0f02762b1e5f226d60defa1d0b447aa9e928037e093abc03ec4bf7ed10713c43

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Quicken.html
Size 20KB
Sample260730-1blb2szzct
SHA256 0f02762b1e5f226d60defa1d0b447aa9e928037e093abc03ec4bf7ed10713c43
MD5 db3a160d5f174a2b9265cdfddb0d7d37
SHA1 1a212d1328945c0374dc60bf65cb44bd181ab771
SHA512 11d6bf3c28ee4fd16c4c58b8dc1cd452679ebc3eb9f8066ed0c612b6f9ea7cfe1cdbb0cc6bdcb972047cb1bce4b069dbaf4a6e8e8a5cf2b3a36f2c3b8acdec6c
SSDEEP 384:vv/LWa0R7DMlT4Fqik0Fpbh/xQ6kezRW2BvjaepBQan1PEIXgNUlJibqYwFLmnN2:zIXEM010Ph/xQ6kezRWYvjrBPP9IziaU
TLSH
T17C92AFBB5683226E3DC761A557EB73042A70E943D656CAB03ECC97484F425C8A1D36BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4172	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299205212832801"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{E2173EDB-51EC-4241-91E8-606074EB8C35}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe
3204	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3204 wrote to memory of 4888	3204	msedge.exe	88
PID 3204 wrote to memory of 1620	3204	msedge.exe	90
PID 3204 wrote to memory of 4172	3204	msedge.exe	91
PID 3204 wrote to memory of 1620	3204	msedge.exe	90
PID 3204 wrote to memory of 1620	3204	msedge.exe	90
PID 3204 wrote to memory of 1936	3204	msedge.exe	92
PID 3204 wrote to memory of 1936	3204	msedge.exe	92
PID 3204 wrote to memory of 3164	3204	msedge.exe	94
PID 3204 wrote to memory of 3164	3204	msedge.exe	94
PID 3204 wrote to memory of 3164	3204	msedge.exe	94
PID 3204 wrote to memory of 3100	3204	msedge.exe	95
PID 3204 wrote to memory of 3100	3204	msedge.exe	95
PID 3204 wrote to memory of 3100	3204	msedge.exe	95
PID 3204 wrote to memory of 2816	3204	msedge.exe	96
PID 3204 wrote to memory of 2816	3204	msedge.exe	96
PID 3204 wrote to memory of 2816	3204	msedge.exe	96
PID 3204 wrote to memory of 1732	3204	msedge.exe	97
PID 3204 wrote to memory of 1732	3204	msedge.exe	97
PID 3204 wrote to memory of 1732	3204	msedge.exe	97
PID 3204 wrote to memory of 4308	3204	msedge.exe	100
PID 3204 wrote to memory of 6060	3204	msedge.exe	99
PID 3204 wrote to memory of 4308	3204	msedge.exe	100
PID 3204 wrote to memory of 6060	3204	msedge.exe	99
PID 3204 wrote to memory of 1720	3204	msedge.exe	102
PID 3204 wrote to memory of 4116	3204	msedge.exe	106
PID 3204 wrote to memory of 5888	3204	msedge.exe	107
PID 3204 wrote to memory of 2624	3204	msedge.exe	108
PID 3204 wrote to memory of 1660	3204	msedge.exe	109
PID 3204 wrote to memory of 1660	3204	msedge.exe	109
PID 3204 wrote to memory of 1660	3204	msedge.exe	109
PID 3204 wrote to memory of 720	3204	msedge.exe	110
PID 3204 wrote to memory of 720	3204	msedge.exe	110
PID 3204 wrote to memory of 1328	3204	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Quicken.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffec25dc188,0x7ffec25dc194,0x7ffec25dc1a0
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,9535094314794767917,10656374495022591213,262144 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,17635559413528228501,7595171408987292326,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,832935225246100374,10804611414511323120,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:13
