289be4532669da7061feaedc90040f04c955d0c241d527fba952e00cf4120b98

Analysis

max time kernel
148s
max time network
121s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130288626.html
Size 31KB
Sample260910-ak7crsbr4x
SHA256 289be4532669da7061feaedc90040f04c955d0c241d527fba952e00cf4120b98
MD5 2e2221f9b98d91ac4869b0ee08cdf392
SHA1 a765593c84f748ae2d552c29f5c490fee5c656d5
SHA512 c5d55381ab642374265a67f7e574034a477015bbc0d50a5a8240dc51d6fef9b215f92319bef5fb05eee6c7ee2a6301c40852a614195f4b8394ecfb66d10bbbb2
SSDEEP 768:4UrA0cklP2hgdFWwfFMdpf4U78IoTqBD1Xvo7/jHtOD9VoPmbh2lQakgV0hezSPP:4UrPdP2hgdFWC+r7qeg7/qh6AAC
TLSH
T16CE235C476C0E91316CD0F33BF4EB9E9E06BAC6364C9764382A4B68C24BA117D5A4DF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2552	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334732145704817"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{2A764221-C428-4DD9-BB9A-B2C561A574B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 3368	4924	msedge.exe	89
PID 4924 wrote to memory of 1428	4924	msedge.exe	91
PID 4924 wrote to memory of 2552	4924	msedge.exe	92
PID 4924 wrote to memory of 1428	4924	msedge.exe	91
PID 4924 wrote to memory of 1428	4924	msedge.exe	91
PID 4924 wrote to memory of 2660	4924	msedge.exe	93
PID 4924 wrote to memory of 2660	4924	msedge.exe	93
PID 4924 wrote to memory of 5128	4924	msedge.exe	94
PID 4924 wrote to memory of 5128	4924	msedge.exe	94
PID 4924 wrote to memory of 5128	4924	msedge.exe	94
PID 4924 wrote to memory of 1124	4924	msedge.exe	95
PID 4924 wrote to memory of 1124	4924	msedge.exe	95
PID 4924 wrote to memory of 1124	4924	msedge.exe	95
PID 4924 wrote to memory of 4548	4924	msedge.exe	97
PID 4924 wrote to memory of 4548	4924	msedge.exe	97
PID 4924 wrote to memory of 1792	4924	msedge.exe	96
PID 4924 wrote to memory of 4548	4924	msedge.exe	97
PID 4924 wrote to memory of 1792	4924	msedge.exe	96
PID 4924 wrote to memory of 1792	4924	msedge.exe	96
PID 4924 wrote to memory of 6140	4924	msedge.exe	99
PID 4924 wrote to memory of 4944	4924	msedge.exe	100
PID 4924 wrote to memory of 6140	4924	msedge.exe	99
PID 4924 wrote to memory of 4944	4924	msedge.exe	100
PID 4924 wrote to memory of 4796	4924	msedge.exe	102
PID 4924 wrote to memory of 5356	4924	msedge.exe	107
PID 4924 wrote to memory of 548	4924	msedge.exe	108
PID 4924 wrote to memory of 1516	4924	msedge.exe	109
PID 4924 wrote to memory of 8	4924	msedge.exe	110
PID 4924 wrote to memory of 8	4924	msedge.exe	110
PID 4924 wrote to memory of 2116	4924	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130288626.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffec584c188,0x7ffec584c194,0x7ffec584c1a0
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,2271909031693276207,16310551646551504787,262144 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:2
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,10169345808910610905,1149388180986961852,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,1148747978341217739,8129833604272123951,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:13
