53cac693f8a2c0df066dfd24514fad46777ab2951c1cf395adffd0468a1efdcc

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
53cac693f8a2c0df066dfd24514fad46777ab2951c1cf395adffd0468a1efdcc.html
Size 81KB
Sample260809-gqjbfssakc
SHA256 53cac693f8a2c0df066dfd24514fad46777ab2951c1cf395adffd0468a1efdcc
MD5 b5c581b61cfed0df9595ee3c7ade24ce
SHA1 f1d07f7669b02686cb99c45706abe18680b304d2
SHA512 478f26d795cebe19b84d6e1931cb65b91962b00a8c7d8e64d78a31cf911d3b9837fc9ef3b3c23951643c8ba5d1037045175773eeeceeabbcd1b5412c0ed1b42c
SSDEEP 1536:DaC5oq+OrQf4OktqnkkbWpHXZ/KyNGm9BQOE2Jtn:sOYbLWwmZ
TLSH
T18B83F9B9F5A170725E23F970402F500FB97B646BE40C0AACF154DCF0AEF658A8566F29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2056	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307288341956693"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{6370F1CD-8E57-48E0-B91C-FB07E80BE36F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3264	msedge.exe
3264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 3708	4888	msedge.exe	89
PID 4888 wrote to memory of 2796	4888	msedge.exe	90
PID 4888 wrote to memory of 2056	4888	msedge.exe	91
PID 4888 wrote to memory of 2796	4888	msedge.exe	90
PID 4888 wrote to memory of 2796	4888	msedge.exe	90
PID 4888 wrote to memory of 1204	4888	msedge.exe	92
PID 4888 wrote to memory of 1204	4888	msedge.exe	92
PID 4888 wrote to memory of 4344	4888	msedge.exe	94
PID 4888 wrote to memory of 4344	4888	msedge.exe	94
PID 4888 wrote to memory of 4344	4888	msedge.exe	94
PID 4888 wrote to memory of 3888	4888	msedge.exe	95
PID 4888 wrote to memory of 3888	4888	msedge.exe	95
PID 4888 wrote to memory of 3888	4888	msedge.exe	95
PID 4888 wrote to memory of 1084	4888	msedge.exe	96
PID 4888 wrote to memory of 2424	4888	msedge.exe	97
PID 4888 wrote to memory of 1084	4888	msedge.exe	96
PID 4888 wrote to memory of 1084	4888	msedge.exe	96
PID 4888 wrote to memory of 2424	4888	msedge.exe	97
PID 4888 wrote to memory of 2424	4888	msedge.exe	97
PID 4888 wrote to memory of 4268	4888	msedge.exe	99
PID 4888 wrote to memory of 4268	4888	msedge.exe	99
PID 4888 wrote to memory of 2692	4888	msedge.exe	100
PID 4888 wrote to memory of 2692	4888	msedge.exe	100
PID 4888 wrote to memory of 4676	4888	msedge.exe	102
PID 4888 wrote to memory of 2304	4888	msedge.exe	106
PID 4888 wrote to memory of 2976	4888	msedge.exe	107
PID 4888 wrote to memory of 2024	4888	msedge.exe	108
PID 4888 wrote to memory of 5836	4888	msedge.exe	109
PID 4888 wrote to memory of 5836	4888	msedge.exe	109
PID 4888 wrote to memory of 3264	4888	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\53cac693f8a2c0df066dfd24514fad46777ab2951c1cf395adffd0468a1efdcc.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x328,0x7ffc97c0c188,0x7ffc97c0c194,0x7ffc97c0c1a0
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,5459477474830255209,11480479304048759862,262144 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:2
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14722334282789308593,10788804469604955867,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,4640109978918961662,10292196832592033549,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,2707207642091769949,9002342342200826058,2097152 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,16053800940077961831,16143981641480735960,2097152 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,2730695137710536856,16641380323803999393,2097152 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,12739321402887741371,3786476408512147624,2097152 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:9