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,11716889695345051926,11463639395693707063,2097152 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,2433691793275613983,16215810613351444472,2097152 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,12032268453378510603,14317470071919103105,2097152 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,5230035166693855317,9816335745028469114,2097152 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,7741627366058546227,2811781513056016306,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,1499586074652025823,9946789836169289986,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,1152195750197817572,10604510573553968659,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,1152195750197817572,10604510573553968659,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,18040525378561712930,7157138031765535152,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,16802830038910016289,7068386320857585285,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,2729219001965917924,10354893794543771911,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3204,i,5680731854579769534,13137997566049003310,2097152 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,17652750259405132543,16511462424020390912,524288 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:14
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6432,i,15463191990148755252,11445325982966471606,262144 --field-trial-handle=2564,i,4429075819442546570,10851997405154273945,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d3671012a29f65511f7dd0196232fcbe2023466fcc41749b3fd64e7af24aa4b1
MD5 36e2efacee81f2ff3dac9d502c5619be
SHA1 e98bfa0af6d42f37c98c253318e20b33bec1d64f
SHA512 2c1a069cd5a650265d720d6bd9087e97c414bf06fdcc76bb9d8c95dc498df2795ef6dfdd3c8e111ea7322c4c687e8731077da615e24e119bc7be6e1b812c9369
TLSH
T12C61FF5593611EF2CBE94AB3F2F05C5833E88446668B2A0DC05EAFF51406F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5978ff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5978ff.TMP
Size 3KB
SHA256 93dca01b33610a4413cc40f71968264b2f18ca36608ca8225b236fcedbcfc584
MD5 106589acb168843d506c16b5fb9198eb
SHA1 823becb19d0e01969a577f89cf5314a97a43b654
SHA512 44cb67d3cb163ace185b010160da55f2a96bf6bd4d6bb5ad8b8375abab361b38bd1ab0d3c1443c90d5e6349f03f30b155d72a6c4fd06284801831c431487d11e
TLSH
T1E261FD5493611EF2CBE94AB3F2B06C9833E8C446668B2A0DC05EAFF51406F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d89a8789d88fe1eacecdd80cff2d5f7bf7506d2917d6963b243bb3a45bdb5cae
MD5 6b6d3df23ac75bdd2c2ad035f45f55e6
SHA1 8ee99cdc49c061c2c316dcc1833f61add8667c11
SHA512 2592dd21f077ae6716078198402c1533b50e6d3125e0e6ecad27e09e79ea0ac35689fa34cf2f5fcbb6a6a4a3c7ae7a9a84c43ee0187b2a9657935f250d6fffea
TLSH
T10051AFF7C3E4966DC91246F0A7147E1BCE2D0914831C3D5AC8E5AF1BA3E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 04d5a17cd4b21938d29eee3c67cd4fad3863ea4566abb90f8a90ac0038665f21
MD5 1b956bf09e2feeb471abe33df09efe7a
SHA1 8865888c1a83bc4e68e0c9f6e135a79a906c5d4b
SHA512 9689a8f407fddae777fec9e12a93b4ce2650bc87cc081095d1550ed0a7df16371eeeff9455441e4a3033804a629b311d52222650bc23172904b6230742d57e0f
SSDEEP 192:sxRrRTyM/jK1Ml8wbL/fXs3VbaprQ5PzoA8p4P/g6+WNIYn83huGqIgDwJ:sxRrllL/fXs3VbaPK/5ITRkA
TLSH
T12B52D915AA345D7BCCDBD20DFA51BF93D6F85573A2901E44AAFC8A0C04E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3a4633abc5b4b01535d8933d895281f1d4e9e7b3b266241ac94b532f5b11cbe8
MD5 980b307f27d85b6eace5cce2496f7901
SHA1 33f262c54a013ddf2ccd2ae31260f13e371b8987
SHA512 ee36ad17bdccba9135cbfa97c6dc145a466f40120b62e4ef34592095bd60632ecf392a2b06d1ba03da3f4c0ab75d8e7288ed0314ea3a2cdc7228c4984c22f6ae
SSDEEP 192:sxRQRTyM/jK1Ml8wbL/fXsSVbaprQ5PzoA8p4P/g6+WNIYn83huGqIgIJ:sxRQllL/fXsSVbaPK/5ITRks
TLSH
T12B52D915A6345D7BCCDBD20DFA51BF93D6F81533A2901E44AAFC8A0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 41947471d1443b020d0043ac6820f82b4ae1a4adf02cc957ebe176d39133faee
MD5 74f0b42896b54ccf2210403b209ac8c1
SHA1 e122523030939bd7d558e8ee71b61513e32d692d
SHA512 63f6945ae2e28f725a3f6fb68f6b64edbd48582e606ee6965b39e9b6c3f1451b1260d290c9adef4ec962a6ec5e93175ba66ca08221c886f99f5dfafa3a1463e9
SSDEEP 192:sxRrRTyM/jK1Ml8UQFbL/fXs3VBaprQ5PzoA8peZp/g6+WNIYn8ihuGqIgDSJ:sxRrlq9L/fXs3VBaPi/5ITgkK