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,106532088989773744,5808643806787746967,2097152 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,7573822793257708407,11035903514369419992,2097152 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,7710936049095602320,2871879248783694525,2097152 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,6581984163238287398,16786647741015946527,2097152 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:9
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,5920658149500626551,9485119491787764936,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,6801446523964257455,10418890339124114853,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,4877802976865999468,16779749445283455810,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,4877802976865999468,16779749445283455810,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,13515605848664620847,16360163673801295945,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,9495935843379766596,16979772232635995393,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,1612129176694211389,16704617903807255225,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,1868648073272147206,6874466162395978322,524288 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,17942983097922559824,8161754743274358211,262144 --field-trial-handle=3096,i,9016353551080477242,15009457354109735537,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6064

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 5fb7a9cd5e0fd5017bf70908b45f7cafce7600f57e6028c30dd229008d9cb37d
MD5 0585a9e9eae3e8a8facfedcee88a8755
SHA1 d64fa711ddca6572546503dbbf1d0ada4655637c
SHA512 ca817a97148f2d5b9f18c260596aa1f30096c15d94927707d3888ce64734abd2608954f6622478b11e1d7d9fab760bb7bf22271d7d0c845305bf88ff7dc0bc45
TLSH
T1DD4141AA73EF09D0D795C7F296DD557932FCC49A05C3AE41503A2E744ADAF1071E0023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bf6e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bf6e.TMP
Size 1KB
SHA256 d1c0fa284eaf954a16f659996bf750e5b1e9e957f440aabaef618f75e182ea60
MD5 d2debe754ed1c7ee7e7e875c5a13114d
SHA1 a483d9030ade4bf755b3da9f8d4e84f857ff641d
SHA512 a23fe23081745ec1258b2797bd986a0310484c19ebdafb0e87833683ec0f18b1cd0cce274793d65fe081b0782a79b39008774f460dc13a28c4f9de91b6c60e27
TLSH
T163414FAA73EF09E0D796C7F296DD957932FCC89A05C3AE51503A2E744ADAF1071E0023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bfc38c4eaa1d2ce901dc3641cfd017aca94d6061676698b4b4f8afe34fd43b3c
MD5 a7d701738da0f43cc53872dcd2a2ff2f
SHA1 71567c4963cde38fe60ff02cded13f7eb8555c60
SHA512 871595dcd30f68721b83471a76c093188e77a600677badc07ebf4ec3a825d4113a0baee7f9de78d3b9d27e2f78e6ee9d90ee2626be546a7fdd8954bc8396c0b5
TLSH
T1D331D1F783B4857E9A0186F0AA14AE1FCE2D0511432C7C6A85E0AE27D3F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 af3adefe5303273fc1e68afaa6240743af4410711eb39e6df551ec434f7f994d
