b079749021abca387bc8963045b748a7b4769fd65907aac5a9d9b00dad91e752

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 45KB
Sample260925-g35efsbd75
SHA256 b079749021abca387bc8963045b748a7b4769fd65907aac5a9d9b00dad91e752
MD5 8c17034b18b69c965e28a8d52d308d01
SHA1 9b0ed7bdfff2729b10d0f7d373553f947242b2da
SHA512 557beab25e9530eb1237d5ee396bedfa43b425998e63a62738c63fc2c52164425fbee360bb844a07c5b66c2fd7891892805fb9165a5d99c56cc72c7db52c5b8f
SSDEEP 768:0PWO5/xXiK8FZFUkT2rv5PkTqEA1pfub0RWQ0FlukrBrUZRBxbJXLIQmOK4ROK:yRzGIh0LTK
TLSH
T1B423D673658C20392237835354E0B76DF965C602CB33495AF6BCBBAA8FE3D525933224
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3460	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347916947236908"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{23050053-DD9A-4786-A396-8210B62DBBD4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 2476	4956	msedge.exe	89
PID 4956 wrote to memory of 3460	4956	msedge.exe	90
PID 4956 wrote to memory of 3588	4956	msedge.exe	91
PID 4956 wrote to memory of 3588	4956	msedge.exe	91
PID 4956 wrote to memory of 3588	4956	msedge.exe	91
PID 4956 wrote to memory of 3632	4956	msedge.exe	92
PID 4956 wrote to memory of 3632	4956	msedge.exe	92
PID 4956 wrote to memory of 4248	4956	msedge.exe	95
PID 4956 wrote to memory of 4144	4956	msedge.exe	94
PID 4956 wrote to memory of 4248	4956	msedge.exe	95
PID 4956 wrote to memory of 4248	4956	msedge.exe	95
PID 4956 wrote to memory of 4144	4956	msedge.exe	94
PID 4956 wrote to memory of 4144	4956	msedge.exe	94
PID 4956 wrote to memory of 4552	4956	msedge.exe	96
PID 4956 wrote to memory of 3524	4956	msedge.exe	97
PID 4956 wrote to memory of 4552	4956	msedge.exe	96
PID 4956 wrote to memory of 4552	4956	msedge.exe	96
PID 4956 wrote to memory of 3524	4956	msedge.exe	97
PID 4956 wrote to memory of 3524	4956	msedge.exe	97
PID 4956 wrote to memory of 5336	4956	msedge.exe	100
PID 4956 wrote to memory of 3804	4956	msedge.exe	99
PID 4956 wrote to memory of 5336	4956	msedge.exe	100
PID 4956 wrote to memory of 3804	4956	msedge.exe	99
PID 4956 wrote to memory of 3584	4956	msedge.exe	102
PID 4956 wrote to memory of 3316	4956	msedge.exe	106
PID 4956 wrote to memory of 3492	4956	msedge.exe	107
PID 4956 wrote to memory of 3908	4956	msedge.exe	108
PID 4956 wrote to memory of 3056	4956	msedge.exe	109
PID 4956 wrote to memory of 3056	4956	msedge.exe	109
PID 4956 wrote to memory of 2000	4956	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc0b54c188,0x7ffc0b54c194,0x7ffc0b54c1a0
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1712,i,16928253419365837607,7215671919156203058,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,8258260554078828206,2637353141970961333,262144 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,14951406044756487597,7395549230851546730,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:13
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,4406878923718869192,18288863452778976841,2097152 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,11790657086612854132,328017714529772121,2097152 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,6741526914750726496,18022067165072867933,2097152 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:9
