39ad2e2547b6f41f87f9a23e485db5dd297194fd9b2111b6a4678e9f7038b4e5

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
j/83097940198pwdzI7hjfmhi3i5/index.html
Size 1KB
Sample260708-wt77baev3j
SHA256 39ad2e2547b6f41f87f9a23e485db5dd297194fd9b2111b6a4678e9f7038b4e5
MD5 503ed75a21cdcc3abf950a9e99a2d8db
SHA1 fe5d6e88e2d0cb688c39e34e6e23ac321fab8f05
SHA512 0db80825b35b02caeea1f3e5a709b72862be5173c9dbb422e92e88b6461d9f9f30a7be2922e5d4897ee6f3beed38a098a6c0f3ac27bf445fcd1cdac63ea2ce89
TLSH
T1B531BB73EA5630AC01509108A009B688C0698AFFDF691B01B38D59AF39F2F50C3776BB
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4176	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280080608342797"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-515251955-468707340-1782030364-1000\{5CC2E756-CEE2-461E-80B4-673A8F890189}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 3684	2328	msedge.exe	88
PID 2328 wrote to memory of 5620	2328	msedge.exe	89
PID 2328 wrote to memory of 4176	2328	msedge.exe	90
PID 2328 wrote to memory of 5620	2328	msedge.exe	89
PID 2328 wrote to memory of 5620	2328	msedge.exe	89
PID 2328 wrote to memory of 5864	2328	msedge.exe	91
PID 2328 wrote to memory of 5864	2328	msedge.exe	91
PID 2328 wrote to memory of 2616	2328	msedge.exe	93
PID 2328 wrote to memory of 2616	2328	msedge.exe	93
PID 2328 wrote to memory of 2756	2328	msedge.exe	94
PID 2328 wrote to memory of 2616	2328	msedge.exe	93
PID 2328 wrote to memory of 2756	2328	msedge.exe	94
PID 2328 wrote to memory of 2756	2328	msedge.exe	94
PID 2328 wrote to memory of 2988	2328	msedge.exe	95
PID 2328 wrote to memory of 5888	2328	msedge.exe	96
PID 2328 wrote to memory of 2988	2328	msedge.exe	95
PID 2328 wrote to memory of 2988	2328	msedge.exe	95
PID 2328 wrote to memory of 5888	2328	msedge.exe	96
PID 2328 wrote to memory of 5888	2328	msedge.exe	96
PID 2328 wrote to memory of 244	2328	msedge.exe	97
PID 2328 wrote to memory of 2496	2328	msedge.exe	98
PID 2328 wrote to memory of 244	2328	msedge.exe	97
PID 2328 wrote to memory of 2496	2328	msedge.exe	98
PID 2328 wrote to memory of 4180	2328	msedge.exe	101
PID 2328 wrote to memory of 1512	2328	msedge.exe	105
PID 2328 wrote to memory of 4856	2328	msedge.exe	106
PID 2328 wrote to memory of 3868	2328	msedge.exe	107
PID 2328 wrote to memory of 1356	2328	msedge.exe	108
PID 2328 wrote to memory of 1356	2328	msedge.exe	108
PID 2328 wrote to memory of 1344	2328	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\j\83097940198pwdzI7hjfmhi3i5\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff946dfc188,0x7ff946dfc194,0x7ff946dfc1a0
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,614171923070726704,4751999125037605913,262144 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,769608417610952085,7710854755936670168,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,16636728227718205094,10731286304057424969,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:13
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,5848059678975392306,1779633740103506402,2097152 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,2668690529133054397,13477984376582794780,2097152 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,16085020603602969367,10946592177904470820,2097152 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,3719569809363928884,12010731647901849165,2097152 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:9