MD5 3ab3ada51cfa47f8897e94a0f087d041
SHA1 54684d2877d441423b67e8e1dc3e63604cb2eb42
SHA512 21a149ef4b2535822a21b48ca5bd6a7bb4f2c326255e9881f35d51cf124fa636ae27a35d3a92b5f1a1e0fa5545d237c48e33d72a5e014ca03fead5cc74f62f38
SSDEEP 192:sxRJ3R9yM/jK1Ml8wbE4V/fpOsfk3At84qzoA8p4x4/g6+WNIYZFLKtRG/IgIJ:sxRVVlTV/fMssoni4/5IS3s
TLSH
T1FD52E805AA24597BCCDBD30DFA55BF53D6F95572A2901E44AAFC8A0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 54cf50974aa85f74717a0cf01ed40ecbd048b3e03af48ead3ee28d29503bb79d
MD5 f3b05e1fae939cec1d54e133289358e9
SHA1 c33073ce595faadbf52604226bfa0b04b7912679
SHA512 abd9822e5b64e162f94ce258e3cd330b0ce033ef2845108205c3ccd8d7a9fd32820e41041c15da78715d1bd5500dced43d8972c6ede25e104b3981854135a6df
SSDEEP 192:sxRw3R9yM/jK1Ml8wbE4V/fpOsLk3At84qzoA8p4x4/g6+WNIYZFLKtRG/IgDsJ:sxROVlTV/fMsQoni4/5IS30
TLSH
T1A052E805AA245D7BCCDBD30DFA55BF53D6F85572A2901E44AAFC8A0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6036ac63e24ac6fc5a833520f9b74cea347bfc2d49e4016b52fdbb8fc47b75f5
MD5 5946518b509561c409c5d58661d8551f
SHA1 4d59fbacb6b5c5e14d79d32c6df15427070c364f
SHA512 c8759618f21b21f053084d37898f6918014192810f69a0c72de5ade9ef2278a54d7be131596e2d695d9d26f8ce2341c36f588be942e3ed12ee92629dbcccbbe3
SSDEEP 192:sxRw3R9yM/jK1Ml8wbE4V/fpOsik3At84qzoA8p4x4/g6+WNIYZFLZ9RG/IgDOJ:sxROHlTV/fMsZoni4/5ISkO
TLSH
T19052E815AA245D77CCDBD30DBA55BF53D6F85572A2901E44AAFCCB0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c63f6023785e329ae2681b0d8240267e47267dc8fe8a62d8297957e6bf4ce036
MD5 4dcedf8858c139a461ac1370a21ff5aa
SHA1 ac789840c870d16ae249dd794d024ddc0965d7aa
SHA512 1006ba62dfe5acdd260d6c33aaca1f5f10b2eec8ad0f725a18714f9282fb1b35434d0887afd0a42b2bdd4bfff68150f80ff14c44c65b354177dbb2a90129d02c
SSDEEP 192:sxRw3R9yM/jK1Ml8UQbbE4V/fpOsik3At84qzoA8pex4/g6+WNIYZFLZ9RG/IgDa:sxROHq/TV/fMsZonU4/5ISkO
TLSH
T1F062E815AA245977CCDBD30DFA95BF53D6F85572A1901E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b1c8fc6ca7c48f6bdef8b11ef45b2845999a43788bfee074aaa37c389f4e996d
MD5 ef4a32e47460d5b30c8950e313b93e04
SHA1 f4c700d542c6ee3aaf5d3d26af0161cef435e9c4
SHA512 274178a14be56cadacd820a559d106d4fa5efc990ed6ce9d102e270c27e85683ff411db6b279a36e226d0a59af4c7d18037efeae33ef65f92393a9403b33c45d
SSDEEP 768:KduETwWgNhfsN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVywLIfroJqNq:KduETwWgNhfsNu1jaXgIMJqNq
TLSH
T161C2EB3B640CCB7E4F844E9CEC29AED66DD801CB66988D5447EB894C03C67EB521A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bee72e27824210e3a4f10001ef2fcdb7f298afb7c5661abb0ca288c93bcdfd54
MD5 51da32f30af468aa0dc1ecad8d1e1d48
SHA1 54f02f0379f3da2085242a92a42ca76647b9cae9
SHA512 9558400a287fda82a3012e1915fd97db1f92e6329a5f71ed80b8825dd6457b8e64bc1118f62cd5f61663fd66e4320a123774c35091aebbbbb98fb451e23ee6fc
SSDEEP 96:KR8dIsGK+MW6XXg0MK4E5EWEnEjEREzEHEDWE3EEEygErEDK4EagElEDcEJEhE8i:C8dIsGK+T6XQ0wE5EWEnEjEREzEHESE1
TLSH
T150915611303E1240383D75199668CA5FA2827493315CE9AB77BC56A7CF6AE02DCFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0de621a236d8f0b62d2f7afb7e18eba1a2be807c76845fe78c0566d086ade0f9
