dba141c0b0b95b9cd727d3ba7ba6b6cb321232aee3322f3bf2a3ccc293c5736e

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dba141c0b0b95b9cd727d3ba7ba6b6cb321232aee3322f3bf2a3ccc293c5736e.html
Size 146KB
Sample260910-3fca2shq51
SHA256 dba141c0b0b95b9cd727d3ba7ba6b6cb321232aee3322f3bf2a3ccc293c5736e
MD5 2d56d172d0ee38fd6eb74337b043faa6
SHA1 547ae2e9600c60b66557113a8be86384ffb3ef98
SHA512 94ff09863e7c893dd9d9f2b3260f979f136afb7382ff0f091573b0fb965fe1cf01236265d0fe68dd4431f345a0cf977db379294026b9f2c7b7275ab57e9228ca
SSDEEP 1536:jytCMU7ntUJPj1ooLRoVUs7g9WHGMZa8jrNBqjRFJKUyUi2OFDYpU9HG2aMCARKn:j8CMU7+Jh5LV9RFdk2+Da1NMCAwKWM2
TLSH
T163E30AC8B6A5B09593B3B4F5002F000BB13A6C6AF4589CACF28DD5E16FB4559422BF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2404	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335564242631017"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{84A30420-7D6C-4336-8112-28C88D3960ED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5516	msedge.exe
5516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe
5344	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5344 wrote to memory of 3172	5344	msedge.exe	89
PID 5344 wrote to memory of 2404	5344	msedge.exe	90
PID 5344 wrote to memory of 5968	5344	msedge.exe	91
PID 5344 wrote to memory of 5968	5344	msedge.exe	91
PID 5344 wrote to memory of 5968	5344	msedge.exe	91
PID 5344 wrote to memory of 2732	5344	msedge.exe	92
PID 5344 wrote to memory of 2732	5344	msedge.exe	92
PID 5344 wrote to memory of 1400	5344	msedge.exe	94
PID 5344 wrote to memory of 1400	5344	msedge.exe	94
PID 5344 wrote to memory of 1400	5344	msedge.exe	94
PID 5344 wrote to memory of 3436	5344	msedge.exe	95
PID 5344 wrote to memory of 3436	5344	msedge.exe	95
PID 5344 wrote to memory of 3436	5344	msedge.exe	95
PID 5344 wrote to memory of 3448	5344	msedge.exe	96
PID 5344 wrote to memory of 3448	5344	msedge.exe	96
PID 5344 wrote to memory of 3448	5344	msedge.exe	96
PID 5344 wrote to memory of 5668	5344	msedge.exe	97
PID 5344 wrote to memory of 5668	5344	msedge.exe	97
PID 5344 wrote to memory of 5668	5344	msedge.exe	97
PID 5344 wrote to memory of 1968	5344	msedge.exe	100
PID 5344 wrote to memory of 5928	5344	msedge.exe	99
PID 5344 wrote to memory of 1968	5344	msedge.exe	100
PID 5344 wrote to memory of 5928	5344	msedge.exe	99
PID 5344 wrote to memory of 3592	5344	msedge.exe	102
PID 5344 wrote to memory of 1288	5344	msedge.exe	106
PID 5344 wrote to memory of 1192	5344	msedge.exe	107
PID 5344 wrote to memory of 3968	5344	msedge.exe	108
PID 5344 wrote to memory of 1240	5344	msedge.exe	109
PID 5344 wrote to memory of 1240	5344	msedge.exe	109
PID 5344 wrote to memory of 5516	5344	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dba141c0b0b95b9cd727d3ba7ba6b6cb321232aee3322f3bf2a3ccc293c5736e.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff91807c188,0x7ff91807c194,0x7ff91807c1a0