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,4017903259805708612,2582684383791686475,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=1620 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,11119827038209956787,14379401232526198413,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,4936239386011372240,10847756574967791405,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,4936239386011372240,10847756574967791405,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,8277946009321507825,5454315213701024652,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,2482307474413181815,6737426463278291590,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,4978113701896552512,7604687914924604507,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,9183610124432649336,1182029316089079381,524288 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5464,i,13087773336134270490,636161037810160221,262144 --field-trial-handle=2296,i,6524697985584683580,17201484300271330450,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d0eccd9de1dbbf6cbedcb541fa52903c78d66d4d260136bc73243b056beb74
MD5 12c06f300a4b88646d6fda378a48455e
SHA1 86d58840d0666ad8999198dad1983a8cfd61fd18
SHA512 76e813720fc8cd4d829570b1b32d711d2d751540dea1fcac581dd9a5963c4e3161cffa07350cc8d5477fa02d0eb7b1c29b8ffb567f85b5a94259654ff2af3928
TLSH
T118D092A8BB40ED0ECA91287B25B59A19B6509831FC56061A8866B0E88C517831A1B0FE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b2d903efec8d558eba6ee4ac12873ce1439014705e9d819ff4dfcffa10c4b270
MD5 d9964ad138b9b56ea7891b8576b8a6ce
SHA1 e8153c0a553b8b81a07f1bbc77037f1700b79956
SHA512 7028c8597edeb715bb44be72ae48ceb181161e73b5380897f449df22a8c2b5302f664d632f2373c4c7a712d85a4b0ca70a4a062d6af265eefcac45dd99a660f1
TLSH
T1FCD092A4BB40EC0ECA91287B25B69A19B6409831BC56061A8966B0F88C517831A1B0EE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 012eafc0dd7aacbf422921ae998695cdb64cee0622bba36e4491b02ed7086cea
MD5 34b2f57c7365131e94a3f4ac661e8fa4
SHA1 49928f51d1c9a5f1ae82062f2e0298d09e915816
SHA512 690929e479a01c8f3051b7d0782fce041b374f0c84e838e1583f21f9ab36a0718e760be39c0a1087d3345eca8a46d746e43fccef851d0e2dd569ba67cf65f69c
TLSH
T1DE411E5803F613CDC7968CB212F20697F6F459AA05637E633382A17E088AB48D441C3F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596e8f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596e8f.TMP
Size 1KB
SHA256 06dcb1f3c265c8e9b800fffecc4683d3adb9d0f4ecc9e3943ac64aea5dd31f32
MD5 d0e6a1e36d99fa4c8ebe17b45bbed393
SHA1 5fa68cbdfebb6d83626b16a1bedda6ff93177843
SHA512 defed217af63a6e718c02ccda8ea379597698f84b9920950f5fd39ff2a7088842f4f990aa49ed0b475d7266de1da46cefac52378546521d56e54102ba8520b55
TLSH
T1A141205803F613CDC7968CB113F20697F6F499AA05637E633382613E088AB48D441C3F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 87376f667dc8c1b6f67f6d66ed9b803a8fa1bbf773a8c6f86ebec12c764d54a3
MD5 6c2fe84a5aa116d1388dfccb9448568a
SHA1 b3e454bcc43a013adde23c6400613db8fe414384
SHA512 7d22d3cb131c313bb5fafdf5dff328d0a704f6c17c3a8254e269c274bdbda5743b3e80129c4ad6043b56d3c710af295f14cbaef3d4b30135627a41ff8d11115e
TLSH
T10A41BEF7C3E4857E8A1145F4BB146F2BCE2C0915432C3C5AC9E4AE1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9a28f0a371e7e11cb74408f45075a4f3d5d63420f6ffc9ddd93f47edcd2b7cf1
MD5 55d40eb5f7e6d645ab2ed2a5a2977855
SHA1 2007b75f9cba501d9861d67f92f3e4f2cde950cc
SHA512 f299db0c6a5354b150813606cfff8c145bbd15f10d3543e4934133ca2f1219d58858e442ec03c969449e5eeae60f4d30dae8a18b423a982371ceb17cd494ed5a
SSDEEP 192:sxRoRcyM/jK1Ml8UQZbG/fSsknuZVI3rgdEzoA8peB/g6+WNIYnJt7GtIgDjJ:sxRoiqxG/fSskcIkb2/5I2c5
TLSH
T13862CA156A289977CCDBD20DFA457F63D6F91472A2911E44AAFCCA0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 660fbd59aa3b8afd2af1e930737ecfd8d4a940a270887a8a506a8e2287e74f3a
MD5 37c617a628a3877752057d9b2461f989
SHA1 dd1c44ab8674fc79e8569fc6cc37834ed4fce058
SHA512 f4b046bc64c78b0d7bac4103552cb93cbfd2028e3f41a21937ca310cc028e83eb97b3f70d465b22f0a8d150db678aa198b091d3356c3ace9616fbddea7830ba9
SSDEEP 192:sxRoRcyM/jK1Ml8wbG/fSsknuZ33rgdEzoA8p4B/g6+WNIYnot7GtIgDNJ:sxRoilG/fSskykbo/5ITcL
TLSH
T1EA52DA156A389977CCDBD20DFA457F63D6F91472A2911E44AAFC8A0C01E77ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 671825383e9c6e4c0994b4010d533032aa29e59d414648a8f08d293c1c3f3cbe
