bda084dcec58d71bba5d01c640672505e3e60e25335d5b4cd02cd9dbcd413ee4

Analysis

max time kernel
150s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130541765.html
Size 34KB
Sample260910-ajq96aec29
SHA256 bda084dcec58d71bba5d01c640672505e3e60e25335d5b4cd02cd9dbcd413ee4
MD5 faf3c75d0fc110f9ad9f24730b0efaeb
SHA1 6420b3d2b3c1a3028b6790785f2f2a10a1a1bed6
SHA512 f16eb70b0b897571f205b10ade513c9ad92e83bb10ef0efbea140601638a0092b8b447f374b71fbc73b770e5d8c1837fde0c0020a18c0156ddf9e9f771ee39ab
SSDEEP 768:R8AUg73qdwLaJwKojUd0snCSvP40XQ0/t+N7lkK7XUdqWjL3o7n54aGOfWvY2nKi:R8ANOd+bjjUesnCOXl4me7UMYFhaXGp
TLSH
T125F228D476C0E82316CF1A77BF1EAAB9E07A5CB314847647A254BA4C34B9127C5F8CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5168	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334730458991628"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{E06B816C-483B-4694-BD5F-15C56F38AA8F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4364 wrote to memory of 3372	4364	msedge.exe	88
PID 4364 wrote to memory of 5168	4364	msedge.exe	90
PID 4364 wrote to memory of 2896	4364	msedge.exe	91
PID 4364 wrote to memory of 2896	4364	msedge.exe	91
PID 4364 wrote to memory of 2896	4364	msedge.exe	91
PID 4364 wrote to memory of 1552	4364	msedge.exe	92
PID 4364 wrote to memory of 1552	4364	msedge.exe	92
PID 4364 wrote to memory of 240	4364	msedge.exe	94
PID 4364 wrote to memory of 240	4364	msedge.exe	94
PID 4364 wrote to memory of 240	4364	msedge.exe	94
PID 4364 wrote to memory of 248	4364	msedge.exe	95
PID 4364 wrote to memory of 248	4364	msedge.exe	95
PID 4364 wrote to memory of 248	4364	msedge.exe	95
PID 4364 wrote to memory of 2928	4364	msedge.exe	96
PID 4364 wrote to memory of 2928	4364	msedge.exe	96
PID 4364 wrote to memory of 2928	4364	msedge.exe	96
PID 4364 wrote to memory of 1120	4364	msedge.exe	97
PID 4364 wrote to memory of 1120	4364	msedge.exe	97
PID 4364 wrote to memory of 1120	4364	msedge.exe	97
PID 4364 wrote to memory of 4924	4364	msedge.exe	100
PID 4364 wrote to memory of 3540	4364	msedge.exe	99
PID 4364 wrote to memory of 4924	4364	msedge.exe	100
PID 4364 wrote to memory of 3540	4364	msedge.exe	99
PID 4364 wrote to memory of 1340	4364	msedge.exe	102
PID 4364 wrote to memory of 5492	4364	msedge.exe	106
PID 4364 wrote to memory of 256	4364	msedge.exe	107
PID 4364 wrote to memory of 2876	4364	msedge.exe	108
PID 4364 wrote to memory of 4660	4364	msedge.exe	109
PID 4364 wrote to memory of 4660	4364	msedge.exe	109
PID 4364 wrote to memory of 2716	4364	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130541765.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ffd17b7c188,0x7ffd17b7c194,0x7ffd17b7c1a0
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,3316917021191665962,14660947729580910702,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,1872233983397277446,15260670434176479418,262144 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:2
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,11655269429391302507,13109172017090476187,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:13
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,18077520078254065518,9472256399502582260,2097152 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,17429905219630600448,15767296874991993140,2097152 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,3089236632381039964,15273519139133275519,2097152 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,11754455205359244641,16417510085852831389,2097152 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:9
