hxxps://cnn-health[.]storage[.]googleapis[.]com/c34a9fe3538d42[.]html

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/09/2026, 01:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cnn-health.storage.googleapis.com/c34a9fe3538d42.html
Sample260910-b6k74av1cx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1892	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334783338272846"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2043432456-1617298091-2772621413-1000\{873535C9-034B-44FC-9427-03D89754F4ED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5332	msedge.exe
5332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 5212	2036	msedge.exe	80
PID 2036 wrote to memory of 1892	2036	msedge.exe	81
PID 2036 wrote to memory of 3944	2036	msedge.exe	83
PID 2036 wrote to memory of 3944	2036	msedge.exe	83
PID 2036 wrote to memory of 2388	2036	msedge.exe	82
PID 2036 wrote to memory of 2388	2036	msedge.exe	82
PID 2036 wrote to memory of 2388	2036	msedge.exe	82
PID 2036 wrote to memory of 2236	2036	msedge.exe	84
PID 2036 wrote to memory of 2236	2036	msedge.exe	84
PID 2036 wrote to memory of 2236	2036	msedge.exe	84
PID 2036 wrote to memory of 4792	2036	msedge.exe	85
PID 2036 wrote to memory of 4792	2036	msedge.exe	85
PID 2036 wrote to memory of 4792	2036	msedge.exe	85
PID 2036 wrote to memory of 4588	2036	msedge.exe	87
PID 2036 wrote to memory of 1308	2036	msedge.exe	88
PID 2036 wrote to memory of 5012	2036	msedge.exe	89
PID 2036 wrote to memory of 4588	2036	msedge.exe	87
PID 2036 wrote to memory of 4588	2036	msedge.exe	87
PID 2036 wrote to memory of 1308	2036	msedge.exe	88
PID 2036 wrote to memory of 1308	2036	msedge.exe	88
PID 2036 wrote to memory of 2456	2036	msedge.exe	90
PID 2036 wrote to memory of 5012	2036	msedge.exe	89
PID 2036 wrote to memory of 5012	2036	msedge.exe	89
PID 2036 wrote to memory of 2456	2036	msedge.exe	90
PID 2036 wrote to memory of 2456	2036	msedge.exe	90
PID 2036 wrote to memory of 2352	2036	msedge.exe	93
PID 2036 wrote to memory of 5508	2036	msedge.exe	94
PID 2036 wrote to memory of 2352	2036	msedge.exe	93
PID 2036 wrote to memory of 5508	2036	msedge.exe	94
PID 2036 wrote to memory of 5576	2036	msedge.exe	96
PID 2036 wrote to memory of 5532	2036	msedge.exe	97
PID 5532 wrote to memory of 4460	5532	msedge.exe	98
PID 2036 wrote to memory of 3124	2036	msedge.exe	99
PID 2036 wrote to memory of 3124	2036	msedge.exe	99
PID 2036 wrote to memory of 3124	2036	msedge.exe	99
PID 2036 wrote to memory of 2328	2036	msedge.exe	100
PID 2036 wrote to memory of 5800	2036	msedge.exe	101
PID 2036 wrote to memory of 3772	2036	msedge.exe	102
PID 2036 wrote to memory of 5928	2036	msedge.exe	103
PID 2036 wrote to memory of 5928	2036	msedge.exe	103
PID 2036 wrote to memory of 5332	2036	msedge.exe	105

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cnn-health.storage.googleapis.com/c34a9fe3538d42.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff8ce5ec188,0x7ff8ce5ec194,0x7ff8ce5ec1a0
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,13273068758975768803,3790146242918643301,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,7992963561695583047,10830338350767253571,262144 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,16641519952182718769,12943770889834208938,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:13
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3304,i,5224915046634949053,14439604937001586925,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3308,i,2294432970671673973,10474626631007958765,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,8019609074247958633,12320325098791601184,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,11666585565477216336,4661964609006189157,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:9
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4272,i,16472351844097440596,14097511327558546515,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4284,i,14110822838499127799,4177677786456492613,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3348,i,10548282722537519988,3639669815782175810,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3352,i,5334320218013360558,3983087679003427622,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:14