MD5 e4ad2a5115b9706da3d19f51129ec14d
SHA1 ef30096d080737b63f5880eb755cef036adc432a
SHA512 199d04e89ede11d5da9a2adf253f90eafe844c55a8ee208295e589b656817ef9ccf9549ff185ad077973455648389b01b386e8c636ef3c9c61529eda35808aaf
SSDEEP 192:sxRzRcyM/jK1Ml8wbG/fSsNnuZ33rgdEzoA8p4B/g6+WNIYnot7GtIgIJ:sxRzilG/fSsNykbo/5ITcs
TLSH
T1D752D9156A389977CCDBD20DFA557F63D6F91473A2901E44AAFC8A0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1939a52d688807e1a38dc02ac81c03817084183f39e9dd7b8ac98c55140e0e94
MD5 0211ad3581f25c347d24fbc50fec0681
SHA1 34197fe8901f83e1ac180198762ea9190cece075
SHA512 825cb8e85954298d04cbf049e2b7e6e686557c2235dc349d04d63abbb0dd31ab85d944484fe11b654fd6f3feebc0b1b24dee6329a0fc37287bd081d5b7f0abbc
SSDEEP 768:Jl6h92WgqcfHw8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxXguAroMgf7Bk:Jl6h92WgqcfHwu1ja4QuLMgC
TLSH
T1BCC20C2B640CC77E4F844EACAC296E966DD801CB97988D5447FA894C03CB7EB521B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7b973f759f1b2d8701513096346436dfc9b8aa12165f5efe4d541cc82a46cfb3
MD5 97ba1d53cceb7eb16594fedf60377e68
SHA1 377ca6ccbb436836f06a6d8c7488adc046a466a9
SHA512 d2f2e06a27b8d6bab32cce814bce26445fd78f899c6ea30e3a13b7ae3ed9cd4dfc4b8c0f3d94f9f3a99d3d1c96022002f9c1b8fe302817c9143d00eef9943aec
SSDEEP 768:Rj+9y36/9YreNSLfHfkftX7DGFzoqPcNMCNF6Mjv:M9y36epfHfkft3WkqPa0A
TLSH
T1B8F2AFB5ECA458278CE2C2C9BB173A57DFE4065346852B4499ED6F0E86DF2BC0307D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c94e9b6fd161ac388c1536feb4b4f99ac322a619ffd9af14c715b8e2f89b8a37
MD5 37b9a2c63628524ca0461da55d2541ba
SHA1 4a912fab9245588e9e407c6bd5f3edbb472627b1
SHA512 6777bd2e11e82de7583eb5661f8724409d01fcbcd458c8e3062a2086845bc81d1e0ce8ba5400c1464359f11bf9c575107e07c0a8ebea209e68eb351fe28e656d
SSDEEP 768:Bj+9y3n/9YreNSLfHfkftX7DGFzoqPcNMCNF6Mjv:c9y3nepfHfkft3WkqPa0A
TLSH
T134F2AEB5ECA458274CE2C2C9BB173A47DFE4065346812B4499ED6F0E82CF2BC0307929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8ece54a035a3835d7ba9929bde360519424eee7c0a0269c05487c247c28f67d4
MD5 83d8671dbffe7dd37b728f9fe0eb848e
SHA1 7ed725b21f09ab263e3bb3281fee508b0d30d04d
SHA512 43506790de0d9d6b9082f4d9352bbc1738f7fc42984891e803a6ca0ca00f70acff6be7610ab2bbcef299af3144ee59643bb3c480e4da4b9239c3524740b8738d
SSDEEP 768:Qj+9D36/9YreNSLfHfkfsX7DGFzoqPcNMCNF6Mjv:v9D36epfHfkfs3WkqPa0A
TLSH
T1C6F2AFB5ECA459274CE2C2C9BB1B3A47DFE4065346852B4499ED6F0E42DF6BC030BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5c29742f2d6c338d9a64e0f0a9d0421feb2b51af8e2201b094fcab3b815b6335
MD5 2dbd522c9c6e5d90fb41fc72b51a9ad0
SHA1 c7e6214e44c371d65f256bd467d4148f15da0c5d
SHA512 7e97ad442925f5406dcf9957f06cc50543851ded1388fa1d87860b1118a77abf3ee9db802747aaeebb6b9ac04044cec4ec9cd7039175c38f8240fbb8085e5c49
SSDEEP 768:Vrv+4UNbda352YreNSLfHflX7DGFzoqPcNMCNZueVH1SkM:Vbsb43bpfHfl3WkqPawEH1Y
TLSH
T12D03BFB5A8A445378CE3C685B75B3A177FF4025746800B94D8ED2F0E879F5AD130BE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d49babe1-db35-4bf7-bd02-c5c33a96df4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d49babe1-db35-4bf7-bd02-c5c33a96df4f.tmp
Size 41KB
SHA256 ffcacfe34a3938cf34309c9c88c3d8f5047e14159eb6144f99fb242c7c688cba
MD5 7aa5112d336670b93419b00fe99d6bc1
SHA1 fd9a633007a82bacef43ba238741db058e1857cd
SHA512 72af2681ba4f09a0d410edd0f2af4852e139138ea6d37e7448f592cae8f93b1737f5150226aa0472fd2eabbecbba5073c358d0044d1325271ddc9093422e1af1
SSDEEP 768:4rv+4UNbdg3Xr9YreNSLfHfkfsX7DGFzoqPcNMCNF6Mjs:4bsbO3XSpfHfkfs3WkqPa0b
TLSH
T19813BFB1EC6899378DE3C189B60B3A43AFB4025346851754D8E92F4E86DF5FD130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faa5ecca-f8df-4acf-ac05-0e1a17d0103e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\faa5ecca-f8df-4acf-ac05-0e1a17d0103e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download