hxxps://appluxura[.]com/goldsmith/chef?output=69490a2a7c6e2880a0adc24c3872f52fa3c1a17c9c4a252e02f76aea7963c3d39db26490ee0376b642c2577d37cb26ab5eb0db833fd86abbadfe7469af

Analysis

user interaction
yes
max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://appluxura.com/goldsmith/chef?output=69490a2a7c6e2880a0adc24c3872f52fa3c1a17c9c4a252e02f76aea7963c3d39db26490ee0376b642c2577d37cb26ab5eb0db833fd86abbadfe7469af
Sample260710-pcafdsa14l

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5580	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281590501888141"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3437697693-2283162250-3003737219-1000\{0A6B287C-3BE1-42EC-A302-9D387175AD38}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1476	msedge.exe
1476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1552 wrote to memory of 2844	1552	msedge.exe	88
PID 1552 wrote to memory of 5580	1552	msedge.exe	90
PID 1552 wrote to memory of 4140	1552	msedge.exe	91
PID 1552 wrote to memory of 4140	1552	msedge.exe	91
PID 1552 wrote to memory of 4868	1552	msedge.exe	93
PID 1552 wrote to memory of 4556	1552	msedge.exe	94
PID 1552 wrote to memory of 4868	1552	msedge.exe	93
PID 1552 wrote to memory of 4868	1552	msedge.exe	93
PID 1552 wrote to memory of 4556	1552	msedge.exe	94
PID 1552 wrote to memory of 4556	1552	msedge.exe	94
PID 1552 wrote to memory of 1324	1552	msedge.exe	92
PID 1552 wrote to memory of 1324	1552	msedge.exe	92
PID 1552 wrote to memory of 1324	1552	msedge.exe	92
PID 1552 wrote to memory of 3120	1552	msedge.exe	95
PID 1552 wrote to memory of 3120	1552	msedge.exe	95
PID 1552 wrote to memory of 3120	1552	msedge.exe	95
PID 1552 wrote to memory of 1004	1552	msedge.exe	96
PID 1552 wrote to memory of 1004	1552	msedge.exe	96
PID 1552 wrote to memory of 1004	1552	msedge.exe	96
PID 1552 wrote to memory of 4496	1552	msedge.exe	99
PID 1552 wrote to memory of 5292	1552	msedge.exe	98
PID 1552 wrote to memory of 4496	1552	msedge.exe	99
PID 1552 wrote to memory of 5292	1552	msedge.exe	98
PID 1552 wrote to memory of 3556	1552	msedge.exe	101
PID 1552 wrote to memory of 3468	1552	msedge.exe	105
PID 1552 wrote to memory of 1280	1552	msedge.exe	106
PID 1552 wrote to memory of 1016	1552	msedge.exe	107
PID 1552 wrote to memory of 6004	1552	msedge.exe	108
PID 1552 wrote to memory of 6004	1552	msedge.exe	108
PID 1552 wrote to memory of 1476	1552	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://appluxura.com/goldsmith/chef?output=69490a2a7c6e2880a0adc24c3872f52fa3c1a17c9c4a252e02f76aea7963c3d39db26490ee0376b642c2577d37cb26ab5eb0db833fd86abbadfe7469af
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ff8872bc188,0x7ff8872bc194,0x7ff8872bc1a0
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,14125819848029986493,5513285497490168948,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,8966694067894570001,18185925831877040683,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:13
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,7360076071583195865,3547986410979276867,262144 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:2