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,8655672129063314672,8078133334926932419,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,17931971431642134203,9193055175513373993,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,16204762788032616105,8725296643804657964,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,16204762788032616105,8725296643804657964,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,413659512350452513,9013636572941118880,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,8752858771310219722,14467607161774553003,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,274253353147632168,13553303187151320142,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,1126573744250696289,16190293041422417488,524288 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,11375963181142905710,5212243778525996797,262144 --field-trial-handle=2520,i,13259991220789264170,9128604915180041966,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3133775275356fdc22d9c63f4d06b40c72f35df79debffd17b62b182813a7585
MD5 432505f4f713b57078d1f011ba6a5e95
SHA1 0b93e3c587b117445a90e6cc041ed55f14b277cc
SHA512 bd24b2aa00a42d7ff2f79d1b33fa00db7e8f7f8e1b634a1cb6efd3c4ea2c77c127eeaf999ad10bd29b375425376600be9e8a3c8b958b0ef28819a8d49a29838a
TLSH
T16751840B93569EEFCB66C87352D2A45836F7B07189073E0065FB6E78C802F8062D152F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598c39.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598c39.TMP
Size 3KB
SHA256 9ddd6cfe1073a3fe8925c35a1ba5ed0e6c124882f6be106314eadcdcf761668d
MD5 e88e4a063c681976c44c45458c95f315
SHA1 3e6058be74b6f0988451592cb6b60c33e3a0d8f7
SHA512 1b419d201d70d280d0939ca96848db9c3756f0fe482d69254740371dbb04b683f83eb9efdddec230b1727716e69ba79f75bb307c83cf02572a9b09487aff9647
TLSH
T17E51830B93568EDFCB26C87352D1A45836F7B47189032E0065FB6E78C802F8062D152F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8cf1926c57a07ebbac4ecdbe390db968f5a3deedfff41d19e651d301ece20dbc
MD5 de5969822a1cdb3eb0aeeffcce94cd39
SHA1 482e4ad3845c9aa13cbe02e3e346aee9ba6b32fe
SHA512 fb1b6fdc25f453d1734f61322cc08380200f96996fdd4a3f922e6f396490c00116a63c56d94301c1e262dc12f4c82eb8bcce403b48b9a3aa7b5dde7794e56cd4
TLSH
T1E031D3F783B4857E9A1186F0BA146E2FCE2D0515432C7C6589E4AE27D3F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c8da8d694d147a7e37b255892144fa1043696608054c15b6d3492fd8cf06860b
MD5 2473d5c5e3386db7e09717a3af3c0816
SHA1 3854d8445d92c48b707c2e82e2e796bd70009584
SHA512 e19e11f3f43d1d2df0ca7586f21af6f78e1bacc8b41b58efc7f1ce9f2ace52fe59b30bb59003db5686d1deede0e9317afc50f906c3ca86004f59b0445b10a5cd
SSDEEP 192:sxRoRWIb9/fUsI3AtazoA8p40/g6+WNIYZFLK2OGaIgIJ:sxRoD9/fUsIQF/5ISes
TLSH
T1E432B7156D28A93B8CC7D31DBB65BF53E6F95132A1902E58B6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 21437bdac44242dcb72980ee006a51a62f7e4b4957c32d6cc693053b758923b1
MD5 ae15dd70df2b27e7c300cdd9ec877182
SHA1 0d92bf4efb35e2c018f518b33608e66b60d13165
SHA512 99f0e44444af7f6f6d67433d27b8c35e383ad6efc96c3925aa5bd38f2177cb66158b6b6dc5e6e703ece2ab134c6befe462fb151af310eae6729bb9de937649cd
SSDEEP 192:sxRvRWIb9/fUsD3AtazoA8p40/g6+WNIYZFLKGEOGaIgDTJ:sxRvD9/fUsDQF/5IS9p
TLSH
T12532B6156D28A93B8CC7D31DBB65BF53E6F95132A1902E58A6FC8B1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 886c2dedaf4252298cdb5aa82e7541b9c6f92347b9dd69334a50b5e2907b488d
MD5 6de3ec3ea370f9a93e832f0e4f5b38fa
SHA1 aba03dc322d78a78dbd95088b20d25aa36af227a
SHA512 09b1e2a9db6e75b2672c0ff8e3d67181c7a23328ffff7d23266f1534cd3d218f91a122b9bafe450f4f64851ee5f4150cc950007bfcb323ebb4cfa2fb130546b0
SSDEEP 192:sxRvRWIb9/fUsG3AtazoA8p40/g6+WNIYZFLkGaOGaIgDVJ:sxRvD9/fUsGQF/5ISVD
TLSH
T11832C7156928A93B8CC7D31DBB55BF53E2F95032A1902E48A6FC8B1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f60c08457e86ab216782980b22187f08818e6361d3e3edb9201aa4ecdd275754
MD5 255593cbc31448936c2e0329a597f4d6
SHA1 e375f023f61181fb279a5f259a83e0aaa7c711ae
SHA512 7dc4781e6f6491e295c09b05602f2592794fb0e5748025eef1247f2bf7609e2769525b70f556cb6ed2a172a454e6032614a08d94fe2657d7c9418f762b4e3bdc