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,14961586272848400827,1372085364749586815,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,14961586272848400827,1372085364749586815,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,15704574952286925446,1349395862218663924,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5532
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1144
    3⤵
    PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6536,i,934146316172522832,5739603172864246808,2097152 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,2158723636230244088,14151496016200579907,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:14
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,10176015900535682071,4900653961470448873,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,649915352554165341,12003925168556745189,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:14
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,5901331456515365098,10992114880544636718,524288 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5580,i,7679192754528853451,13760833454251003284,262144 --field-trial-handle=1896,i,152114258191616316,8815147619188183855,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dcfc4c476f41db2d6042449b7b855b9751140e2127be8e8208aafd46a5893b7d
MD5 08e448ed3ad1512fa216c2eea50fff9a
SHA1 2d684e6af180cff0b8adea283dbb0c009102fc3e
SHA512 f9ebe4d980c84e665fbd9643a31fbc7a6b08028d289cd54ea7400acc1d6a7d231dd7952c9c49775207225efebf00cdaaf6a2b295dbeac8f234ed7bdfa52c4693
TLSH
T122D0C073050D0000EA0D41312073C7050313BB210E013C03B855F8381D708C9438F1C0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 89ab71a3a4e732da8cbbe2e13ba149e13c94226b7119c8a0598106b99907544f
MD5 ca938be236bc251b79a4ee9dbf06dd19
SHA1 2ed95a78846a95a90b8d9b70e9cdc6188f0ce608
SHA512 caf4662a529a373a26b513e285938286f3af46a8729fb4c0be324b084fdba1e10dacca4b8f67585c4a5c6683f45dc7e259548eaf3ffb985905aeefbb7225e0e7
TLSH
T124D0C073050D0000EE0D41312073C7050313BB210E017D03B855F8380D708C9438F1C0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f073b650725bd064b2c1e2ef194ca72d7dbd202359143eaf601b6108f307ba6d
MD5 99b8a0cd23b203a6ac7fad1c5e4587d6
SHA1 5ff8f7e00add5d77c8e0ec547d8489350a69c2b8
SHA512 7c9b792d0dc282cd212c65ac943b230d2b8f3f9f43541c69a79d2e7ac161f22ef42980dd502af7d0bb559d132004cbb8f0cb9756ca663a81ddb10212e80a85fc
TLSH
T18461615212911C9BE3E10635B0F21BFD7D7C44A94E67DE3BC15F8DB75630B22E106608
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587f5c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587f5c.TMP
Size 3KB
SHA256 48e53d30a78bcf29a4710ffcccb73ad851dfe8f2d42acf119d445ab2e63ea16a
MD5 53b2c34a9cf2b4b013d7a7dfa6b46d40
SHA1 ee3bd87b06c22e2f9cf417a454a71a226a7bc85c
SHA512 d3592ed08e1c14108285dc77fcf23330bffa678c4c61067185f94c70a5600ece5a44c74a9764bc4dd7921af3ef795ebe69aa6d2882868db4a589ffb783751361
TLSH
T14561609212912C9BE3E10635B0F21BFE7D7C44A94E63DE3BC15F8DB76630B22E106608
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 081af897c3cb3c1a106bb6bbdcd237655e8047f7c6f87077522151fce3d8640c
MD5 ba0372b8d2e9f30b0388a8da74925e58
SHA1 5051e4558edc22f0c713f60aff48429cf5b12284
SHA512 f657eb62f61eb913185fe2186140f2f2cb266a7ac304b022eed36b2f938564fa289dfa2db7e5ffde785bfb3599a411416f91a794047e0af8bc280e2ae4ee5168
TLSH
T170319CF387E9866EC9015AF0AA14BE17CF2C0A15436C3D5A89E8BF1793E20B5E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 91ba0af67973c98ef160b1cc5a07f74e4912a8e162f3b3295c200ac283d51e26
MD5 24376b1054cc0391704a8e2cef4c2929
SHA1 473672a77e88cf7b635e5fd4e25fa0b568a4681a
SHA512 e76c5d6704240dd89f12d7ea492dd2f8b76d34b4b7bea09efa29a94f0225897c30da871f865b584e675f593aa82e8e9ced7d9c73ac7229890e124a7536cb4ed6
SSDEEP 192:sxZICHRVyM/jK1Ml8UQwbgK/fA8sC9BQIdpqeV/W6+WNIL3l/Y01uxcmIg5fJ:sxZICHjqegK/fA8sC9BxB/bIR/5WD
TLSH
T12B52F966AA345977CCDBD20DF951BF93E6F9157296900E44A9FCCA1C00E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 77e80fafafd2917c7cb79b714800f47e778f0d6acafeeba78a1eb9c707e2a006
MD5 8016f1c1e66b9a9dd8c4519d5a17ad47
SHA1 359c7a9b53c7f7a49b6133962384fcefde5bc32b