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,11431682292040645117,9719416184074114717,2097152 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,17218572250554398458,6874652638613412943,2097152 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,4541545840078880884,13870097691204242208,2097152 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:9
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4360,i,3661505715307197832,10846403618230824906,2097152 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,1700245868215223068,14204523225560805568,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,15019726916108851775,14836308732086977173,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,869786615013531982,9118937755892994796,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,869786615013531982,9118937755892994796,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1340,i,17954021236877342801,15033331238464247072,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=1252 /prefetch:14
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1408,i,14605874362141602238,8765787768255652800,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1208,i,17502799006157979105,16205170679659938766,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,8065380525467076106,9395662881400611685,524288 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5316,i,1940524042443843597,5339085383329209821,262144 --field-trial-handle=2740,i,6740023436828439236,6407151934703800000,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b373b285262d249dbcb9a3049cb52ea4237fe0652081e7e8fc809216bf0741c
MD5 d654bc36905ca65fa089ed6415e1c5a5
SHA1 32d7e4997a7ad3c5350ef0dea5604fb990fb1c21
SHA512 b3861ef455d1d571b80f1b2c3f4170907ac4ef2bccdff0e11f8d8be2450c0e927dd70ff2e49f8dd530aa5a889e7a5d1a3bb70bb176dc5b1cac4c1a3139df7931
TLSH
T188D09265BB555A48D982B631B4B4935DA224C6E9A40486284050FA798EA26820A6B8AE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5985c09ea5aba349ed09b6fbc8eb9de203d87b937b3d15e178f9c8ddcbff5fc4
MD5 e9a5ff2b0bd541088cbaf6dbd9eb6cfa
SHA1 60e6975adef4a868df5a5d6f9fb782231278bcf5
SHA512 e573c63ce0ec4d161da9da1b14857404f5c1f5af8b80f751885854997c605c94192d043d14e48d5f6bfbcb5acfd0c3f0babe2845bc5a88fcfea7fe29c0156ca2
TLSH
T1CFD02220BB200808C882B230B0B0830CA220C2E8800082280000FA388EA22820A2B8AE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4d256e94ea28283cb3891e9dc7277805220e912b04cb8d2100b9bdb28edec191
MD5 6e2249b20aadebac5d5bc531c68dfaee
SHA1 6f3fcd20d38e9a1ecf42d1a21a2662754bf70217
SHA512 94b651df1aa4a69437a72b956c46256c904d5b3ec3c73ad422688c51d1ef0a6b466c75a8b16d12175b84964f9bb6d6143daba90c538bbd2f7916f224642c8a4e
TLSH
T1C3513C8C1FED49D2CB297AB292E5D8893BF7F85611CB9E01508D90B5D8BAF07B1C3420
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593c05.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593c05.TMP
Size 3KB
SHA256 6eecf20cb1aa1bd1dfa89f0489329cf3866dc98998a51dc5eea4bdc3a1f58f80
MD5 ff7fbef5a55ba4944ac24fa20f15f050
SHA1 07d48bdbae6367034932f908dd9e55d8d92374e9
