba492037fda_-.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc2b16c188,0x7ffc2b16c194,0x7ffc2b16c1a0
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,3913643513160088585,9696722704388775305,262144 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:2
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,4153505096235068383,7423813147099975347,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,9233646685950252087,9776617807268025503,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:13
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,10697637324819485479,18096395554670820538,2097152 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,8461478480846996065,11375844854074819151,2097152 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,7770156927396586458,6893849879466200885,2097152 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:9
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,10487850697980644967,52797015347182461,2097152 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=1660 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,10121214620337236553,10041054776049309310,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,8614465480721091497,8462100960591643697,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,3658970204097664230,17536340622788853494,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,3658970204097664230,17536340622788853494,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,9887221579963967196,9610409031617206926,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,9887221579963967196,9610409031617206926,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,4305683349341557708,2405789111543073612,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,9222376874225029043,2046951267588798895,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,16897024984169138891,16428635837761221235,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,417763303544622580,17827451136488772221,524288 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5488,i,15496670165137873541,16081092168668845233,262144 --field-trial-handle=2880,i,12848881370586048885,7350419797601301375,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 aa7f6103a2098cd38bd385b90acdaae601d857f82bda7e3676d004e27918f34f
MD5 011770e532b0fdc1e1b5565e7469830e
SHA1 d7c412536ef5218a985a713dc4b9bfec1693c2c3
SHA512 01a9936bb5afd5b8ff5729b8cd35fccb45611b9545116c7d7d392270452a7f987191b165da744ecd0e225f7805230c6944c45f65c9ef648d13a8fd5d774950bb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P75:fwUQC5VwBIiElEd2K57P75
TLSH
T1FDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7bd62f61a09c1feab4d37d904ec5751e8ac96c00343af927c37e4ab1997a7a23
MD5 52454fab9c8ecaee5928ead77ad5085c
SHA1 b038ff159967341375b240167f1af4062d5a25af
SHA512 d49507545297f33dbfa3f3d9833760bc6d5e4d7a5a61e2eb6c40de0191ab3a26c382ac6729fcf4b83e9023d851dd0bb87705b832bab1ec72bd709acd9edbb2cf
TLSH
T12461B65FD32EA8E2D72490B315E208C9367484E1E6CF2E9B82B6F57C940E795761433D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5996c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5996c8.TMP
Size 3KB
SHA256 51bea38ca5d28f12920b9cc3aec18209cd10f8f213ff4984488e09de4eed9c90
MD5 8d88ed95911f983ab23450d048247705
SHA1 4970b89c35f7ab57023bdbbf953c7b7a1365eb42
SHA512 0420bd4d05f33696e5c5214c1e147358e54cdafc3b52e73229b5c381228f82d0a5a62abe8a33a9f21bbfbb93f453d81409514929db387699d51af8c0be62b505
TLSH
T15961D65FC32EA8E2D72490B315E208C9367484E1E6CF2E9B82B6F57C940E795761433D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d55c70f-91ff-4053-aeff-08dc2fe4fba3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0d55c70f-91ff-4053-aeff-08dc2fe4fba3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d5608190da24669fc3aa563e45c31e568c8af68e2c54de3c59bf7b3afd5dc046
MD5 46c18f916b7d0703c33d2309d4528c8e
SHA1 76848a5931b1cec871d998bbd6190d9225778ae0
SHA512 86f6f0316751a129107da568009a8c2053fcc6bcb8c134c2a8e6d608087fdc37cfe50bf58e3c074feaf0a3060a5adcc40d75913b70de3a8fdb879c5dc4b4e709
TLSH
T1F0318EF783E4867EC91156F49A24AE1BCE1D0117432C7C5589E4AF1BA3F3470D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 39b14a77b149a2657103024c6277b0e671773da3faa32eb812c685cf819ad882
MD5 1e031a23e7cfe6861e5a8729bc520113
SHA1 2d277b4eec672e33b6b2f7d3931ca718e10b4187
SHA512 50f403869236347d3ec01f2424f5ca543da89d1809d52b837a2c7fbc872e3928acfaca3edac7245f91d468962c86cf647a9f816a8d131cba2d338d13046ecc6d