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,10931916551349315544,14763109302741461532,2097152 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,14011532642971760312,1282996164848433987,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,6607441885009542083,17533513073089237585,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,1865426864474513020,6605534589669681176,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,1865426864474513020,6605534589669681176,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,5122732641800865551,9737290017678877576,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,7678000249262938286,10725318502181092209,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,4491401822862516528,860439021466038604,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,5761930609508412922,10383608211493742065,524288 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,12558521418204122594,5256868438609982684,262144 --field-trial-handle=2528,i,15391013334083323883,13475290671023360948,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3c87ca4489dc41111f5540fc227aff33be86e057f1775869639cc6c2e591b6bd
MD5 65eed6062aee6c052bddb07767145304
SHA1 bb0f2f60e916494bebd11034bf0bcda2410660be
SHA512 0a3868fb8750e4ffa4b75a07de6f181663efbd85a9b326055a963ab7390364bc9830f14b9c51f71969667cae6ccfaa25be8ef548d4ecab550203fb2ef667c1ab
TLSH
T1EB5165A2B9A972D4FB6561B0CFE05DC37E36CD71EC83AE0715A4C5F84B463D8808C258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5952f8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5952f8.TMP
Size 2KB
SHA256 0d456214d20029e39ebdb013578818a1c9adf80c8e7b6b70d122f39462519c6a
MD5 5ea63840b690ddc34f808d38cac4d590
SHA1 298a7c32122cea428986c25c9aa2b2bb2ba644ca
SHA512 aab717611007d8c6d2982b1044d9a8eb5d2706fd82211ffffe2fa96310f58e9da908cae2a3228c69d9b7ae64a3dc7d68eef2cf8a27f66ac8a1aed104b8d96fa4
TLSH
T1475165A2B9A9B2D4FB6561B0CFE05DC37E36CD71EC839E0715A4C5F84B463D8818C258
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9e74c32c9c6056369a795d8fb2dc02e8e4cc472a27196a4fafd2fd622220012c
MD5 78be4e8adefc07bda860d1f8d3b98fe9
SHA1 9f8ddca3782b682196ef5e878df9b981865c65df
SHA512 3c0f95d782dc950cad8bf7585777d133d02ba3b3628c2d12f64925171fcf172ea465475c2f53f8618ca51abc875439fa50ee31c6e040c5836b08184a603ba979
TLSH
T1E0519FF7C3E8867E890156F4AB146E2ACE1D0955832C3C56C9E4EF1FA3E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 44b5ac7cfdb826fddfae8096c09a268a8fbf69f88d19756877bde777bf3edd36
MD5 ef1b6f85a22995bcd5a1f37a0e8e12fc
SHA1 c32f68955cdf9ab5eb2d37ab8c8c192bd3558b35
SHA512 bb7a43ea68dc97e80e3495d04e776d43067a20a938d7fc41a5f56c479b77c1d0eb6896967d6df02f56e15b43f4c6964dc9839b73b4e0aeee4579fcdd88d301c9
SSDEEP 192:sxRbRrb5/fsks4XyYh2zoA8p4i/g6+WNIY28cbGsuIgIJ:sxRb15/fsks2br7/5IPxGs
TLSH
T1F032B815AE28A93B5CCBD21DBB657F53D2FD5033A1D41E48A6FC8A1C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a48df8dac375d50f340541c7ee0e7a677548b385b6a120a6eefaeb72633d974f
MD5 527c689172b4421b870c93bd491843d9
SHA1 721633172d50d58a4233ba7eee90dce76edeec89
SHA512 e62781b65d17325259b5468177cfd95ac24648399ad0d77e46180fa1d31617805a9ae9015a958d16d2eb35b247e6326a8bd7f27bd8a6396a1e304236629b871b
SSDEEP 192:sxRQRrb5/fsksQXyYh2zoA8p4i/g6+WNIY2HcbGsuIgD7J:sxRQ15/fsksebr7/5IaxG5
TLSH
T1EA32A759AE28A93B5CCBD21DBB657F53D2FD503261941E48A6FC8A1C04EB6CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3de6629f0efd8bc6521727e01e85bb1d18b6a94a04371380db472bbaa9568dd3
MD5 38c85b22eacf6c007ad17c7701160a1e
SHA1 5b0a1bdf13606dc3381bb821cb90492921c657c9
SHA512 d904081739355c34fe15d70c4f4ad1f9ea28d5c1ed00688fdf3c353dad369774a60636fd66e441efb56e87714bd79c93b84925f982de07222283fe562bdbb8dd
SSDEEP 192:sxRQRrb5/fsksaXyYh2zoA8p4i/g6+WNIY28cbGsuIgD1J:sxRQ15/fsks8br7/5IPxGL
TLSH
T10632B915AE28A93B5CC7D21DBB657F53D2FD5032A1D41E48B6FC8A1C04EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 57ae52119f8ba6166170e49e86fae596839a6f6daa111907e6c1d16d7b208ca0
MD5 b22fc30367aea49c986d4fdd39876b1e
