6d829f6b6224fcf543050580937296d30c512ac6bf9a8e8ddd1f186cf8600676

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 496B
Sample260623-akbk4ag17p
SHA256 6d829f6b6224fcf543050580937296d30c512ac6bf9a8e8ddd1f186cf8600676
MD5 577e75a7e79a02035407e42566eabb37
SHA1 176cc9e2b42adecc45a120d1d283c178a0be765d
SHA512 b6d620cbc1574a74e08c63a9c10dccf342c0f52850f9f965834ae7a06cbcc685ec3c05d52147bd2d4386d09b89c8e5259f1d26b25363e2bd2e81ddd5c1542161
TLSH
T1DFF09E93CC20C48D5730466A7D72F06CCC8DB90D6AF2BC20B99614FE4DD07608D36554
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3592	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266473565592806"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-28459746-3881314244-166055492-1000\{BE131AA1-0B05-4B91-972F-DE0FC564BF5F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe
2604	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2604 wrote to memory of 1960	2604	msedge.exe	88
PID 2604 wrote to memory of 3880	2604	msedge.exe	89
PID 2604 wrote to memory of 3592	2604	msedge.exe	90
PID 2604 wrote to memory of 3880	2604	msedge.exe	89
PID 2604 wrote to memory of 2292	2604	msedge.exe	91
PID 2604 wrote to memory of 3880	2604	msedge.exe	89
PID 2604 wrote to memory of 2292	2604	msedge.exe	91
PID 2604 wrote to memory of 4124	2604	msedge.exe	93
PID 2604 wrote to memory of 4124	2604	msedge.exe	93
PID 2604 wrote to memory of 5360	2604	msedge.exe	92
PID 2604 wrote to memory of 4124	2604	msedge.exe	93
PID 2604 wrote to memory of 5360	2604	msedge.exe	92
PID 2604 wrote to memory of 5360	2604	msedge.exe	92
PID 2604 wrote to memory of 4380	2604	msedge.exe	95
PID 2604 wrote to memory of 972	2604	msedge.exe	96
PID 2604 wrote to memory of 4380	2604	msedge.exe	95
PID 2604 wrote to memory of 4380	2604	msedge.exe	95
PID 2604 wrote to memory of 972	2604	msedge.exe	96
PID 2604 wrote to memory of 972	2604	msedge.exe	96
PID 2604 wrote to memory of 2924	2604	msedge.exe	99
PID 2604 wrote to memory of 2828	2604	msedge.exe	98
PID 2604 wrote to memory of 2924	2604	msedge.exe	99
PID 2604 wrote to memory of 2828	2604	msedge.exe	98
PID 2604 wrote to memory of 3144	2604	msedge.exe	101
PID 2604 wrote to memory of 5704	2604	msedge.exe	105
PID 2604 wrote to memory of 5648	2604	msedge.exe	106
PID 2604 wrote to memory of 3884	2604	msedge.exe	107
PID 2604 wrote to memory of 4252	2604	msedge.exe	108
PID 2604 wrote to memory of 4252	2604	msedge.exe	108
PID 2604 wrote to memory of 3336	2604	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffcba6cc188,0x7ffcba6cc194,0x7ffcba6cc1a0
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12227056240920568748,18310794572143581158,262144 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,12259749212346305805,7533834779523299345,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,8901423935072462172,5717884499111788788,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:13
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,10881158537995580446,5235328187674325866,2097152 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,16181540278133637372,6801862518415408442,2097152 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,2086135498819482399,6725447014281040756,2097152 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:9
