224e0a53fcc1456dbe75f0ae0bd200131609055790eaa109222ac0d0b8045a5d

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 18:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Mellat/css/fonts/woff2/IRANSansWeb.html
Size 30KB
Sample260706-wweb1sfs4q
SHA256 224e0a53fcc1456dbe75f0ae0bd200131609055790eaa109222ac0d0b8045a5d
MD5 c6f46673e2449eb071e2c098c5190c2a
SHA1 d9ba337d1d40aaeb82e51906ddaa0492239d291a
SHA512 785bb16b33546d5bb0d9b9c5cadd69c8e4016521541e1cceccf964abf3858cec6a232a42cd386f73bf513b6a549705faa4e6cc1676586f711d0ba8660cee7070
SSDEEP 768:lF7mr8mz60mCTXpVIAQfwkj3TQMfWoqClQX4A:n7mr8me7sXpV2jDQglq
TLSH
T1C3E2F128F9A1C859C46A4BD26CBED642BBC90BC6C70F76E57553CE1E4C3E4C44146ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1456	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-515251955-468707340-1782030364-1000\{103FBDEF-326F-4726-BA6E-8B8C2D0F5214}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3004	msedge.exe
3004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe
6000	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6000 wrote to memory of 1208	6000	msedge.exe	87
PID 6000 wrote to memory of 1456	6000	msedge.exe	88
PID 6000 wrote to memory of 5344	6000	msedge.exe	89
PID 6000 wrote to memory of 5344	6000	msedge.exe	89
PID 6000 wrote to memory of 5344	6000	msedge.exe	89
PID 6000 wrote to memory of 4680	6000	msedge.exe	90
PID 6000 wrote to memory of 4680	6000	msedge.exe	90
PID 6000 wrote to memory of 5136	6000	msedge.exe	92
PID 6000 wrote to memory of 4292	6000	msedge.exe	93
PID 6000 wrote to memory of 5136	6000	msedge.exe	92
PID 6000 wrote to memory of 5136	6000	msedge.exe	92
PID 6000 wrote to memory of 4292	6000	msedge.exe	93
PID 6000 wrote to memory of 4292	6000	msedge.exe	93
PID 6000 wrote to memory of 4804	6000	msedge.exe	94
PID 6000 wrote to memory of 2884	6000	msedge.exe	95
PID 6000 wrote to memory of 4804	6000	msedge.exe	94
PID 6000 wrote to memory of 4804	6000	msedge.exe	94
PID 6000 wrote to memory of 2884	6000	msedge.exe	95
PID 6000 wrote to memory of 2884	6000	msedge.exe	95
PID 6000 wrote to memory of 1824	6000	msedge.exe	97
PID 6000 wrote to memory of 1824	6000	msedge.exe	97
PID 6000 wrote to memory of 3056	6000	msedge.exe	98
PID 6000 wrote to memory of 3056	6000	msedge.exe	98
PID 6000 wrote to memory of 5936	6000	msedge.exe	100
PID 6000 wrote to memory of 3244	6000	msedge.exe	103
PID 6000 wrote to memory of 1376	6000	msedge.exe	104
PID 6000 wrote to memory of 6028	6000	msedge.exe	105
PID 6000 wrote to memory of 4384	6000	msedge.exe	106
PID 6000 wrote to memory of 4384	6000	msedge.exe	106
PID 6000 wrote to memory of 3004	6000	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Mellat\css\fonts\woff2\IRANSansWeb.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb2a9dc188,0x7ffb2a9dc194,0x7ffb2a9dc1a0
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,8556641921770946752,9940211822082591194,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,12263213044945416692,18303500405162014141,262144 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:2
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,16265668590716666277,5706993666034302927,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:13
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,4517517403014665441,2434886310015647031,2097152 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,12718969551486398623,3229866882360702754,2097152 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,2938916144768410965,15289640863126028338,2097152 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,4362702001403850883,320305370798988795,2097152 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:9