MD5 0004e20622f8cd7c1b5596b72498afa7
SHA1 da2242f2c31da77eb9fa6ff3ca026cd61b5c507d
SHA512 1e5eefe5aadf43d8b90b1a967b9d3e741b8ccbaa32984fc335ecf020827ea66ba865d4babaa53c11cb19a9b2c44d31cb5663cb65e845393da0355ec36ec6eead
SSDEEP 768:5rv+4UNbdY3YuI1+LeSFOUUP8X4fouOToPvB2thtA9VAguMg4u:5bsba3tcqsnnwthttPMg4u
TLSH
T1C903CF32A89C99B3DDE6C3A8710B72837FF4425395C01BD88ACE1B8D069F69D170BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7a98383ba81401080a9dae41fc07f7ef443187621d58800a8794e5cb96d3cf00
MD5 184c5d04eb100a8132dff542394c7cb8
SHA1 7e93d46d112d00770051707931fd21429f4080db
SHA512 5a7b090fbdedff92d93e204e9d28921f13777a5c69437bdac659fbe0de083d2a544da44455fecb442e6fffe4ad71c9f888fe708c872100881193cbf46ed29370
SSDEEP 768:vf3YuL1+LeSFOUUPjX4fouOToPvB2thtA9VAguMg4tK:vf3tjLsnnwthttPMg4tK
TLSH
T1B1F2BFB16C984DB3DCE5C3D8760B72825FF0826395D42F985ACD5B0D069BB9D470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a165f2126fea5fd66c883269464aca93e3956a48d9ce370865065be087707ea5
MD5 f90d78a25b7c8f0b37d7ae5e990effd8
SHA1 02235479792d2cd3d78bf49b8551649544babb37
SHA512 c30a35e5657c442d53fc6c9d7c3625a357b5b88c7ddbd7f4b66ca76c3923cbc26dc664bf19e034db72d96362ede0f49b65229f63b6784543495c80fb1321445b
SSDEEP 768:qf3RuL1+LeSFOUUPjX4fouOToPvB2thtA9VAguMg4tK:qf34jLsnnwthttPMg4tK
TLSH
T149F2CFB16C984DB3DCE5C3D8760B72826FF0826395D42F984ADD5B0D069BB9D470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0de5dfa60c7ba5b646cb8d79486a455875ab5edc4b28a1a2f694f27a41797081
MD5 9505b3032c420745c61a8cdabe0d0e01
SHA1 30d9d2ad08ea9fac42717c32a4acb2a0d498c990
SHA512 205c6f983b24ec65828287d100707bd567ba057ce9bc4b5899d0e35c6559ab4b13be04cf1f1d2bd58ae68f30aeea47f99a2ff92c1ac48d5ddf02bb33e8ef99e5
SSDEEP 768:JFQ03AwgKuL1+LeSFOUUPfX4fouOToPvB2thtA9VAguMg4tK:I03qjXsnnwthttPMg4tK
TLSH
T1BBF2BF725C9889B7DCFAC7D8B60A72829FF08263D5D46BD49BCD5B0D019B69C030BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ed32ff04f2d87a45e4490fd00182ff1504475b9d175d34e4a436833de9bdfffe
MD5 1e4f0bf28a29a639e30a0a51038cdaec
SHA1 98499cf300aef92bdce5a70706bc9d400d0faffb
SHA512 a1863771fee3fc4af8c27a3ffaaa13ae4d934ccfa9399e03cfce59912b0c5d105ae771921f365fd107c7f11437a6c03968c72b50a61c4109f899461e667c585e
SSDEEP 768:grv+4UNbdH35d+LeSFOUU/X4fouOToPvB2thtA9VAwweVH1SlX:gbsbh3JPsnnwthttZEH1Y
TLSH
T15D03CF32A8AC8A33DCE6D398710B71532FF4816396900FD499DE1B4E069BADD070BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 661f9c81638e2effad7191df19ddd1cad88d83a3dcbb33758092f214ef18fae4
MD5 9d585020512755f6427fc0412c0f34fc
SHA1 f8cfc3d810f6aaf1d75271fa22145bcdd51cbc83
SHA512 b1c2adf0d823e50ce816cb76cca0a57bb551fc6cd3111e6ed07975cdf7dafeb3eab65f79024e87c747f1f697ef023276cc5bd02bb8e890448819594bb43e90b2
SSDEEP 768:mrv+4UNbdH37P+LeSFOUUPtX4fouOToPvB2thtA9VABueVH1SlX:mbsbh3hFsnnwthttgEH1Y
TLSH
T16B03C072A8AC8973EDE6C398710B71432FF4826396D00FD499CE1B4E069B9DD470BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download