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,4109227640649016187,15644382688966960915,2097152 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,1078931509029094268,3309461797188493448,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,17658304906122070450,7245530286068950998,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,8564050230525839782,5129230230962692804,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,8564050230525839782,5129230230962692804,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,10547099214307354326,16770762629488432776,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,8889650886998574503,3826809540619185397,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,7682644596395423628,740828472562784319,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,16848308740723027311,14356562924911739002,524288 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,5506977715521037884,16781013108924517196,262144 --field-trial-handle=2632,i,16114398908421326284,14980996293136621328,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b778cc535cfe9ef8131b9d727f221c5d63c7f15bcd4cd19db345f2c97bdf5594
MD5 a4b8f3b6133ca4686118d40b6c8d4ea7
SHA1 cbca41492cec17181764c1371da84a0e0481f93f
SHA512 65135f099a2e372c9a11538ad8ff73abdfa24612895545773034b613318a9166b5560e41026d2ec245dda6b088efde1566126dae35182ddcb3fe795a786554ad
TLSH
T1B7D0C0743F42F108C04904F08534EF101337B81230839900F070C80E84E40C0A3C9053
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b4edbbe62f29386512f6cd1726c675b23fdeee21a26a2896a394ff9b87143167
MD5 c0060c375421fc206e85d98fc2ea6677
SHA1 2189b0dd881564dfef39585cc2cffda4dcd3ec91
SHA512 338dc8a4791fbbe759582d4a8fd55c1a6245fcc722bff11ff926118daa91041d62e98b05cb2e63b22ea119d41a557c511dcfb12592ab416dab9980af0b5ca713
TLSH
T1F2D0C0703F42F008C04904F08534EF101337B81230839900F170C80E84E40C0A3C8043
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d819cb10fa8a348a4af815269c17fd47211abca850939620ae4e04d0f400f440
MD5 5e84eaede0078546d603cbe44d442f98
SHA1 c02c336276c1afae5fb680db7ed085089c6601bb
SHA512 714b1b86197a157b16cebf5db96a3a965328c8733f8335c49df48e7c8a204f8dca5efe2ca5854baab865fe4db0ddf764a2290672cf1c677eb1ab4d9507ad55d9
TLSH
T130518B40033D9C21FBB637BCA1E321693FBCCAD99F0B6E9C086990748EC7B0681415E6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592e1b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592e1b.TMP
Size 3KB
SHA256 f76fb85b1c5cae9a9ef3a1f5abf0093731aad093434cf52a00b26e4664360a25
MD5 6003fad1a951c92a6e4b9eb79acf45ea
SHA1 cf5d6bbd104e4703898bd33a5421cfea7f3d4e4a
SHA512 24beac5464ca5e5c7d251453eff78472b7a58c2f7bc4cc01177b6e7ac6bc279f95651abe7ae3535a51d23e1f15726f614be4ac4a263517814972d376a3cff018
TLSH
T141517A40073D9C21FBB637BCA1E221683FBCCAD99F0B6E9D086990748EC7B4681415E6
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c90c4d030bcc23deb60a4e7384f7c10ddc1e15e37bf7ed51862746ea075eab0c
MD5 1204fc84f36540110fc0d198479665af
SHA1 45c5fbedbf0a6a7780b4eef64918e4216aebb017
SHA512 020ca2c364e99c3c724e51793ba30721648187315f3a9f900baee7341c8b7a50ae06c441d2c147d57175d59088d8f028ea615fe139e15482f6069c853c37452b
TLSH
T128419EF7C3E8857D990156F4BB143E1BCE290954932C3D5AC9E49F5BA3E2870E54088E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 481ba979476c5a731249d0e1e7c7d3a747a382209cfba9717c1fdcae4071099b
MD5 4c698f5c645b80af1a5cf14c86e00c46
SHA1 2eb499b72a3f8e7f4975efaa9ad4895d255f1795
SHA512 7b03f28f1f0a7b1c99512b368044e744c6cd99d7610c98081530a756d771c772b83fb207bac429d5f1e5dfe15018e1bb0cdef516c7752b3ead05f20697fb511a
SSDEEP 192:sxR9RxyM/jK1Ml8wF0/fusPacGqZzoA8p4z/g6+WNIYYMHYuq8+GnIgIJ:sxR9lb0/fusPaflW/5I0q8Zs
TLSH
T1E152D9166A24997BCCDBD20DFA557F53D6F81573B2944E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 be8d65e19cc6e95b96d2f66cda41098abae2a62eb4461020f94ed332dd7131dc
MD5 692b73ed95966e691d7632e084b2a610
SHA1 250bb0564d1d2aa913650f36ba84ff2fd9ae9b91