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,990013337630219163,2252792342360121741,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,8803437590492291072,4566837143009294148,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,242394751406329191,6534354947629930004,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,242394751406329191,6534354947629930004,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,5127988916410972799,13103953425356334420,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,15833838825658604007,2100869325129741752,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,10934246209916730019,300627668505066593,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,10207103680535627787,11265611349811120707,524288 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6428,i,677661146530906126,13960243683834465377,262144 --field-trial-handle=2892,i,12179305206707053066,13194897112242465760,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 90811866d02bbe34ad4e7b70b6fce9a3d6e27a83b4a833791296cafd75cf24b9
MD5 396222088c26ef43b0c2c77587dd26f6
SHA1 94c24f7129ed6891cf9f083d11aae5fb039c7a23
SHA512 25d85e3f20b19726758bebf905c77c31d93822d994e2f7c9e869ad2d79e69d917895509b1d3005a9bb7c937afe954321aaf5ecb65b3817c722da7c9030dcbb01
TLSH
T1C6611BA55325D9C1CB24797353E9A89832F884FA03271E36F981AD7614C6F68FCC7227
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

775adb1a-4197-4d1e-85fb-4b935787fe55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\775adb1a-4197-4d1e-85fb-4b935787fe55.tmp
Size 2KB
SHA256 4e2e56ff2d05389a685903d95810ab4ea6e2b2da0ad0957d740b6828cb73dcad
MD5 b6edc11bc03eedcd2415cb861d280ecd
SHA1 3712a2c6619c2e6de5edf2f26cfc4f926e65e44a
SHA512 ff060fb6b0c7a21868ec5cf1f63ead5c5ad4833ed3ba1ceff485104cac116cadcd445107441d3ad7475f513b030af35d1746b5e869e94ba4f792ae88fd48986f
TLSH
T17841C0F783E4867EC91196F0AA146E2FCE2C0515432C7C5689E4AE2B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4851397fbe2a2adcdc05497bf080b340cbc91a8dd9db940a9d97903a6808d7cf
MD5 dd717481a3d791b6c8e71f8e3bbd2ba2
SHA1 5e36a09c3004205b8063603953bd65d7b9e05c2f
SHA512 3e2ea481f030fa229c697ce630b49d6f837de81df5d22303618a8135372a70eaf5354284e4c1ea9985667e4406a92625b9a95649846a5fcf526b8f1f59a0918d
SSDEEP 192:sxRbRVbm/f7sbf8bN+C1zoA8p4vS/g6+WNIYlzZbJR+GkIgIJ:sxRbzm/f7sbf8+JWS/5IyRes
TLSH
T1F732C6166A28A93B4CC7E21DFB15BF93D2F9503261941E58B7FC9A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6253726f3f315a8701f7733923bc9336aff348d3f71c7647be0c8adbcefee3a9
MD5 8915ae7cb6389db5024de262e99def54
SHA1 df299b25454ce5553478b7c3b6b55e9ad50a9ca9
SHA512 f8bcbcfa4c02fcc64b2dbc94d2bfd0e00e8a0c21de2270ce899404c5ce61efd53e954d84c881dde40f42fe2ae2186aa88cb5fef70d79be3aef4e8633fbfb1ca6
SSDEEP 192:sxR4RVbm/f7st88bN+C1zoA8p4vS/g6+WNIYlKZNJR+GkIgDrJ:sxR4zm/f7st88+JWS/5ITRe5
TLSH
T1C642C6166A28A93B8CC7E20DFB557F53D2F9503261941E58B7FC9A1C04E77DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f92d8ab3c4c63c3ec3892d79a84ea72c3f21deb580de340f0f7918c4fcd865a1
MD5 bbc0dc474244aa99c9c09a194f6eee21
SHA1 83772b0f05bc135829c3bbe9ca1028aa291d86c7
SHA512 be8ec5c1cb04945df99624c5b31b9adb137a287e48bc1f113954d98d1a7b1d51dbf791f74717366d6539a22f48f371577640c034b0ee4b2a2fd2a93ec1de3889
SSDEEP 192:sxR4RVbm/f7stf8bN+C1zoA8p4vS/g6+WNIYlzZbJR+GkIgDlJ:sxR4zm/f7stf8+JWS/5IyReL
TLSH
T18F42C6166A28A93B4CC7E21DFB55BF93D2F9503261941E58B7FC9A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5ec0678e19e6a67a38ecb7e24247e85652eb8374d9e95a2ef9c06dc735dbce29
MD5 20020ebfc38292a3f87302874e0d289f
SHA1 a2c3a3707bc699b097173e53512c013571c0b0f1
SHA512 2d6b84419440234afcfd2286259295c2339695fb3a6e4e32c200f3741248b69283df785349f038632242ec1e9cdcc60349841eee6cd66774dd3c624e06ba73fa
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRRgroKM0:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0VR