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,9746228064129931460,6323798883855588970,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,9896432493884168965,5513422044141541609,262144 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:2
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,17606923794187360074,7547385530521540371,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:13
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3768,i,7120417772315654180,7589838127418720000,2097152 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3804,i,8643027434129520888,2414998935295689894,2097152 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,14539194118210653905,16752085473283724935,2097152 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,3992113439916538151,6235305590869667047,2097152 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:9
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,2076775731827199278,16337294267978910707,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,13206597901840594443,15867390974970160070,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17699692760772082238,5485215886947604408,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17699692760772082238,5485215886947604408,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,6023628354498195936,13082810755158022687,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,7894147459189288536,6395051352463853686,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,14908630647031646732,15021205645628514419,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,8834328562099554535,16959692135661135361,524288 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6436,i,10589124262078224625,16110144212683636967,262144 --field-trial-handle=2844,i,18290848889645545177,17928748055045457043,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 2a615ef28fe7e6b552bf2d847b02d4a72ff4c91082964ba85f6ed2d909de911f
MD5 da62549e1d33134775f9b1227dd28b3e
SHA1 57ba5bb3a800edfe40e9fad213cbb778617f76de
SHA512 4a7a51bcb69087f282c227a292f9949d7cb7744eb75dcd1f68bcfa7743df42b1757afd741bb11512f08600883b94a61caf994af00f9f3bafe9d2a299c750fda6
TLSH
T13751856043272EF1F7A4A8B216D158893F38D02DA52B6E1ED1D3FE7448973602A224A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ac34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ac34.TMP
Size 2KB
SHA256 8418e00d3adfa6d1d1f07c7e0822f3b3ca0ee27b34be0f8168427be41fd77001
MD5 56161d45f123bf61280327ef00cf3b8a
SHA1 3314259fa2804ffa659611bd11cd79059455e907
SHA512 e17f1c0ef687140f85ceeb2a39eac37c34dd3778d369e4af5ef7fea9bd175ed7a51e373ea1a7dc2b8ce0b7a5cae640b415c0824b9ebe6baaa4087461c0f64681
TLSH
T1D951966043272EF1F7A4B8B216D018893F38D02DE52B6E1ED1D7FE3448973642E224A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5be735da-8c24-48a7-9bd1-5bc9dfaadd93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5be735da-8c24-48a7-9bd1-5bc9dfaadd93.tmp
Size 3KB
SHA256 0bcdc148d193c63694aa7689a082aa313cdc61a3f17ad595759603ea48945460
MD5 77b74662747946de4997a185fe2322ab
SHA1 102b482f042eaac876ddcbdda72dd3dc460b0681
