32febffca939ed0ac98eb6e46114dd9ee3a47dd2201a11487fa4c9c072511be6

Analysis

max time kernel
149s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 9KB
Sample260706-pgtd3aaz3q
SHA256 32febffca939ed0ac98eb6e46114dd9ee3a47dd2201a11487fa4c9c072511be6
MD5 40b9d970e313a7c37a187985417a6edc
SHA1 646d0ed6852f74164dc9e4cb70b18aa04e036918
SHA512 6ad2962e96968348f7392ac1dc22e8af42558f595f193faebb866c1d60e6dddfae85d339619fe5b8e06eedc7b0800795c2b8e0692b8c6c0b1fa657d09867bec8
SSDEEP 192:J8UjZpZpXQg3XJaWfDbzppOgg6bugYv31Plj:J3TJlQggd31J
TLSH
T15422D205B5C5105B9B73D368AB71871CEDA34093DB05AD99399C1B87CFFAA008823EED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2484	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278139173115706"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1991999443-3181470666-3272020885-1000\{E8FF3226-B80C-4CC0-82D6-1FF9F1097B48}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5824	msedge.exe
5824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5724 wrote to memory of 6116	5724	msedge.exe	88
PID 5724 wrote to memory of 1404	5724	msedge.exe	89
PID 5724 wrote to memory of 2484	5724	msedge.exe	90
PID 5724 wrote to memory of 1404	5724	msedge.exe	89
PID 5724 wrote to memory of 1404	5724	msedge.exe	89
PID 5724 wrote to memory of 1000	5724	msedge.exe	91
PID 5724 wrote to memory of 1000	5724	msedge.exe	91
PID 5724 wrote to memory of 1516	5724	msedge.exe	93
PID 5724 wrote to memory of 1516	5724	msedge.exe	93
PID 5724 wrote to memory of 1516	5724	msedge.exe	93
PID 5724 wrote to memory of 5796	5724	msedge.exe	94
PID 5724 wrote to memory of 5796	5724	msedge.exe	94
PID 5724 wrote to memory of 5796	5724	msedge.exe	94
PID 5724 wrote to memory of 1732	5724	msedge.exe	95
PID 5724 wrote to memory of 4656	5724	msedge.exe	96
PID 5724 wrote to memory of 1732	5724	msedge.exe	95
PID 5724 wrote to memory of 1732	5724	msedge.exe	95
PID 5724 wrote to memory of 4656	5724	msedge.exe	96
PID 5724 wrote to memory of 4656	5724	msedge.exe	96
PID 5724 wrote to memory of 2156	5724	msedge.exe	98
PID 5724 wrote to memory of 4652	5724	msedge.exe	99
PID 5724 wrote to memory of 2156	5724	msedge.exe	98
PID 5724 wrote to memory of 4652	5724	msedge.exe	99
PID 5724 wrote to memory of 1856	5724	msedge.exe	101
PID 5724 wrote to memory of 4792	5724	msedge.exe	105
PID 5724 wrote to memory of 5612	5724	msedge.exe	106
PID 5724 wrote to memory of 3148	5724	msedge.exe	107
PID 5724 wrote to memory of 4660	5724	msedge.exe	108
PID 5724 wrote to memory of 4660	5724	msedge.exe	108
PID 5724 wrote to memory of 5824	5724	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc6f00c188,0x7ffc6f00c194,0x7ffc6f00c1a0
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,10834411085557708448,17813420362480384087,262144 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,15036505257874280357,5248883136863759156,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,11079283467055377399,9125213779300013475,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:13
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,6708306071650039816,11664677113411084330,2097152 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,13599005814274510243,17002880925370949106,2097152 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,8067321648598169429,12769481120517135086,2097152 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,14052464456299669589,791723124598224603,2097152 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:9
