94f3536b82cc790e3f29d0546a8aedf780565d9fcebff11d5ae041bd5ba90fdc

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
94f3536b82cc790e3f29d0546a8aedf780565d9fcebff11d5ae041bd5ba90fdc.html
Size 82KB
Sample260804-gqd2qsxte1
SHA256 94f3536b82cc790e3f29d0546a8aedf780565d9fcebff11d5ae041bd5ba90fdc
MD5 fe2e5c9871fdbe00a91b17126ac291a5
SHA1 136d3d6ac36cbc95852853f469d7d63042870e32
SHA512 68daeb161f779fb06bfac04ee7102a71238ed9cc8b5c272376f0e292f7d905e31c44fb5e74c06ab32b1001a06511499c9f2bbabb7b9e7d959868e9f774a8896e
SSDEEP 1536:QNLZowql0q47N/MFIvXuRO79Jz7ZZmLeb7cWV7qQOO3n1+:DofvXuRO7B7VVi
TLSH
T16C8319BAB5A174734E13F560803F900FB93B647BE80C0AA8E194DCE16DF69864467F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4300	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302968274123718"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{310BFEB3-D402-4AE6-A5F1-A3DE10E43122}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5248 wrote to memory of 764	5248	msedge.exe	89
PID 5248 wrote to memory of 4252	5248	msedge.exe	90
PID 5248 wrote to memory of 4300	5248	msedge.exe	91
PID 5248 wrote to memory of 4252	5248	msedge.exe	90
PID 5248 wrote to memory of 4252	5248	msedge.exe	90
PID 5248 wrote to memory of 4372	5248	msedge.exe	92
PID 5248 wrote to memory of 4372	5248	msedge.exe	92
PID 5248 wrote to memory of 5656	5248	msedge.exe	93
PID 5248 wrote to memory of 5656	5248	msedge.exe	93
PID 5248 wrote to memory of 5656	5248	msedge.exe	93
PID 5248 wrote to memory of 4752	5248	msedge.exe	94
PID 5248 wrote to memory of 4752	5248	msedge.exe	94
PID 5248 wrote to memory of 4752	5248	msedge.exe	94
PID 5248 wrote to memory of 1272	5248	msedge.exe	96
PID 5248 wrote to memory of 1272	5248	msedge.exe	96
PID 5248 wrote to memory of 1272	5248	msedge.exe	96
PID 5248 wrote to memory of 5164	5248	msedge.exe	97
PID 5248 wrote to memory of 5164	5248	msedge.exe	97
PID 5248 wrote to memory of 5164	5248	msedge.exe	97
PID 5248 wrote to memory of 1296	5248	msedge.exe	99
PID 5248 wrote to memory of 1544	5248	msedge.exe	100
PID 5248 wrote to memory of 1296	5248	msedge.exe	99
PID 5248 wrote to memory of 1544	5248	msedge.exe	100
PID 5248 wrote to memory of 2636	5248	msedge.exe	102
PID 5248 wrote to memory of 4072	5248	msedge.exe	106
PID 5248 wrote to memory of 4568	5248	msedge.exe	107
PID 5248 wrote to memory of 4236	5248	msedge.exe	108
PID 5248 wrote to memory of 1340	5248	msedge.exe	109
PID 5248 wrote to memory of 1340	5248	msedge.exe	109
PID 5248 wrote to memory of 4912	5248	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\94f3536b82cc790e3f29d0546a8aedf780565d9fcebff11d5ae041bd5ba90fdc.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffe4fa6c188,0x7ffe4fa6c194,0x7ffe4fa6c1a0
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,13990359255634490228,7705588853034211704,262144 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:2
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,11055152934539335407,8905278618878073273,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,8968813012084226606,11064071204515082798,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:13
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,16180363216484801289,5080012184193021099,2097152 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,8137144197550632255,4676950089160130588,2097152 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,9474609073013682305,9959857425297991511,2097152 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,16402333970587842097,5005530818515211284,2097152 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:9