SHA1 6c3b8e8d084c7125ba2ec919f0f4930f82dd3ecf
SHA512 9c3bee7fc74ef9fdf7ff6fd656d18f69a436f4a4d60f38180654a60c09943df430c8f3b4226741fa3c7271dc9276b459b134bbe1b6dcc55fc6e8cce732b531d6
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW2roHr9:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vp
TLSH
T164B2DA2F644CCB7E8FD00A9DAC5A6F976D9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f81f7dd042d52b89b2bb30e1661519e2d3ad0b9b9ae36160ebad29118ee4ada3
MD5 38a95d3d7ee62d91e5d33503db6098a6
SHA1 adf8533cb95123dd43db82d56209a1223573f6c4
SHA512 ccb0a9a0e634470104e58dc39e4d6c314c408328115d3fe0780f68b2de4d9f2b41ba56eb37849c2ca49e3b24311a6f3d252b74ff7883096499b43d3caed5d1fe
SSDEEP 48:KwVIZKGEkDyjLYnrN1X/I9KAEozyJOI3KjawN:KwVCKGEi1/yKAEG6OMKjaO
TLSH
T18991934131FB221139FD651891A4CA9F464133633019EA7F7BAD04A30DAAE285DFFEC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59eb12.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59eb12.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1dc996bd33e59a59bcad622d9f309ea4b0350c6c17cf847122936bc7b4103396
MD5 1f6e2fe5c268da5321ef1dce68e54d75
SHA1 b0aa81aafcd917bf2199449b85e61eb9a65f39b3
SHA512 2b6c3088c38308ca98e3580aa49b00c945d766288d52dda890ab75886158a217cbe25f4b746c35dc86bd402b7797ce76f9e27bf5ab21a0e26abd9ad201701b31
SSDEEP 768:o03Yz1gm1B9c+eDmGA5b65Q92RQMPbXRs+2T:o03YN2AF65dQwRsLT
TLSH
T187F2BF72ECA0DEB36CB991C03647B2027FB88563D5CC969094E96F0D05D79CE431B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 72a36eafec53126a871e8e0c8e58d7eb1b41903e5b9f74f7d35364389a18caed
MD5 9ede0856001d7b28a606a6b129886b54
SHA1 e917200ca83ed9bf3626594c1bd01a9b4afe25c7
SHA512 1f82e3217e92d1d69f9680cc9a85201c1a903c6bc78e9a7faab8492d50e02398e1540bcbaabc15aa74828ce06f54ea512189ae9cfd0c1a11ee56b4391b483ad0
SSDEEP 768:z/UxvxjgC+N3/V1gm1B9c+2DmGA5b65Q92RQMPbXp5U:GZj3+N3/3uAF65dQwPU
TLSH
T15503C036ECA4ED735CB5A2C03647B357BFF8456390C85AA449E96F0D06C768D830B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2286b4c1989f668ee6a171f8941501bdd5d57ee2fda5bc100071abf0f1092dac
MD5 f54d72ae7333e071faa8fe58f5732340
SHA1 41b06fe54e43734b70617cc5aa329b636268b483
SHA512 b693d463f6b6191b823779094c6a08895e6f9768e4d9a7b04add49070f61710d208fb77dabab074a06985933a40451d20ca5803f08c1f1c77c5263a0ac5b4c5b
SSDEEP 768:P03/z1gm1B9c+eDmGA5b65Q92RQMPbXRs+2T:P03/N2AF65dQwRsLT
TLSH
T19EF2BF72ECA0DEB36CF991C03647B2023FB88563D5CC969098E96B0D05D79CE431B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 aa0e45908ca53ad1b13dd9b0aaf3ce8859766ef70ec3df8a3a515c4c00b8e25e
MD5 292df99b2ccb807096485bc555a4a93f
SHA1 fe5e4b7bb474c7deb6cfff24f7cb6eaa19f914cc
SHA512 062852a2d3fc18168f6e3cde214c166b64cfe42e67d2d3980050f97e032b7472e0334eb6671da526b1176774465e0811d80f905e503339d8d4fa095b8e390e40
SSDEEP 768:QFQ+39wg6z1gm1B9c4DmGA5b65Q92RQMPbXRs+2T:D+3GDAF65dQwRsLT
TLSH
T1C803AE73DCA4DEB7ACB956C0764772026FB84173C4C9D6A0A6E9AE0D01D75CD430BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 21380de1da3eb6071c0c8ae80c8e351e4af7eaecc16950e4e9b6cf39b1317e79
MD5 af811900f8531cd3c161cb7d8a5b78b7
SHA1 a1f7784ddd9c02d040de0e9bf0a1faffed8f4b63
SHA512 39f60cfac4df7a856934d56df465da744dfe110851662ffd01d68dacf44364305618d15c768551b956ca2dcef6f145d7b764f229a36d4dee296401dee2129bf0
SSDEEP 768:U/UxvxjgC+B3nQqSgm1BTtDmGA5b65Q92RQMPbhFj0O:BZj3+B3QP3AF65dQiFQO
TLSH
T1AC03C036ECA4AEB3DCF95280374BA35AAFF84473C1C955A049F96F1D06C768C430B85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60349d27-209e-402a-89ae-c97b210bd975.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\60349d27-209e-402a-89ae-c97b210bd975.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download