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,12686928108200679820,13906973289564776103,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,5704431532938767059,4758331613862228138,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,10179273089554783177,7149264172534524904,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,10179273089554783177,7149264172534524904,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,16092593492202374989,64486984489804140,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,15135353549707509137,9226141758000967367,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,2250860404125754968,15067002961266419023,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:14
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,3072151700742496333,8298494916695242392,524288 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6500,i,18010107205861911010,9045646711658607427,262144 --field-trial-handle=2328,i,9753367559614619760,3032977373493160339,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a958178f477b8cf0f18d83e0835916167b3eaf95d859728b647bc0100a82efc
MD5 b2c496fb89251ff9b8ff1c46a5315932
SHA1 19626950ca3b280d084016871229a48eb3fa5ffc
SHA512 bbd974e4a08ca8f629f0b9a8892ba78ac7d4191c1640d1037e4fd018dadb4d8edd0a663e4a673a29497151c4defd9be09b6a4a4788adf24b182cbc36b18ccda7
TLSH
T1C5D08031774DFD08C18054757890D3517A104460245AC3186329E01DDDBC68513DF0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 48b0127c48894e5c8e42b14bcc7f6b1f91ca5d97355f42d22391fb602568bb1d
MD5 df62623cabc43e309a7767f4081f29d9
SHA1 420f1a4b11b86944a73d3cbcd4aec4883dfdfd62
SHA512 02067a08d194a87842f985ff7d0bee13c7b7228146565bf19114ffaebc120cb3d2ba8b19c941bb0d2773043366f064246a55efd57127d4a0de5768f453b2730c
TLSH
T1FDD08035774DFD08C18054717890D3517A204460345AC3186329A01DDDBC68513DF0EF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c08449e69be7c9b041592f9c2c09fea3cb634dda3a2a459a4b4ac665b3aed5b
MD5 f1e359c44be4e73494050e8cb5571e19
SHA1 b332467b3a2742a9717eba4fd51759882644d4b0
SHA512 262e68907af40c36df1636e284544d4006bb20cf07c90a779d52a863ce672d9f3bbb78e7b6547b7be2c1b1117586a970c84ac1bd3b360d7d7ee78b640cb2d799
TLSH
T1936172D1057B2B1AC76B70398AF261B8B7BCB5470C07DE025A94B0B4DF0E787A149C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593c82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593c82.TMP
Size 3KB
SHA256 97e108f76941e7d93cb25bd09d00df460b6e8bf012777d06cead54dec3603260
MD5 8e9a76495aa67c7a567d940b01124755
SHA1 872d6fa5a2335428d65f314f5ce9a8b1093c0e4e
SHA512 0ef644b2e3728a394898558c401a9d86676d15721462c8f75f60e8bf057ed5f6f6a8ae1df75563443c55d460765d8ff6c3a03b742e31db38e4b2c8f415832035
TLSH
T10C6173D1057B6B1AC76B70398AF261B8B7BCB5470C07DE065A94B0B4DF0E7C75149C20
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d13a3442c3a456d7f0d800b22a69602e61da05d7b46cec44f3f40caf7601dd64
MD5 29f83734168a111e3f845f078b45d362
SHA1 3e7f7698cb25756bfcd97cfefd95c094d3174cb4
SHA512 e3773734aa0bce19ff5628ba1235373bfbfe13f622594f7d344386fed7a8296ac27534472d58e1f12876c9311078681dd63fa7fc8614b43e2eed3c4d1174eb66
TLSH
T1B551AEF7C3E8867E9A0196F4BA147E1BCE1D0915832C3C56C9E4AE1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6e932953e28f4146afd8e80de63d118a85090f5e44531d020d30598f4eff8169
MD5 78205a59861893c2570983284e39bf8b
SHA1 493e8738aefdfdcb5b65b2464f35f6410e56d6b6
SHA512 e575f13e7fb7c1a6cd74dc4ca72e37d4f95a0b5eeb21c1d1f23910ec5d316216927a6572826b7bc73250f8d6568229ea06d4e4f7adccc0f92c7cdedaa2f40ef3
SSDEEP 192:sxRrRlyM/jK1Ml8wFW/fqsj1rKpoHzoA8p4J/g6+WNIY4SAe0VG6IgIJ:sxRrRbW/fqsJr8zE/5IFe0Js
TLSH
T1AB52E905AA245977CCDBD20DFA557F53D6F91573A2901E08AAFC8B0C05E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f5ec7536e706c1c8215b41c6cd6165c2003805e8d534912bacccba323dce3570
MD5 920304347533cb725077b94d672fa4e3
SHA1 cfc58228a78eec67e6fb5602b5f6fa079d19b600