SHA512 e4a692a78296a2d09def8f1e3ea179ffb35297974ba5603b41af2e9fab2e14ef536bd7f10981c95d7b30fded278bf0117a0391989a9704813d59a4f5fbab7f5d
TLSH
T19F514C8C0FED59D2CB297AB292E5D88937F7F85611CB9E01508D90B4D8BAF07B1C3420
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8e5e9a32c00395f78cacb642d62d00a7335007672621006d2ea7ebadaf41000b
MD5 64e4b1c5061c84cce18b354298cd6fc1
SHA1 d1d235424c4e6678ab96185395326fc7e662b207
SHA512 7c56981356bc4389bb9022327a75b6817fedc552256c28d29026db27851409a7a5f696601073fc218decac68b2faefe285cf8d99bbc5f33e86ab5516081c289a
TLSH
T1A941BDF383E4856DCA0196F4AB146E1BCE1D0515832C3D66C9E4AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

ee3ac2f4-b308-42d5-912f-11368b008d46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee3ac2f4-b308-42d5-912f-11368b008d46.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b5fc0f86f81936991c7002dbc4b8a20e38241bc66628ac8237921ab2efc14972
MD5 8b6d6ca5ea66741f77d1d94e39274ffa
SHA1 c22107c8ee38f3455f5ef44d190ee4a2e18f351f
SHA512 c26b28f7bfe616834392c87a09986917bd758138505906cbbec1e6728734e7df18028c65c55039ff13ad441a707a21700b56ea319b6f8d76952dfa50cf6995a1
SSDEEP 192:sxRtRviyM/jK1Ml8wbz/fesqy9q/utEgzoA8pHc/g6+WNv8L/YmV2AG3IgDeJ:sxRtIlz/fes5AmtEZ8/5Q/2m
TLSH
T1C752C916AA249977CCCBD20DFA557F93D6F91573A3901E44AAFCCA0C04E66DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 713bc23d03700980cf97871ff4d0e26ab3b75da9fcc856eae5d52cf83fe18e44
MD5 0e3935caf9a44fdf1c883a718331bc5f
SHA1 5e76edcec8c67f00ed93a617260e88aa05c49835
SHA512 7aaadaf670ea784ff8d0c523cdb9a54ac6f926a0938a301b84d16e69b5ba301d90a085fd4be3eafed809d0419ca6f501a5b5d1bb4e5981acf41ef39219d75b35
SSDEEP 192:sxRtRviyM/jK1Ml8wbz/fesqyFq/utggzoA8pHE/g6+WNvxImXYmzHAG3IgDkJ:sxRtIlz/fes5omtgZk/5JVXJ0
TLSH
T15862B716A6249A77CCCBD20DFA557F93D6F81573A3901E44AAFCCA0C05E66DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f22a21b3be8bdc71292d9c67b0eebec6dc7a3f1aa0335007ea46450c0e83336f
MD5 c67ed521ea5d456d2af5c5ef81480f4e
SHA1 ae4b020c4409d9dcff9cc7eb0863485656779b78
SHA512 a580400bc8c86b55f314d6b9c0a015ae8c06c8e1754fd4328dc15330a21a4350029476a1c4634f34a54f720b5f32fdb1a06c3eecf084cb5717d1c10ea133e2dc
SSDEEP 192:sxRtRviyM/jK1Ml8UQybz/fesqyFq/utggzoA8pxE/g6+WNv7TdYmoS5AG3IgDkJ:sxRtIq0z/fes5omtgZu/5ndH0
TLSH
T10862B716A624997BCCCBD20DFA517F93D6F81573A2941E44AAFCCA0C05E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 34d67915daf9b1d44c810f297358200db2160322ace5faabfb34daab2179e37d
MD5 3a3d301937b5e5e7767f48732503b3c0
SHA1 2a7a094956d5699bf038ff384860a195aeb65e38
SHA512 8c8d3d671b515be7c7f03b6b5076d3d1d99101e32cffc944d19edb2f251b163283512130344ef1444e660366cd80561d2b70ecba7e69b4d1c611035832779379
SSDEEP 768:zdWT7oWg0afNy8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6Iu6groPqmdEhA:zdWT7oWg0afNyu1jaPR6r9d/
TLSH
T1B5C20B3B644CCB7E4F844A9DEC296E876DD801CB9B984E5447EA890C03CB7EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ea2e48e2-63ed-4a41-94f6-892bced80633.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ea2e48e2-63ed-4a41-94f6-892bced80633.tmp
Size 13KB
SHA256 6625b6753c3e102f44df78ab72d48c7c014bd91c53451ec8b4a3c2f5840d7790