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,7453963655058494145,11744258391448938071,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,13710174490264925665,13703367864917487625,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,17020343740036149018,13664064972004165595,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,17020343740036149018,13664064972004165595,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,11134939167462342549,13046967204200298646,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,15806705008676087216,6740979342039394486,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,15999155164927706665,17837087770713053829,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,13434178826489360139,4651839647602491763,524288 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,14262605423775430364,5910511850546267417,262144 --field-trial-handle=2932,i,3985775881037934821,673453981243293522,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d0eccd9de1dbbf6cbedcb541fa52903c78d66d4d260136bc73243b056beb74
MD5 12c06f300a4b88646d6fda378a48455e
SHA1 86d58840d0666ad8999198dad1983a8cfd61fd18
SHA512 76e813720fc8cd4d829570b1b32d711d2d751540dea1fcac581dd9a5963c4e3161cffa07350cc8d5477fa02d0eb7b1c29b8ffb567f85b5a94259654ff2af3928
TLSH
T118D092A8BB40ED0ECA91287B25B59A19B6509831FC56061A8866B0E88C517831A1B0FE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b2d903efec8d558eba6ee4ac12873ce1439014705e9d819ff4dfcffa10c4b270
MD5 d9964ad138b9b56ea7891b8576b8a6ce
SHA1 e8153c0a553b8b81a07f1bbc77037f1700b79956
SHA512 7028c8597edeb715bb44be72ae48ceb181161e73b5380897f449df22a8c2b5302f664d632f2373c4c7a712d85a4b0ca70a4a062d6af265eefcac45dd99a660f1
TLSH
T1FCD092A4BB40EC0ECA91287B25B69A19B6409831BC56061A8966B0F88C517831A1B0EE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4b1bd046c169a2f525a1b31a6faa870a1ece3089c5e0ea5d7169dc6c2eee66d5
MD5 8b0ed2068cec83fd95a66e87ff115ad7
SHA1 7c269cad099ae86f611be89ec06added4a41c6a1
SHA512 7a341689624290ae521189fc5367f147c03ed010ee6c596428a9d0c861e3cd3e4bf144744e1bfe82e8ac8fc7fd9526ab6c625b772cab158f73215a1dac228ffb
TLSH
T15C5174D013760FD2D7145DB21FD30489F67AE66A322BAE0E8D90AC391836FA44291C13
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ef1e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ef1e.TMP
Size 2KB
SHA256 bc7337243cc59af3f773c57ad098efd70f9065939093e740d48a15c12f53f0b6
MD5 d8f18e7e19ef408166246c22a7006f02
SHA1 f3b62125a48fcb4ef8aed97668d3342f0933baeb
SHA512 8be3b31071169b6f3c73afcf7c2d684ed8a6928ea6e0991999af4a065f9eed4841a9d5d8db4ec730821aacd8715842f02ab907e83d2402eac273675cbb677a25
TLSH
T1215174D013760FD2D7145DB35FD30489F67AE66A312BAE4E8D90AC391836FA44295C13
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

356a05db-470c-41f8-9f7f-ab33e54d47bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\356a05db-470c-41f8-9f7f-ab33e54d47bd.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0d64d135ed731c3e06a54726bb8f89fa4f016fccfcd3e54f3033774527739602
MD5 2496c77357d005e47d21de14d919a114
SHA1 db83a79d448bc668648533425c51b1f2b33f7224
SHA512 ce69cd128a93ced4c38bb4c1d48faef175bcc8a1c1023b47105e7fc4f5079a0239765d4aa0282887b86f6097b9f99091cc923cc21afca1bfe5eeb0db2fa21353
TLSH
T16F41CCF3C3E4867EC91196F0AA187E2BCE2C0915432C3C5AC9E4AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2753d9c8ade4de0d6a8f8f0aad6d336553dfbdb674171755b5236114bca18fa8
MD5 fcdbe477ec259456b7b967c997994275
SHA1 bb30627d1f896a0b583df6a6728a61f453c64e2e
SHA512 a13cf8b1dcc83de6e6c7f853a3b0f033a5371c3d3cb0e19b6353b07c6f99450cd005de7b5786c4c54969d928868962361f9d2a746ec4d478b5334a8474e122d5
SSDEEP 192:sxR8RNyM/jK1Ml8UQfbs/fqsO5Q3rgdSzoA8peY/g6+WNIYnmtSnGyIgDlJ:sxR8lqDs/fqsOCklP/5IDSzT
TLSH