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,667092993243086483,3479629052536053805,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,4282993642574347892,17696380412470940140,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,8907255308655142758,258414536311518696,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,8907255308655142758,258414536311518696,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,16203077451440887449,795079361528682770,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,4016481790137584497,14586969166919574616,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,14181675991867643138,1644102363099645324,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,13042864743344500080,1006777685771649112,524288 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,8800699904465634818,17618297943651948299,262144 --field-trial-handle=2520,i,4457498456788418316,3104273087335094161,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f36607b2da323143a5d9ca80c59005be8e6502c197f963d38de8cdb7d9872972
MD5 c9be4cc5dd46b3ced85a107b05dcea6f
SHA1 afd48f37ff2f4920e8b1c6014c23031c8ef881d7
SHA512 d119398b64769e6f71470f44feb81c525f44762f7962f72958286ef0208236e6b28d799a0469e1cdd2bd8d81244f09f35ac876ca4466ec6d97080f3df2266764
TLSH
T17F512A588BA65BD3F3A048F1D5EA80ADBBF0E4E900076B1A53E13DF8490AF5920D21D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597342.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597342.TMP
Size 2KB
SHA256 1d1cfd5bc24238469668c706b35cd9d6d8b862cd85f87c7dd303405828b22c31
MD5 5cf8dd48140152a00d760f31e4d5a272
SHA1 d9b36e7d62e216ec497118693dfb1b9f59a2caf3
SHA512 4cbcad19cc6d94686b4f0c7efa472f18974fd3c336375ad77120ae3acab44add65e945adbb56233c4feaaad85ed78d99a3db14bea893b7cc846004e97351da25
TLSH
T129512C588BA65BD3F36058F1D5EA80ADBBF0E0E900076F1A53E13DF8490AF1920D21D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c76dd8b7dc6217ba6119063000f324c9d327f523494cd0e4584695a932e7b9ec
MD5 fa294f18c6161155dbb1e936502e2fb0
SHA1 9af07c27df84cdeb831d2d7bdf863ccb95486e16
SHA512 e5d838af0f4d23a23610650df72bd5d347ed28eb035d69c8b3f70d9da33b7c7c496dcf74eb171e1dc6ac3d7e104729654915e90d4674b79282291d0cd8347902
TLSH
T1C3519BF7C7E8867E890156F4AB246E1ECE2D0919432C3D56C8E4EE1BA3E24B1D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b69be1cc1c39c85ea8101f402601727a1eab768c67f7188303966df48eeac383
MD5 c0d047378f534f841ec96a809fec3b4a
SHA1 5028b489c7b65a774a7974778cbf7d3f8844041c
SHA512 9cbcc09c03f796589324dcca32851da1a185a2f8d8c6501d346791304bc2e4b86546adc3f0d4f6ce0dc1aae0abfb76e3f2c65a31fb571b0190a6e6429bc5de43
SSDEEP 192:sxR5Jd9RYBboF/f9Fso4GHm2Sm7aWOvczoD8p45K/g6+WNIY3BLy+G1RBIgDPvJ:sxRfEG/fDshG2Y1/5IAC9
TLSH
T16932D8166E68A93B8CCBD21DFB65BF53D6F95032A1D02E18B7FC860C04EA6DD520750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c3962a5a158338af2891794eff040e50fb7dc27bce7545fbb4f2c16fc2e8fec9
MD5 975b5189c505a3b7c79cfe11d470275f
SHA1 2f7f6f810982a73cdbcbc8402770f5fe4643211f
SHA512 1a67ba4876d763e928e35a5dabc44928a802bd46341bc26aa16a0cfff8a84a61976e159f87692f6f28431ae9ca3cedfa96199495ccfaf1919124d76fdcb4765f
SSDEEP 192:sxR5md9RYBboF/f9Fs+GHm2Sm7aWOvczoD8p45K/g6+WNIY3BLy+G1RBIgIJ:sxRQEG/fDs+G2Y1/5IACs
TLSH
T12332C7166A68A93B8CCBD21DFB257F53D6F95032A1D02E18B7FC860C04EA6DD520790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 adaa5b944f2670d300ce592d17bef0909ee37ae52b6b00c8b34c974ebf2ba82f
MD5 7bb0fe8c9042bf3b770f17ca7412876a
SHA1 a3e9b51e6f6baa0968ca3ef8b10a5e27ca664738
SHA512 22c8d189e1ba78ec8d22cc0577a27831b5923b28dedf4e730f1365b3a2e976be653834f29a2308fe5c148632e6528eefe03694c4f14e79afc7e95a202ae09ca9