TLSH
T14F62C716A6245D7B8CDBD20DFA51BF93D6F85473A2901E44AAFCCA0C04E6ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 061fbb089f0ae6dd35bfbee9496a1a571fff93aa4f5580d4b1deb14dc75e75a1
MD5 8a8b856ccaef2982ddede5023c5d646e
SHA1 21a88d10b4e9f4933ba70a81484bf9f6d1bd0e41
SHA512 d061d373e5b4c52f4b4928c09e3f229d4f34990ccf4a91660ed658fcd7ad0f0655edf9e3fd3f2140d00cc4fa99518b6e1cf45aff01c744bf5ce0014d5069b24f
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YIroSh885O:wGedp6WgoufDMu1jatVYzew
TLSH
T17EC20C2B640CC77E4F844EADEC29EEDB6DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 42bfbbf49fdaaa372e3401359705d38a3c3967260aefae92293848137c8a88a5
MD5 6e7e39a24dd72e32a9b5753171d2a639
SHA1 d2910b8b76ac5496387d8603122e214d28b99aeb
SHA512 79beebd6dcbc7a08898f6b9850bf75800f8d731b81273db36a07dbf3d45ff6014f6dfe7ac5b59de55f8aeee6ae1922c6c44789ccba8f9b9e80d5e37ec8417a32
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHklQUuSW0Wyf/gc0K4xgW0cUUfODX+KgIw:CeTieYgQxAl+eODgc1W+9M+XHklQUuS4
TLSH
T1C3916111313A479039BE794C94A69C1FD6C674A23358F42B3BAA05E20F67E424DFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d5a96591c8332592dd4a60326e2808476db548400f4d04fa010d107c20648948
MD5 97de5c26f7e1c1db4e0f24b07444804f
SHA1 6a63e85dbcac1ade9c5c0150cc00c3f9a28647cb
SHA512 caafe73b28c06d2606c8535fc2d73322ef3b9960bf1fd2a5f74718ace380fb86253d46a7c24d5756beee33c2f17c7af388800d06730943b1da674d4953c285ad
SSDEEP 768:8rv+4UNbd83MNIKDZIO0CEl8s2Nzc4ReyIsPc/b:8bsbi3MNNi2tc44bsk/b
TLSH
T12903BE36F8389977ACF69A86B40775537EF4511B82C82A94D5EE2F4C4A8B5DC030B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bc140a3d10296852bc58ff20f2cbef7b71e8e998458418f824ff113ce9d48a56
MD5 d515d92d0a4b17e6cc4c0084c762d9b8
SHA1 145e13cea71001df008cff6d6e0381f8d2bd8161
SHA512 d2aaf4525fda2873ba1041e1af55b77dba67ea427928cb41d089aa891fe238493b8c975e91df0b8b8912bb2d5df4f3c9c01f10ef94f7be4effdc428001cd637a
SSDEEP 768:YH3MxqKDZIO0CEl8sINzc4ReyIsPcb9M7:YH3MxviItc44bskb+7
TLSH
T1E6F2BF36EC248967ECFA9657B54636527DF1922BC3DC2E84A5ED9F0C0A4B59C031B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9d968e43fa2519559b3cc60aee6c7c20cacb0b57bda72cca9e87b70b5e0a428c
MD5 855c802ef5724c8ded6f60d29ca59fcc
SHA1 7f337b1e17b6f48efb6ed9030365cc3cb08bfc1c
SHA512 4a7744fa0f258d07e05a5cae687543e84c6c91ef607937eaea6d8d5aec097422f07c6955807aabed34a89529dfaa2d081bd5e8ccb81e3d0fff36218890f3b2c9
SSDEEP 768:+H39xqKDZIO0CEl8sINzc4ReyIsPcb9M7:+H39xviItc44bskb+7
TLSH
T174F2BF36EC248D67ECFA9A57B54636527DF1922BC3DC2E84A5ED9F0C0A4B59C031B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 2a799856efb7c6f265d4537588eb0f75e36a6b4a19fc39d44a8838430cec4253
MD5 7633ca017fa70d145c0e3072ddd97794
SHA1 f7ae1c15d2eaae23bc31fbae11da6a469a9c125c
SHA512 0ce45cb4ffbe0af8c05dc9e2d601273d6c09296a7e0ca4f97abaddfbd8fbc283650f8682d0c5a38c8ef82c06fad73bef59861077c4030be5d5a11c095f2fc353
SSDEEP 768:nS39xiKDZIO0CEl8s0Nzc4ReyIsPcb9M7:nS39xXi0tc44bskb+7
TLSH
T13D1348F5A8E38972ECAD9743A77E2D126DFCD117B2881984B3D95A0CCD465BFC30A412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 59820ee15813643d3a76267f6888a5614700555a4d948f01bf976538c11e4d53
MD5 58436ad223292e6907cb281713fcd458
SHA1 11a649e67cb7c298c1d6cf0f2c793a47e3fe8dfe
SHA512 47a99b5adbe0cf866f259418fc6c7fbb71656fbc5070c570bfa3bcb8eb7491a75099543b68da1951aa6b409bb055aa34195e4e3873f46366323acaccdb6e1747
SSDEEP 768:6rv+4UNbds3RyiDZIO0CEl8dNzc4ReyIsXFeVH1S5D:6bsbS3RvDtc44bsVEH1Y
TLSH
T18903CF36E8688977ACF65686B44B75133EF8612782C81E94C5DE2F0C4A4B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb3e680b-fdae-4dce-8b80-a7e762ad2ef7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bb3e680b-fdae-4dce-8b80-a7e762ad2ef7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download