SHA512 a0e7427f7ac0b91bab5018b58af4caa2f7e796931e4c2b2eb5d49a257ceaeeab2ad862e2f521bcb55a2a68f246841d0e5a27d83b0185b382f6c448a1ed0259eb
SSDEEP 192:sxRQRlyM/jK1Ml8UQvFW/fqsbb1rKnoHzoA8peJ/g6+WNIY46Ae0VG6IgD+J:sxRQRqtW/fqsbRrSzK/5I9e0J2
TLSH
T18E62D816A62459778CDBD20DFA45BF53D6F81573A2901E08AAFCCB0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 652ddd4217ab4e5a3f3cec02895ef947fe6ead227d9f9246da241c5b242d5ade
MD5 b437cd1a8b5c81c28bf699b744ecf698
SHA1 e4207d189a3d9931062621255f6cf1d346a4762f
SHA512 3af8b7291ba21b467b53159757fd11cfe09fef3b35a1dd8e798fa57174c6e7d4b24212336f35e32f7e4f07eed3fe2603c8883453fb43b4b88f2bc444d6cf8d98
SSDEEP 192:sxRQRlyM/jK1Ml8wFW/fqsbb1rKpoHzoA8p4J/g6+WNIY4SAe0VG6IgDcJ:sxRQRbW/fqsbRr8zE/5IFe0JM
TLSH
T11F62D815A62459778CDBD20DFA557F53D6F81573A2901E08AAFC8B0C05E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0cb39800705efde0c2834103726881671dbf9ccf16afa308f8dc0ff6a9420ee1
MD5 c56f6c7a08bf3725e246f48f49c4f23a
SHA1 6283b5fd4c8445f1bc467ddd6db564c1b1f3c311
SHA512 8e088bf9a0516117892b3ad86ebbee114c498017f0b1e221ffa403f7429c047ce47a5ca27682b69268b7f69ebff375a21e009253397208532e877b2f0135e8eb
SSDEEP 768:Tqi0E3WgNxfez8F1+UoAYDCx9Tuqh0VfUC9xbog/OVtXNGNroKTyi3u:Tqi0E3WgNxfezu1ja49Gm+e
TLSH
T1B8C2FC2B640CC77E4F844E9DEC2AAF976DD801CB97988D5447EA890C03C77EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f1f82c1689c1d528842c7fbf172e3cb001934c0533c8c4f108518b44efa449a6
MD5 39cd7de4bcec3039fd0a948e87940254
SHA1 abe9134e6d880b28d23000f060eb620bc179a436
SHA512 5f2bb5985a58377afff7f8afed12f80e0a6b3f24818f974177d6ef34a7c66abdabdb5162597b83dd830ac8082e5840675a7b0aa56b6aeb5726215aa8adb639de
SSDEEP 768:yrv+4UNbdP3NeGth5Km+AW+152MvSCai9+8rir1:ybsbx3NZpx2pyDriR
TLSH
T16813CF32E869AD738DA686C4B64B3203BFB0519385C50B94CDDA6B4E06CB6DD131FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 55356b165cc297975aa49d438ba63b10efd43cfda803397b20809a27d9c92540
MD5 f04dc94814ccbf935217562165349e33
SHA1 b1f4320b0ff6863445ac9c5570dca1276fa51c85
SHA512 ccd77143564d124fa495b796db7f8f110d3adba4051b28324a34581d4529fe3a22baa76cc13a4718a38a4507a8f67e278b9b32f7072d4707bd05f7e9e11651da
SSDEEP 384:wtNn/s3n9Si38N1dnb5dNcu5dEfnthurjEuIMbdu0uUYNuZA0M0IAtHrjU5UGVl3:wj+9F3EpGth5KY+AW+152MvSCai9b9ME
TLSH
T12CF2BE32A85A9D738D9687C4B74B3756AEF0526785C51E88CDDDAF0E02C768C434BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 aeb0850420a7401cf6f1ac5eeff162b371cb47c02a43d5f77f0742eb1f330e43
MD5 e559e9f7b331f42ec7c7c950cb63faba
SHA1 c98b03a0400105007642091557fbbd200fc2de97
SHA512 74bab7f819e9b5e99b581e0f729f64604c679da84c0e8c31c31207d20d1c9930eefad2a43ea5a22317389f8051a3a59e46da0e4bc921d16ff4f63dfa5655a643
SSDEEP 384:StNn/s3n9SI38N1dnb5dNcu5dEfnthurjEuIMbdu0uUbNuZA0M0IAtHrjU5UGVl3:Sj+9H3EpGth5Kb+AW+152MvSCai9b9ME
TLSH
T1A7F2BE32A85ADD738D9687C4B74A3716AEF0526785C51E88CDDDAF0E02C768C534BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9c785a09dcea2b3f003562555b6fe75209c45ead1a461b045044eff1c62c7a93
MD5 c17297247177f830d260bf0c74f2cf2e
SHA1 68080e2cfad5a8c380228481aac03eb83e742130
SHA512 d15c307160323bd76b08f250f530251edbf96215906cd5ed737266781a98c9b23a34ef1dcba7c3f19a8723da0aea72af0e7ced7a9dc8e4db88a40030f639e8f4
SSDEEP 768:Arv+4UNbd23yPth5Q+AW+152MvSCa2c7AY+8rir9:Absbs3lpx2pd7AYDriR
TLSH
T1BF03BF32E869A9738CE686C4764B3603BFB0129389C10F94CDD96B4D429B6CD230BD77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

442ef571-b57d-4c2c-87b0-039a7c738209.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\442ef571-b57d-4c2c-87b0-039a7c738209.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/1856-174-0x0000024144D70000-0x0000024144DA6000-memory.dmp

Download

memory/5204-56-0x00000138582D0000-0x0000013858306000-memory.dmp

Download