SHA512 6cd2b89695a545870fd7151831c8c2427cdb5dff792a85eefa1c2803dd3b7d33bbfb016e36185781ca21976750acc72bf8e6cb4d0d0983d7d99661d517e575d3
SSDEEP 192:sxRmRxyM/jK1Ml8wF0/fusdacGqZzoA8p4z/g6+WNIYYMHYuq8+GnIgDOJ:sxRmlb0/fusdaflW/5I0q8Z2
TLSH
T19752D9166624997BCCDBD20DF6557F53D6F81573B2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 215714cc12084b4b766fe3fa35f1ba762a75846f370b0aff7918518cbca6d3bc
MD5 acd336aa57c6a1bc3f0d32c3caaaa3c2
SHA1 7d32ade82cc8cbda80a519b37145e8fff08d342d
SHA512 817c00488d1a4f53259d662c079da2e0966f753b1ed0c4908994dd23142c25701d280ccf69c641de6e38a27e4ed6556ceb7bb341db17eeb18a396af2931aa5ea
SSDEEP 192:sxRmRxyM/jK1Ml8UQ0F0/fusd6cGqZzoA8pez/g6+WNIYYM8Yuq8+GnIgDUJ:sxRmlqC0/fusd6fls/5Ifq8ZE
TLSH
T13B62C716A6249977CCDBD20DF6517F53D6F85572B2940E44AAFCCA0C00E6AED621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d4f538c50708502fd8d80940f2a375e9f69ffa6019e893637b7cd84073429d0e
MD5 9f711b46894f242c70fe6c8918e2a71e
SHA1 023f818cd899db3f946185730c0cc30072860dfd
SHA512 5e09ed2bdea2310a352dff307dba813506b0ded31e6c25ccacc95fbb52e5f4310e691023ffe3d9628c334b3e597feef6bf3b1f8e67fda9f2141da2cec72a738e
SSDEEP 768:j+8uI7WgNVfq38F1+UoAYDCx9Tuqh0VfUC9xbog/OVbBJ69rolig:j+8uI7WgNVfq3u1jaaH62lig
TLSH
T125C2FC2B640CC77E4F844D9DEC25BE966DD801CB9B988D5447EE890C03CA7EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c896.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c896.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bd06a03a847334a85e832324fc00eb656443a6335e0089feec87e0c5e478adf5
MD5 f711b44acef4b68d6e6d5083f3c52381
SHA1 711a4f69cd15f31dfcc976951c436745c17b4446
SHA512 0e4577af7ebc5a4e275cd56a80e446c6abbba31824ad41d310dc27149b9bf4dbab0b214bed5504788fa5b44ddce3a183750065330a28cee38ee6dc3a78bc98ac
SSDEEP 768:xj+9k3ESygaffqfDQfUIyJ5p3EFlnNMLmOR/+0LvY:s9k3EhfqfsfMp3EFlSCC/HvY
TLSH
T12EF2BE3298A0AD574DE686C6750B338B6EF046A7D6D53A449CCC7E0D44DB7EC130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2f58fc67018828fcb34f7c5c8e9826141c52f6fef3d638f5436f3afc1b7ffcdf
MD5 753287457f3ddf9375e39c70c17fdae9
SHA1 2d207db7739c2f620273e8f9121bf441d394f1ab
SHA512 b38734a05319f9edfc0aa40ac5df7e17f8cd6bb4173f193b64790f825d79c9a8d93af226518673ec5410be216af8c07a2f49813ff69745f537c7a2dfee77d205
SSDEEP 768:ej+9k3HnygaffqfDQfU/yJ5p3EFlnNMLmOR/+0LvY:d9k3H4fqfsfLp3EFlSCC/HvY
TLSH
T152F2BE3298A0AD675DE686C6750B338B6EF446A7D6D13A859CCC7E0D44DB7EC130BC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a9c99e676e6458cc094d216dbea73b3224fdebf8f159aa098cddbe95c66a89ca
MD5 a7dac087b827f375772ad70eadc01bd8
SHA1 c4efc024a74e9efa93d90341d8dde86fe46b0286
SHA512 16f0d7b9ba7da596fe00808c83963d58e6a5f43a41325a3e301c6c429499f2381c01609391334d067a118416f8b4e871853ca4a48a53b77b4fe939b836bbb528
SSDEEP 768:gF1j+923kwgFSygaffqfDQfUTyJ5p3EFlnNMLmOR/+0LvY:t923+hfqfsf5p3EFlSCC/HvY
TLSH
T1A703AF339890DD6B5DA68BC5B60B334BAEF042A7C5D17A95A9CC6E0D40DB2EC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3e8c0a472b8b03c8dadcf228b404c58ac8fe754b9da68f698697ba962854ec5f
MD5 111a69699c443066a3afd95e9a7300af
SHA1 c58658d5be0e8f03528234229e162629ec671722
SHA512 e61b33c5c4d51864352c13da8f4860cde3d6a5b9c5b7098e94de35306e47245db611357a984df7289e5e154b31e025abda850a627df3c982764a40c60b4af2a3
SSDEEP 768:UjaeqD4MlshiLdMmQ3z1gaffqfDfyJ5p3EFlnNMLmKxyjWtTzTb:UqcjhIdMH3HfqfEp3EFlSCeyj2v
TLSH
T1E003D13A98A05C678CB696C5764B77976EB04693C7913B58DCCC7A0E40AB3DE130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1dc5f10-5106-4272-bb9a-5303aa28fe4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e1dc5f10-5106-4272-bb9a-5303aa28fe4a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download