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGYrocma:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VY
TLSH
T13DB2CA3B640DCB7E5F800AADAC196FD77D9802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 9dc0a43ea27c98743b2e0f63d3b94a99a15272d6a7feed13feb1216c281630bd
MD5 c55197f2b26d25c74ff579d5e629249f
SHA1 cb215dd400d8c54e587eb5dcfbbb736a703db4fb
SHA512 032837ac629d12ad1bb70037115b88fd0b847a3886b0d9b1d2175294d0e372373f163865f1cb0ec517e2c769d6baa2f2cdcf717d2804e4ecc931af118190198f
SSDEEP 768:srv+4UNbdL3EGV+LeSFOUxGaX4fouOToPvB2thtA9VAgneVH1Sl1:sbsbZ3EfsnnwthttSEH1i
TLSH
T19213BF7298A89933DDE2D398710B72537FF4911392C40F9499EE1B5D0A9B99E430FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 699dfe2f9fcb424f12c938bd948a096f6a317ed65c1e0e639eb80757f5436d6a
MD5 5c7aa4e20fd42a8e888eb67bed4ba82a
SHA1 adcfb6c91a7473f9656312191fefb7be85f5325c
SHA512 6564c21a277888ee17a4c65e83c5c2b3def5cef7337eeb9404ed9d550b10220c0c697b324fe3af832a3b9cbdef0471d3f0875132824aff25f1e37de2e860917c
SSDEEP 768:OA3BV+LeSFOUxGuX4fouOToPvB2thtA9VAgnMgO/t:OA30snnwthttSMgO/t
TLSH
T180F2BFB258A8DD63DCE6D399730B73526FF0815391C42F944AED5B1D059BA9E030BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6ffa2d67bd9b6cca292d0fbd8b36b098b6fc1002e1b5d5fa07da11b75c104c69
MD5 b33ed5dae4d4e93b984630d6f724a767
SHA1 01dad1ceaf42cf8902b71bdf6ae687725fc098d5
SHA512 20cca202f2803a14f4f1065c1899dd1bc8ece3571fba0ae189b2c11027ca23f10b2f198da11d43a781b71dc701e1628266eb6f7bd7dc041ac1db2877314fca1c
SSDEEP 768:9rv+4UNbdL3kGV+LeSFOUxGdX4fouOToPvB2thtA9VAgneVH1Sl1:9bsbZ3k4snnwthttSEH1i
TLSH
T12913CF7298B89933DDE2D398720B72537FF4911392C40F9499EE5B5D0A8B99E430BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 52b37863e4f7ab481c4c80ae6b147823d667c39257afe0ce98480c629ec00071
MD5 cf3195469961025fdb791d591bcc40fe
SHA1 6cd52340c4af525da5cc63c7f59d11d62cfb96ae
SHA512 ab1678f7a35f5425815c1b82d7dc880590130d2d2ed3182ee4019c6fbeae8564d9c12ab863cba3b2ca0f17e03b164572644c088d935bd19bb3cf8449a8c66c10
SSDEEP 768:CE3BV+LeSFOUxGaX4fouOToPvB2thtA9VAgnMgO/t:CE3AsnnwthttSMgO/t
TLSH
T169F2BFB25CA89D63DCE6D398720B73526FF0815391C81F944AED5B1D059BB9E430BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a5048a83a17c8d879d374fad26b61c15417ba0ecb26c1f75065f752705504b73
MD5 a0238d478da3f10793f3ad041ec75ae1
SHA1 74d5534e046b77662d5f62c4885126e50882d414
SHA512 eb06489af3f285606abc63d7a6bad8c06aa1a305d9a4a2df3cd3b75a1171e3b9c8f82eaf4c2ecb8f9e5eb67d4d2250c90ace3a848827251b2ce2d2092537c99d
SSDEEP 768:urv+4UNbdL3fV+LeSFOUxGaX4fouOToPvB2thtA9VAgnLJv:ubsbZ3qsnnwthttSLJv
TLSH
T11F03BF72A8689933DDE2D3A8720B72537FF0515392C40F949AEE1B4D068BA9E430BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 9b7cbfc5e6fdfbcd9f4f18f6419983890f91faef1ebe79e132bca64bd8c66092
MD5 beb2c0e3265a390e5b50fa73ed67db49
SHA1 3cbc1baba37480738f7b9770e23f97479a92f889
SHA512 5c2a721e28e99e4196275619e7277c60275d01953fd616fbccb209b07ec293ba9f7526248ce6a909c7e035864f1ca6cdcf858cfb1e0de19f550939dc5760f300
SSDEEP 768:Hrv+4UNbdH3cv+LeSFOUxGaX4fouOToPvB2thtA9VABneVH1SlX:Hbsbh3DsnnwthttREH1Y
TLSH
T19503CF7294A88933DDE2D398720BB2537FF4811396D40FD499DE1B4D0A9B99E430BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fe29fd3a2d44b6c0cd350991e5164c5083f8f18057ad4ed7d173234b73a411e0
MD5 60a9aa8f75c5675799e299e649105e10
SHA1 f2cf0e8d7f8407755e0fd751c6d1485686654555
SHA512 fadb75809b64ec7849f82118deffdd4b373c6ae79e3a022c965c32e10c79d69e34038a2c8c4cab9a6651dbadad4554707f338e90ac289a4cf9ff8905541731ca
SSDEEP 768:grv+4UNbdH3iM+LeSFOUxmX4fouOToPvB2thtA9VAw3AeVH1SlX:gbsbh3RsnnwthttcAEH1Y
TLSH
T1C203BF32A8A88933DDE6D398320B72537FF4915396900FC499DD1B4D069B9DE470BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3a81d94-e286-4daa-954f-0cdaa8a70f9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a3a81d94-e286-4daa-954f-0cdaa8a70f9b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download