TLSH
T1F4B2D93B600DCB7E8FC04A9DEC19AF977D9802C796949D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b0f5eef6fb21108cd4e56cf339b939acb501d91f51d2b00dfb2b5dc25d815513
MD5 e287959954bded2baa34c988f1697705
SHA1 20780c7c79fa85d381f37f9a773be1f09d4a2c30
SHA512 0df8807d1e45afe566f6447f9b77d80196f0cffada81bf17ec393f290470ad054b827a4a03407d48afb83a2e4e03035645c1fe2a47962d5eadd07b8a96bf96ed
SSDEEP 96:KRpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHc9oMmqesWa33gUsK45gesc8M32faYK52G:Cpm3zBj3CH0j7JKg1A5xMv3wHc9oMmqY
TLSH
T15F910250767B03503C7EA90C90A9E96FC2C2B8623054E92F77AA41664FE7E425DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3181.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3181.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5d785d454a1dc3d5d5e1421ac4801b380b64dfe3866f3f62d4e06c8f48380927
MD5 631b4171db8b719565affc774afaa745
SHA1 3641aeee3a9f44217f978ba755c7bbaa9fb3ad3b
SHA512 df6230738e24ead88f3b9863c6ed242e3f45afbefcf57a173abd6c8ca7c19f31986c9f57d8d99d9c6e5d79e9a4b83cc3f374c6a589658d78faeaaaef2aa0a115
SSDEEP 768:7rv+4UNbd03QBSwmiJVDqNHXmTWTbc+HFZN2ewBKZO3zF:7bsbe3Q+uWeWn1lv2evZGzF
TLSH
T13613CF70DC6DAE339DE29698B10B76037EE801B394C81A58DEDD6B4D018759D230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f745b57d607dfbf1ec1054c099fe4480bc0b742f9db2fdf440306b91ef1f2532
MD5 5712a4bf1da21e072dd10e4f65747892
SHA1 0c30c78aff58b8fe90aa63c73428a277bf8426d6
SHA512 e0e376a3c9b42accede7bf1dcea00d73097c3781228d1d623d42235eee27ecbe0f502807672ed9317d0d3fe06f86d6cc2e8fdd5e1ef4f2f9d0de9d8bff43a9ce
SSDEEP 768:x735BSPmiJVDqNHXmTWTbc+HFZN2ewBKZO3N:x735FuWeWn1lv2evZGN
TLSH
T1C9F2C0B0DC799E339DE6D688E50A7712ADE801B3D4D82A58D9DDBB0D108365D131BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ca7ac26e13a9164757dc8afad326e9cc4b33e47a7ab90e9d2b95ee5f1bd223ac
MD5 a36005d5e50821404e458902fb8b3d8c
SHA1 6a5d2099c6fefd7e55631823a536f73c4bd4f617
SHA512 6b2ed0a6c26f05a6229c62d11440e773eea946b5a49d5bcb545a913c4199ee41cdea50da4ee1a3d14f39f42fed73e5e354c202f6afcf9d8a1d4bfb6507cb9770
SSDEEP 768:arv+4UNbdM3233iJNNHXmTWTbc+/FneVH1SvyZ:absb+38UeWn1tnEH1dZ
TLSH
T1B003BF319CB99E37ADF69688718BBA573EF8116385C40B84C9D96B4E028758D031BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 22fefec22c742fdde9653f8d80bf7f83fd79e0959bf2db21cd8364f83a6d156b
MD5 cd452ba5234d0d93a5df476c575015f9
SHA1 4e029979db6b3c35e3fe9261fa24d67a50d5c5b8
SHA512 0bcc93ee2d55239d82ac82e502b94958caafead1cd3971d9fb5e960e055a76fecab79ce815239086658ec9c96157c6de6075741c054422bbc135dd70887762a0
SSDEEP 768:R73EBSPmiJVDqNHXmTWTbc+HFZN2ewBKZO3N:R73EFuWeWn1lv2evZGN
TLSH
T1C2F2C0B0DCB99E339DE6D688E50A7702AEE801B3D4D82A58D9DDBB0D008365D031BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5904965b6114ad52cd471a98c86958b0cc060fefaccd5e2ead44095648311a41
MD5 9f065c99ba50f7dbf370eee7eceb882e
SHA1 9ba9e5eae67d247e44d40ad8857d43af9282442f
SHA512 8d9d6ab4db8063c906911f301c2cbff4faf29842a21fc5329bf05a4270dfc5acdb94f0e7813b370e1784f9d637f98ebf431e64a5f1c07587e17ad6ef6b56ed93
SSDEEP 768:gFQ/35wg7BSPmiJVDINHXmTWTbc+HFZN2ewBKZO3N:T/3jFuoeWn1lv2evZGN
TLSH
T13303B0B18CA9DE77EDF69B88E54A3712AEF401B3D4D82558DBDDAA0D109319C130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8d7de534c698e7638e09633d2251750dc3827f7fb66cb69a6f8cf05f4e53bd09
MD5 d7b0d537af422f7d5c91526896e23f08
SHA1 8356d60a7ebb4e2ddcbe6f1d29465dcf4375fcaa
SHA512 fd8a6ce7106e6b51830d4fe289faf7b6fa6322afe2a7d2cdf8d80ba565344162c955be8af9a0544eb65f6011e677878ac976bc4fc01d1137e8632f4f4db0fe44
SSDEEP 768:8rv+4UNbdM35mMiJVDONHXmTWTbc+eFZNeVH1SvyZ:8bsb+3juieWn1IvEH1dZ
TLSH
T1DD03CF71D8B99E37ADE69688B04B76537EF8116384C81B84C9D96F4E028B59D030FD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download