SHA512 87a0f4651fe9105a7fe15a4c2c1aea3694cf86f89eaa77eb49b984808a3c815a335679d5fdf063c567ac161a5f20db0cb5727284c29d9636ee2b15aa192cfd46
TLSH
T1F6619EF7C3E4867E891196F0AB146E2ECE5D0516832C7C56C8E4AE2B63F24B1D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ae48eced9fc7025ce41fbe40017a966a8620aae9af90e4a35cc3a61ce8789b06
MD5 76a289382cc62f53a3603ca99550102b
SHA1 1845b85abd8c9d34d4e4423bb4db5397fe4a156e
SHA512 483690faa3e0f5756bb228686c3a62fd3865e73b3801c8a910b1bd955fd51b5f872698b7c9306f4cdb85461969a417a5e6bb0fec120b06731a5d76625d0f2a81
TLSH
T16871ADF7C3E4877E891196F0AB146E2ECE6D0516832C7C5688E4AF2B63F24B1D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 90b9e4cbbd63f9915b903cc677d857a2a21b7efc17a4e7a54f9bd74ccd03ea92
MD5 9e8b6d622c6da3d84798ba3a46f37516
SHA1 3e65795a167e7ecfd495383f64751840f66b94d9
SHA512 e130923a59ba0714c1e49673a31af742e6514ad94c091b6b94754e469efc4d9c391350af91fcda3af39770f0e819da134146e9ae305b382bc7f2ce246a161acb
SSDEEP 192:sxR1R3bI/fHskKrjDQzoA8p4C/g6+WNIYE/NiKVGJIgIJ:sxR1ZI/fHskKX/5I8Fs
TLSH
T1E132D6166928A97BDCC7D21DBB65BF53D6F95032A1D01F48A6FC861C04EB6DE220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9fd906676b924e40b90e4b27e36f001babd8bb7e9c89aa57ee7813565d4034dd
MD5 4281e51629428d57abbe26cba4c0fb9e
SHA1 275a8e32a153db2e90481a2aa8103e1f14efdeb0
SHA512 67169e5db7e1e0d6000c463f22b7a8bc336760f546ccc28e0f62fe84adf4816a046bdd8bbf9210ccbd309bc7dea0d1df0540b9cb7a2c3d1683c7fdc5b898173b
SSDEEP 192:sxRCR3bI/fHsCKrjDQzoA8p4C/g6+WNIYE/NiKVGJIgDgJ:sxRCZI/fHsCKX/5I8FA
TLSH
T13632C7166928A97BDCC7D21DBB65BF53D6F95032A1D01F48A6FC961C04EB6DE220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 aa6dd1362d6ab294e58ecfc1578cee8af7555ff0c7d90335f76120a423c01cac
MD5 2a4e783065e1c989394b834cb207e268
SHA1 e7858b2505393e7edd25c3484c84b412d27df487
SHA512 673843812bbc6398c0a37b697d6f32955918c33d3643721fc580ac5555c5a9ab4e248d2d869074f75f5af38bea20ea45879fa6018cc1110075084a47768893f7
SSDEEP 192:sxRCR3bI/fHsrKrjDQzoA8p4C/g6+WNIYEvdiKVGJIgDCJ:sxRCZI/fHsrKX/5I8FK
TLSH
T1F032D7166928A97BDCC7D21DBB657F53E6F95032A1D11F48A6FC961C00EB6DE220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ecdc3c50c8162d4ea8b35622ee046ea011c761aa082291057717366d39b2d10c
MD5 588a07521cf7b993589cf5bcdfb4af9d
SHA1 2be8a10b84cf6338b15e7d1c82c26f988ae9411c
SHA512 692982ac9e046b4fce1fbefe9affe200bebc98d9c90cb13c194b0c1b8c86b9b8936721eb2d4ccd85756683098e1b9aa66a6779e009df2f2ebe3b5cb23f5b9b12
SSDEEP 384:0OhQi3gfCtgHZFfeQKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwY9VHRAsroZCZ:0UQi3aWgH7feQ8F1+UoAYDCx9Tuqh0V0
TLSH
T130B2FB2B600DCB7E5F804AADEC196FD76D9802C796588D8047FE994C03C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b7241fa9-b2f5-4180-8927-8f0e6c1ef5f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b7241fa9-b2f5-4180-8927-8f0e6c1ef5f1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ece7b617aafad12896f783b71f346fd3ec1a084e2bd6dee4b7c443945e2b310c
MD5 9fc5ff6161dea2ed4dfae5f9b20155d7
SHA1 50b8b8d21f7cba1f0e0e6409e437d70bedff6495