SSDEEP 192:sxR5Jd9RYBboF/f9Fso4b+Hm2Sm7aWOvczoD8p45K/g6+WNIY3ny+G1RBIgDPRJ:sxRfEG/fDshS2Y1/5IfH
TLSH
T15B42E8166A68A93B8CCBE21DFB657F53D6F9503261D11E18B7FC8A0C04EA6DD520350B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7d17980f9788c8b5557d76990369b537fcc434c2885e2881d622675cafdabdaf
MD5 865264aa527cbd02af5c0a2e9d22628d
SHA1 f3d492a604550ba30807b8f2f11919218c1b0edc
SHA512 5b39005886e49e50a0573fa8fc06139afe9573d9af16e6a11d97ce52350a2f7db36b15edabe9adaaaa7f4bea6fe6ae553bb5c880ea0adc8cd3403deabd0a7775
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTkroOLs:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0Vc
TLSH
T1B7B2DA3B600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1f3d6b3fcc87d451b1250f71943b61547cf37b9ad35c52c75d7eaf3c17729bc5
MD5 0057595df22af6992a6d8773efde62e9
SHA1 498f1fa27fafe81e7dc954704955c5a4bfa68db0
SHA512 734bf5e4e2b99e33cf20749abf2a7769d9fca4ccdb040460909be938acf7f71d2d43470684b836d79e161cbbd9c191c08c4c77dad0a8439053f596b899b9b99d
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHEFw0Oy2UWS/fg8UK4Rg2Uc00/uUJqqIKJ:C1i7PF/DWrwfX9mgpct1o7zsHEFw0OyY
TLSH
T1E7918212717F02403C7F691C85A8D95B9283B4A73418A82B77E815A29FA7E435DFECCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a7c893e7-c42e-4481-9d88-b0b6726ab687.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a7c893e7-c42e-4481-9d88-b0b6726ab687.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 caf9c83372b7fcfeb9060fe71e04f1631cdc2eaad18268f106fb1321e0ea0e00
MD5 f29f602c4e533fd8890155f56becc462
SHA1 6d151b8545271b3e4a05cca91c3e681f05fb191f
SHA512 a03a43f07d884a2f05b024361b1d13ac78a414c382acd05e56e48f01b77e3c0ae5d6303211235ac57ba43ee5ed6db2fc44c00205275ca66b0c069e0a679a0884
SSDEEP 384:rZcIM38N1qg7FeahucHGfd+UJfRXOVyS52f1m66Wf1O66Nq9vShCiDBTayppFJl2:zM3e7Bc+wfZO8f466WfY66GvShCQRIYc
TLSH
T138E2BFB1ECB059338DE693487A4A3B53FEE59233D5C89A48D9DD5B0C01C379E2B0B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 844bc8ece38c868c71abf0a8095ee0156aace697564b06f7e3fda7c971179206
MD5 eac6d0ade6b85498bb0ef14aca77c706
SHA1 a506a4ecb4895b250f478eb9c3e22bf95f370326
SHA512 e84d641c1a11846438bd9ae86d6b5e5a46fc70f97775ca6d9fb374cd0110468100f35f37af6b1c4f47fa79a08c4337ee1c160bed8f7d7d4277734fdcc6e2e165
SSDEEP 768:Rrv+4UNbd43t6kc+wfZO8f466xvShCQt12bwWV:RbsbO3tPwfXfr6xvSZ0wO
TLSH
T12D03D072E86899339EE78248764ABB53BEB85273C8C54784D6CD4B0D018369F370BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6e895f5e707f9fd0102a8fbf458149f46c753f6df542253884c55c2e00300036
MD5 cdeae61819531a6ceb060d8388da7e25
SHA1 bd571a0e320a98666c61300d2e192af9c17bc052
SHA512 e6fdb94adebb5211cc1e380a575bf80b017d9b172c3e5d101f527916942ccedcfbcec7993f53ae17594cd01da7b2a91684e738f833571dfc129a7ae5290fa0ea
SSDEEP 768:Yrv+4UNbdz35wBc+wfZO8f466WfY66GvShCQRIYm:YbsbJ3WwfXfr6WfL6GvSsYm
TLSH
T15803CF71EC789A339DE28248B64A7B53BFE95163C5C84A54DADD4B0C01C76DE3B1F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c27fb7eb3318b3bdebf216e13aadd835c13d6b94c9cb65f5530b9d4889b07b51
MD5 62231516fc263a1542dd3fd5fccdea0f
SHA1 53b8e6baaf49dc3d9a57af1564c96cf505fdf734
SHA512 0b309b91cc5f0d844221dc03f198fa25aef07b92aa4d1e9eaadb8e0aeecf39633319b24e21d1344bf729d1feaed18b778e123587bf392432c300e68f6c2507a0
SSDEEP 768:+FQU3Ywgj7Bc+wfZO8f466WfY66XvShCQRIYc:VU3QwfXfr6WfL6XvSsYc
TLSH
T128F2BFB2DCA499379DE68788BB493712FEF55173C8C89698E7DD5A0C00832DE274BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c0f0e5b-b18f-49cc-84bd-35e674dfa1a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6c0f0e5b-b18f-49cc-84bd-35e674dfa1a8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download