MD5 a442a83b5e699850db2d8a0bb0571268
SHA1 43a25bba30f369a66d47022cfe8a03e5196dc361
SHA512 8ff9257db09777f6608bd60237a3d7c22165bd2f8a95c212819ed7a642354d0f761c9a9652261cadab9e5b08f40eb7ff461de952084b7d03f0ac4d6df1137967
SSDEEP 192:sxReRviyM/jK1Ml8wbz/fesmy9q/utEgzoA8pHc/g6+WNv8L/YmV2AG3IgIJ:sxReIlz/fes9AmtEZ8/5Q/2s
TLSH
T1B752C916A6249977CCCBD20DFA557F93D6F91573A3901E44AAFCCA0C04E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6aff03500df7dc5e4e9f07eb4b0501dcdca142813aa9cb9b7c1dc5c0c53acd1a
MD5 a3c009519f5952753941bd7f3c9d4447
SHA1 7cceed0814d3726537fb56f9b2f7487e6760981b
SHA512 84da245183b23e44091c3e43933440ddcafd7310923fb09bd50434ea3360a98cf3d1d4926986e841e9b04d0fea39c2e0cfcbbeea67af50dbfe633323c13fe570
SSDEEP 768:fj+9A3++C9am4xwMsT0uIi/+ap+Xeq7pVb9Ms:S9A3+MQMRqPI57jb+s
TLSH
T131136DF198D78C72CC9E8797337E2E569EBCC553B2841984B7D86A0DCD862BFC206416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ff7189699024562edc880527218e0bf22575c36806fef25929449e528a3e7eb2
MD5 aeba8c92b260da128e8ec0b63097e734
SHA1 4723948632806287785e57c981b18dd3d677dd57
SHA512 5c669447008b68f34806de20edea8eda01525f9434c70fe17cc4d3b7ce758993edeb4fe459f0ac8ba27514e6d7019b46a8703c9cd5e2266810627b5dde54e2a0
SSDEEP 768:lj+9C3++A9am4xwlsT0uIi/+ap+Xeq7pVb9Ms:Q9C3+OQlRqPI57jb+s
TLSH
T121F2AF31A8558C778DE2D7A9360B3B57AFF49653D3C81EC499E86F0E86876AC0307427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 254cb2df586056975ca41ca48dd168ccedfd3e17bbce32efb6abb4c099edcba6
MD5 c1e0135d603bbd2b452bfc18c1b39ac5
SHA1 caa5af8c749fcdb4431265773be2471f4d08cd4d
SHA512 58eac25baf76353655dcdf18ebeb7a5789bdf44d2e96d9ed1d60a9e1f2a24431b8cdbed50c489c47a7896da835b06623637d71243b0f46a6e80d065d621aa6a9
SSDEEP 768:Xj+9C3J+c9am4xwbsT0uIi/+ap+Xeq7pVb9Ms:a9C3JwQbRqPI57jb+s
TLSH
T1A9F2AF31A8558C778DE2C7A9360B3B57AFF4965393C81EC499E86F0E86876AC1307427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 68139270013c01835607912175176ee5fa3624ae7f9d34d068cf3948187e460b
MD5 9b9a639d50d1cd4390ba61920ffd93bb
SHA1 b996784467a4d996c8a70e6ef462aa98ee741fbc
SHA512 0918e202ac9c93101e5fd667d66a9f51a39553168c6c0f3a1f4340da597f9907e7b32b322bedc1f3c15e28af5c11c3cacf36e4336a0642634de127070c277c20
SSDEEP 768:ij+9A3++i9am4xwtsT0uIi/+ap+Xeq7pVb9Ms:R9A3+IQtRqPI57jb+s
TLSH
T13C137EF198D78C72CC9E8797337E2E569EBCC553B2841A84B7D86A0DCD861BFC206416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7cdd813881e928607d69bff2091fb0e1069e9621e877291c5567bb88a5c4e135
MD5 39786d632ca55708f22987f8165347da
SHA1 a842b6383465ca0ed6be27152fbebf09173d7193
SHA512 c203a31f2899de8d760f468f180611ae9aa8d4d046182ca8ca427882654717eca0fcc64311dd9a22cbcea2f93ca440b07f4ad1f161a35aa1defef7685c379e7b
SSDEEP 768:Lrv+4UNbdl37Iam4xQsT0uIi/+ap+Xeq7VpeVH1SVP:LbsbT3VwRqPI57LEH1o
TLSH
T15003BF3298988C738CF2D789364B7A177FB8555396840BD0D5E92F0E83971AD2307A77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f7fd257-b99a-4bff-bf7c-57cbacafe6e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9f7fd257-b99a-4bff-bf7c-57cbacafe6e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download