SSDEEP 192:sxRyRuyM/jK1Ml8wbj/fUsmDsmZxzoA8p4Z/g6+WNIYxzJX+GsIgIJ:sxRy4lj/fUsmDuY/5IuXus
TLSH
T10052DA05A6289977DCDBD20DFA517F93D6F81573A1941E44AAFCCB0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 360a4ee550b3ab401eb104078868cbb26cc55e125de733291ff01857fa8e0ad4
MD5 655e68d4725b0d4eab3c882554b0144c
SHA1 e7db7495a901e6111b3f8c9e2ee7fb136c8ee312
SHA512 7f270471d72e4c3b6ea0e88085e29195a6081caed57713a1cddae512632c0c1324dbf60ac5b2de702b98fba6f433a0b2a48848986213a2bbda998dd2e361d19a
SSDEEP 192:sxRtRuyM/jK1Ml8wbj/fUsPDsmZxzoA8p4Z/g6+WNIYxzJX+GsIgDYJ:sxRt4lj/fUsPDuY/5IuXuY
TLSH
T1C152DA06A6289977DCDBD20DFA417F93D6F81573E2941E44AAFC9B0C00E66DD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 36687a875f10e9eaf608bf41d6ad98f6a7cb8b685504dac64273ee7108a5f5c6
MD5 3d5b624e89e326c853b5769a21f64838
SHA1 066599fb6055d684c4ca136b8fe1aa9804aa9b1c
SHA512 a62401ccc0e10f9cd1e445f3185dda68cb55e6c240f3a7a5e442a495f293acb8d749eae96acfa97fe9529d6bfde8bd5c80605ec653ba0ea1e49e84afc172897a
SSDEEP 768:0xCyAjWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV9rVA3roJPewRV:0xCyAjWgbrfM1u1jacpAkJPhn
TLSH
T11AC2EC3B640CC77E4F844AADEC25AED77DD802CB97984D544BEA880C03C77EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 84b852059b0e53855a815f02cd50211e1a20528b096ef83b87e65d030dd5374a
MD5 e734ad09e00619b9fdf2860d27f5909e
SHA1 827cc6f81256b83c934b088b7d6d740cb9ef6ab8
SHA512 407619ad25b7557f4ac384593f2cc549712aae4fb9e7e6378b29d7bc92766d41ec8440c9016c656b0147a68e0d96e86ca7656fcf412132ca39682ffe6d1550d8
SSDEEP 48:KyOXQse8IXVhIpKKcM7ypGIPK/aULKI/Kfa4DyD:KAVhWKKca6GYK/aEKsKfaGg
TLSH
T1D2914192713A120269BE78089194D616C6D275B33618E92F3BE904BA4F77F424EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3569.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3569.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 e56797fc674c6c805ca318d483f3d6c620dbdaea722c0cebec37b5c6ffe5e626
MD5 985a7d3fb9debc53fa2ff4f9e73306be
SHA1 3fbdad57e3f2ff181afc6dd84aecdb3c2f370940
SHA512 6f92d4ffbd00881cc613d73ae553985b6e3f425697957292db301f6396b440e3da70b3072b6f2b93c60e714e430138b5802858c6ccda9cf27536c759ae655534
SSDEEP 768:Erv+4UNbdV3YyKkKL2sjF669yrqUjWiIwwxMtGMVcLCO7w/7:Ebsbr3dkjF66INWZTMIHCt/7
TLSH
T16713AE30A8685AB7CDF5E685B1133287BFB4515387C80F98CACD6B0D069F8D9234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b5653e1dd4f3eeba5c7b0e3920d1e59b35769cf827a1b834c29652a69facd4b4
MD5 1e002d07a83e62f83474b85e3c761152
SHA1 d2938882506ab42763ec2fe47976621a3c264b1f
SHA512 44ae07f8288142a89b89c803e769939b8254650bad668e9c71ff5d7ca928e7654051b025893cde374e03e4c57aac0afc08c867022251408bbd94f5b9bc813860
SSDEEP 768:Fj+9f3SIKkKL2rjF669yrqUjWiIwwxMtGMVcLCO7w/A:w9f3JDjF66INWZTMIHCt/A
TLSH
T1D9F2AE70A8555EB7CCE5DB85B21337C7BFB4416386C80E988ACD6B0D068B5DD534782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8e8f76fff85b1a83af59177b4d9e254a7ebdc3aab15650941ddc20a8c68b112b
MD5 58bc848f665995b6b5326d6e66c8fe51
SHA1 c3c1c5ee9a85e069bfd2a71d6a065edab6d1c8f0
SHA512 3bdd8a92f5d7630e11b21a25699a1158dd86401a4e3e0b41b8d5d6dfc6f5634093b1537bcba8b250d45e9f25f0f20fdec4f38bf030d7d2d6a8bf92e36fd1c86e
SSDEEP 768:Wj+9f39IKkKL2rjF669yrqUjWiIwwxMtGMVcLCO7w/A:F9f3oDjF66INWZTMIHCt/A
TLSH
T163F2AE70A8555EB7CCE5DB85B21333C7FFB4816386C80E988ACD6B0D068B5CD574782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 0e288646b8e7e6a74a3fa314f50937607896e69217f2f53c22163f9dff6f5d0e
MD5 56001fb7e44f31a4f67a8500801d8772
SHA1 611591a9cc6c67a358c4d56728bae0016ff463fd
SHA512 11a8012f9cb5534cbbe3d79239dc825d07249686cda8bd69687f6de1776ecd6456fe497a0bcd007eee3306ba229b707b4441c0e9c2fdada02ae85121511ac238
SSDEEP 768:jF1j+9B3lwg/IKkKL28nF669yrqUjWiIwwxMtGMVcLCO7w/A:y9B3C0nF66INWZTMIHCt/A
TLSH
T1A203AE72A8949ABBCDE5DB85B2133386EFF041A3C6C95E94D7CD6A0D028B5CC1347829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1b7a2b513b9a279cdcf27f1c2b0f964dcb3a3b82410ac8403a6ce4dba7ec57da
MD5 0dada1a229c67d46e70ebc43b2365a17
SHA1 232138af442c96e8a69725fae7ac62d2523d0607
SHA512 cda02c2c45b379882484daf06ac1e7554e588889e96fd0ff492fbbaeb3c649ca4633ec7d88452c36de65922b57de8e3e03f5ab5c73991fffd7324baace824c83
SSDEEP 768:arv+4UNbdl3TPkKL2+jF669yrqUjWiIwwxMRiUiler:absbX3o2jF66INWZTM0UsQ
TLSH
T1B503CE35AC589AB3CDF2D28672437783BFB4109396C40B98CACD670D469B4DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d43842f5-d417-40da-8008-0768dba2551d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d43842f5-d417-40da-8008-0768dba2551d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download