SHA512 155a183991138c9d5f8cbcf011d778c91b1533491cb78054892c33dcca2c0f3e645c0b817ddd5de4d511d0a8e5c72df6e7ed90ebe4963be4ef3634b0c1aaef8c
SSDEEP 768:Jrv+4UNbdp3KqGrhDVkK48dHeByERRFzjK3YAMgj5:Jbsb73LGRD48dHSyw/mMgj5
TLSH
T19503CF71A9689EB38CE7C28AB5837657BEF4821386C8176486DD6F4D44CB1DD030BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 85e671681a538a7fdd68a29018e46a4c23e6e2a565db1df8f5a24e04aa3d5cda
MD5 5f22d41bf10415f075006417e67b8ad4
SHA1 72a896e2f31c1427438f8a22a375f0df4f7b7daf
SHA512 93bdb6495b2feec3b406bed81be7ab608cf7128b6c5109a916dd2e6db4a40d783f6deda27257c9f2cb9fb126d6d9f64886bdb4dfede498805713b320c600cf23
SSDEEP 768:YK3FqG8hDVuK48dHeByERRFzjK3YAMgjOV:YK3gGqN48dHSyw/mMgjOV
TLSH
T167F2BFB06D645DB78CE7D38ABA837747AEF4821386C8666445DDAF0E44C669D0307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 839f6e0a72fd87047b7efd9d2cfea6cda1b91a7dba623ee7d53c9544051d38e5
MD5 effb726c9bf49884c0e003021dcb3e0a
SHA1 6517fa1027c89331767399ed6d8dcc5b1f3145ca
SHA512 a6543ab98376b7cda4c4ec67b19cf620398f1fd43c5e12ed4dde870e56214f532856f41b76b0fd87e0090aad8a2329f229aed9f5f9a83894d7f4ffb0e2838387
SSDEEP 768:/K3MqG8hDVuK48dHeByERRFzjK3YAMgjOV:/K3lGqN48dHSyw/mMgjOV
TLSH
T18BF2BFB06DA49DB78CE7D38A7A837747AEF4821386C8666445DDAF0E44C669D0307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d5135f86164510c7acf6ecba9b52f708f32777d4e3049e5e7ab80abc6a7874eb
MD5 729e752fdecc1bed6190ffea4cdfe2ce
SHA1 26efd4b6c3017da3680c173de4cc62036b0e3794
SHA512 a6523a808f9f89434c15a3d7ddcf6033fd6d99e3b011314c9ff6999cf0398980df9f092efa94f5d89a462ba579301e2cc3eee72d1cefe9ba44b2757633700d2a
SSDEEP 768:Qrv+4UNbdf3xqGciDrK48dHeByERRFzjK3YheVH1SCj:QbsbJ3UG9e48dHSyw/PEH1Z
TLSH
T11703CF71A8A85E734CE7D2897583B65BBEF4421386C41B64C0DD6F0E85870DD130BE6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1a42259ca2a8056ab0d6f6e8ecbec2ba20ef924f969ae90ad5d8685dc7ae7706
MD5 002747bd1af1ecb8f583f9fea404840b
SHA1 642103ba83ee7d4161ef06da4ce534e332b8e30f
SHA512 e8adbc2a9e4c581dafb6c93461fa7c02d51cb047761c13a4bbb5a5277feeb5a1e92eaa892ef45a9f60b5c8213fbaf689817e61b6d41f952ae75a8229fc9259dc
SSDEEP 768:Srv+4UNbdf3uqGBXDVvK48dHeByERRFzjK3JAeVH1SCj:SbsbJ3XG1Q48dHSyw/BEH1Z
TLSH
T13203CF71A8685E734CE7928A7583765BBEF4821386C41BA4C4DD6F4E85C70DD030BE6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d70adf8197ea2d7143d574b8da58451d00981bd5cc28bd894443e3083acf6091
MD5 af517c3cb17b2870fe6a4d7ed3b1c1db
SHA1 0c0fe2f2edb0c096a143b9322171966c1372d622
SHA512 61daaedb76b0c709a88e24f47bf74dce994c6d2b8dfee8e0f8f36ea9c70c0d7231996fc7e5a6f9608ee5522a47109bbdda29b31088df140963a60a9d867029a8
SSDEEP 768:UFQK36wgcqG8hDVWK48dHeByERRFzjK3YAMgjOV:3K3+Gq548dHSyw/mMgjOV
TLSH
T149F2AEB25D949DB79CB7C78ABA877307EEF08253C5D8A66492DDAE0D40871DC0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f485a07f-c460-4ed9-85d1-26d2b5ed4746.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f485a07f-c460-4ed9-85d1-26d2b5ed4746.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download