SHA512 1cf2496fbf8c035af9c72292f2c965706079e6131af8817d1aa54e0f7ef1e9f670413794411ec4e17b437466db5328dfd4ea9360e260715338192869a9f3ae2a
SSDEEP 192:sxZICHRVyM/jK1Ml8MbgK/fA8sEBQIdpgeV/W6+WNIL3l/Y01ic2mIgrJ:sxZICHjDgK/fA8sEBxD/bIR/5h9
TLSH
T18F42E822AA346977CCDBD20DF955BB53D6F91572D2940E44A9FCCA1C04E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 5e6481a7302c811e24e33095b134c8d9325709a6b9a9793912776824387eb31a
MD5 5935b5ad4a1beff31e46cb076be8b213
SHA1 c1511645156a28b1fa3d53e83ce2a1731c7a35eb
SHA512 c8c735dfad05070546828f78228d8fc19f801c008356e893835282581f97d3408f277042d9933520a9e94dd294d05df6285fc30b9beefb27bafd8a5cc84c78bf
SSDEEP 768:Gz4bSV4b+8b4bm254bRWRmG4b/QB4bH8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3c4g:GUu+68si2y1WRmlzQqju1jaKDILpZ8Ul
TLSH
T161E22A3B280CCB7E4F844E5CEC26AF966ED802CB66684D5447FE494C03C76EB512A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0665108eabec8de6373a9d8ed2d5b1302298bf2b39d512837b225c6179e99420
MD5 b852c75d166973e7901026477476b70d
SHA1 5608ffc05feac6648b72b5e8c6565d2263d86561
SHA512 386f84c66b76f1831ba792caf6980c16099ae2776940f545cf73f8a6e435b4a1d17036a77d1df6c9ce7c166e9287937e9f1103f409a335a27b9b075484e46f84
SSDEEP 48:KgXIhKAgETydB+dhjDj6tbIJIOx6K/PXn6zhqcgPRzydcJ6+MuSXtK3OIO2XK/2D:KgXmKAg2q2kKXKau92KuEa
TLSH
T17791779235BA02227CFD3908A2D2B766064677633189E43B3BE940B64E67F105DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe591b2f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe591b2f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e2a80efccbbea281f513725a35a86c92ff38812d27b78d8d03a645d9a19826fd
MD5 8dc2d7dcc0797a64f2793d00c18910ac
SHA1 1cc1f222d0bb48bf17ff6fca18359c675a92fc79
SHA512 366eff3531702bdabfd2897ab0d5aff339f3870879a9e3a675071d0c2e8d5e02d6d9c51ac931f39c1318313f41da7260709333c27948799a317f9cd42368fc3f
SSDEEP 384:kZcIh8NK0h6LqRTr3b+AEdQNb+2y6nxuvzxV+Mhdpmf7o8:ChS9PrpEyhlzn4184pmf7X
TLSH
T17D827D315C68AC775DE6A646F84732038FF891679BCC6E80D5EDEB1D04AA26C131BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b66a8377d26020ae11cddc969a35e34d39166976c34003f56a55dbc43f63a344
MD5 d8602a5d0247c77726850f4f5a9881b2
SHA1 9bef2cb439ad2951256ee8f624ebdb463fa72742
SHA512 8a41315f855b20adf076bc0a667ecc90fd2d9b6f5c7525c761a5bea69c0b29100fc7dfd53c14a6afc19fc692cac94eb8a84a4708b133d26ce91783cea1ad8def
SSDEEP 384:XiFiZcIz8NS8TUNTUlIlXh6LqZTr3b+AEdQNb+2yznxuvzxV+Mhdpmf7o8:SFQzbwgL1PrpEyhlMn4184pmf7X
TLSH
T18CC22AF108D79877D9AE9747A77E2D034EBCC067B588A980B3D89A0CCC5617FD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 64d27c1603fb071850245695dce07d673cfc11ec447cd1a13b83499ac8cb7e31
MD5 f29b126197b57efdfa5c40a6a4970eab
SHA1 df0f265c7a29b860b19fad4398b3a7ca9a15f673
SHA512 f00047da812cb2ab682a7bd9895b6f9c23c4ea0b4683a3af07f95e5c82f14e1b46f937d2bcc72da3b4cca6929de5182792988cd557029256d4a84e00b8b12b83
SSDEEP 384:GZcIh8NKXh6LqRTr3b+AEdQNb+2y6nxuvzxV+Mhdpmf7o8:Uhn9PrpEyhlzn4184pmf7X
TLSH
T1B3827D311C68AC775DE6A646F84732038FF8916797CC6E80D5EDEB1D04AA26C131BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3a87da045c8cb76d1fea4a43af29f62c445854e62fe495f795e1310efc6f2744
MD5 dbf1aa27c5cc361eca773e169fbfeb6e
SHA1 f5b7cbba81e5c6464609538941b1c55ecb257cfc
SHA512 fa21f96ec5e88e1febf5bb9b65dc835f51a4ec5fdefb816cd540861f6f67733b30251f7418875949429dbc15b00f45580c42e81deb33c1923e3cfadd835eaed1
SSDEEP 192:nRGNN6yMQmiUyTJm91Y3b+jc3+FdPoOMna6LZU6:RGNN6xYu1Y3b+AEdQZDZU6
TLSH
T13E02E835AC786C7B8EF26E49F48736138FE4117BD9942F84D6E86B1C04D765C2307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a574e7b8907c6bd3b4d5de332205eab46cc7e754f7d0b4fb903779f13fb8461
MD5 a90db6a64076eeaade2c7bece4e10047
SHA1 4b047e74c1563b4b3fee937935d2ce0fd3272576
SHA512 6ac9685bc92720587b27fa644b3c4e90751f299004361de25c09c8ce3a8d2302f50428e38bb22a619bab442c041b589c85fe474b682cfc42715e1300e880e70e
SSDEEP 192:jGNT6yfQmiUyO09BY3b+jc3+FdPoCsb+2yq4MaMrqaU6:jGNT6gYBY3b+AEdQNb+2yanU6
TLSH
T18812093168A8AC375ED2A945F44735038FE4426BDB897FC1D1EC6B1C05EF66C230B856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05cf457f-903a-45d8-b26c-646bb9eb665d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05cf457f-903a-45d8-b26c-646bb9eb665d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download