T1F862E916AA389977CCDBD21DFA517F53D6F91472A2940E44AAFCCA0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b9f2f7ae60f9d3bcf0ad42fdab489f6e7e2bb0c64fc8fef6e5cabfd991326455
MD5 fa0a7a4d3a274d01fc20ad557119f6c9
SHA1 cff5779c35c27c8255794598158e2781840dd68c
SHA512 3d704351c6763ae22bafbcedcd78a10d6c74bd98cfb02ad1afdd96bd63153953badd13a2cebb4e74a8aedde54d09f2c3cdbece1ac6975235a2f5367191042877
SSDEEP 192:sxR8RNyM/jK1Ml8wbs/fqsO5Q3rgdSzoA8p4Y/g6+WNIYnotSnGyIgDlJ:sxR8lls/fqsOCklt/5ITSzT
TLSH
T17F52D916AA38997BCCDBD21DFA517F53D6F91472A2901E44A9FC8A0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fb72af410027037dcf674d6d4b006b8be693091f625b4e9dd6c11a238c679276
MD5 cbb516ebc869f9f1e7773da36b6f3dd2
SHA1 f3fe631b40cf2de740f3a3da2ae78782f6cb777d
SHA512 7360b677e845e2f038c667a412ca788afde4df336ca2a73a27b0426e7562ceb45580f203d212ed66d5158ae84f66ed9db8768db214209e10f236e8b0317bca7b
SSDEEP 192:sxRPRNyM/jK1Ml8wbs/fqst5Q3rgdSzoA8p4Y/g6+WNIYnotSnGyIgIJ:sxRPlls/fqstCklt/5ITSzs
TLSH
T1B852D8166A38997BCCDBD21CFA557F53D6F91472A2901E44A9FCCA0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 88e8280b8811d636d701a634e1cf16e639d6f5e208526cc863100331d508dd85
MD5 aff1ef2672c43dfe82bc493abab06535
SHA1 4f0ef435b2aa8bee24dfa51d720009af839857f8
SHA512 23df3deaed8def8dbba0b02f842ddf416f5e90713edc7e13d2029739d894ed5267554f9ec1610c7a906684739bbb48f1307915c6413ff274b850907d1f657124
SSDEEP 768:Jl6h92WgqcfHw8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxXguhroMgNBd:Jl6h92WgqcfHwu1ja4QuaMgl
TLSH
T1FFC20C2B640CC77E4F844EACAC296E966DD801CB97988D5447FA894C03CB7EB521B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bb497bdc6fd1ed194c1844b342cd5eab9bddba8c4e6a2036aa5ada025187781d
MD5 0873d34bfdee46a7d8ac1435099248af
SHA1 ad775788ba47ec614f5a7b421ab3602ca1599179
SHA512 e88e787984e1185264212e00fe8470fa3f50e6492ac3a3a6b89bccf493907efe49be4edf97f44bacd3b6d15d1630ba8297aa42c51fa75b9c52c7416c294fa243
SSDEEP 768:9rv+4UNbdu3lrYreNSLfZfoff3GdHX7DGFzoqPcNMCNFXqnD:9bsbE3WpfZfGf3+H3WkqPalkD
TLSH
T1A903AEB2EC7459778CE3C689B71B3A07AFF0125346851794D8ED2B0E429F5ED230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 af9f4392758f0495f2e2fdbd7a48af53c36d648b1f34a48c6293adbd64fe0d79
MD5 432d67449365d06b23e952048c2a9ea4
SHA1 673143ff3f8afcf1a13df9665dd0c7ed299f750f
SHA512 5e17705539169b232a942604c183a8bd1370658e88d0bf68bea66d9f815d5a27dab997c45402e23c06e75629ca7583dd5ad20667ad09ac75633f82bd4e95656c
SSDEEP 768:Oj+9o3krYreNSLfZfoff3GLHX7DGFzoqPcNMCNFXb9MU:t9o3lpfZfGf3SH3WkqPalb+U
TLSH
T137F2AFB5DCA04D374C92C6D9B75B3A5BEEF0436742842B8898ED6F0E479F6AC0307919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 eb2c093dff2600b64dfd63f27fdd91f4377a9cb8d81690ea6be8d79b4a7f15da
MD5 ee375de2a0ffb73ef10f00f841292a88
SHA1 4cc3e485d77f1aea631586206ba2f23ffa41170f
SHA512 7566978bd405f3738588cff499622ecf8dcf485531eda50e0112e6be00047001ed30fb0c1f612d4ad5c5ebea9817bb9bef04a8f7ab5b698540bb12b6eeefde6c
SSDEEP 768:3F1j+9o3nwgcrYreNSLfZfoff3G4jX7DGFzoqPcNMCNFXb9MU:+9o3HpfZfGf3pj3WkqPalb+U
TLSH
T1A903AFB6DC90893B4CA6CBC9F71B360BEEF0026786852B94D9DD6E0E429B1EC0307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 04411874cdd752513bbb4805f4a3cd95adaddf14097014057983252dd7139a47
MD5 48dba073c292c31befb4b086b2e16c0a
SHA1 1e25ed955d66738125c7c428929f4689c413094b
SHA512 56e95eff8cdc86a095cebf66cdb1bc4db4b8b5a5ce8be67a6db58fd53ace09d75c6a717fd1095d5c16be4a4912bc387dc0ed23b34cb88c7804187173801f14d2
SSDEEP 768:Vrv+4UNbda3EtYreNSLfZfo2X7DGFzoqPcNMCNZKeVH1SkM:Vbsb43TpfZfT3WkqPaQEH1Y
TLSH
T14E03BFB5A8B445378CE3C685B75B3A177FF4025746840B94D8ED2F0E839F5AD130BA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76500739-0fef-46e5-8713-7fd0795cbf9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\76500739-0fef-46e5-8713-7fd0795cbf9a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download