59d7841404a79d5001e40b0fe79a7f90b907ccbfea38f220278a3e61ea2578f9

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 20:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download (23).html
Size 4KB
Sample260720-za16faf12x
SHA256 59d7841404a79d5001e40b0fe79a7f90b907ccbfea38f220278a3e61ea2578f9
MD5 00c5b29252603ee6c810a1d69ffca491
SHA1 a3367c3b45ae41211c90f293e11c7f9dd27ae23f
SHA512 31adf51b45d516f291a14aab6d65efe256ecf5de378fb54f41a388f02b35fad9851bc1f1b3d979944b6085606942d9a64bee825cd2c19fdc068db4c8e4eb9ab7
SSDEEP 96:eqTWyi/X8jS2nIjvQ6qfqap77H5aAxIaussBtUjbTKdkEYoR2rkxlXap308WUg8U:/TWXZ2+/q5HZaAxk+jbTKdhlRMkxNIk1
TLSH
T1B9A1866BBD0BF7708F4252A8644D513C6CA04EB749A18C79744C847C0FAD7B5E362ADE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3832	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290531097770286"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{C76AD02E-22DC-439B-B914-2DAE29A4DE62}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe
1124	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1124 wrote to memory of 5904	1124	msedge.exe	88
PID 1124 wrote to memory of 4228	1124	msedge.exe	89
PID 1124 wrote to memory of 3832	1124	msedge.exe	90
PID 1124 wrote to memory of 4228	1124	msedge.exe	89
PID 1124 wrote to memory of 4228	1124	msedge.exe	89
PID 1124 wrote to memory of 5568	1124	msedge.exe	91
PID 1124 wrote to memory of 5568	1124	msedge.exe	91
PID 1124 wrote to memory of 5972	1124	msedge.exe	93
PID 1124 wrote to memory of 1656	1124	msedge.exe	94
PID 1124 wrote to memory of 5972	1124	msedge.exe	93
PID 1124 wrote to memory of 5972	1124	msedge.exe	93
PID 1124 wrote to memory of 1656	1124	msedge.exe	94
PID 1124 wrote to memory of 1656	1124	msedge.exe	94
PID 1124 wrote to memory of 5812	1124	msedge.exe	95
PID 1124 wrote to memory of 5812	1124	msedge.exe	95
PID 1124 wrote to memory of 5812	1124	msedge.exe	95
PID 1124 wrote to memory of 2672	1124	msedge.exe	96
PID 1124 wrote to memory of 2672	1124	msedge.exe	96
PID 1124 wrote to memory of 2672	1124	msedge.exe	96
PID 1124 wrote to memory of 3116	1124	msedge.exe	98
PID 1124 wrote to memory of 3116	1124	msedge.exe	98
PID 1124 wrote to memory of 5896	1124	msedge.exe	99
PID 1124 wrote to memory of 5896	1124	msedge.exe	99
PID 1124 wrote to memory of 4276	1124	msedge.exe	101
PID 1124 wrote to memory of 2196	1124	msedge.exe	105
PID 1124 wrote to memory of 1324	1124	msedge.exe	106
PID 1124 wrote to memory of 3580	1124	msedge.exe	107
PID 1124 wrote to memory of 5084	1124	msedge.exe	108
PID 1124 wrote to memory of 5084	1124	msedge.exe	108
PID 1124 wrote to memory of 1248	1124	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download (23).html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ff902fdc188,0x7ff902fdc194,0x7ff902fdc1a0
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,9209192396779885373,11877454130353010932,262144 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:2
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,3453347473952064860,9550871478483016149,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,63397306603159256,14418592492622620559,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,11629720859877321069,2044503876002148849,2097152 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,13073988512453552411,5280385914061063980,2097152 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,4228682076320340779,5938180028218471678,2097152 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,7323834425714148616,10624546791001228246,2097152 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:9
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,3076932897553078443,17074021880895366054,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,8611670248253664612,11366382489070284735,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,15733435576886385998,17514471043943735800,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,15733435576886385998,17514471043943735800,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,12557319276160003385,11476550169663211658,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,2260255224760623538,1184160979007756139,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,6195361196093915475,12695329344588546909,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,1768001209379110707,14317157418216355101,524288 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2036,i,160382483212405567,4472627562369646190,262144 --field-trial-handle=2580,i,7915870563056700590,12192924791788766093,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1248

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3632744224fcfe9bce3e1f5f4a52294d1d09552097ea1ef478aecb06e2e9e4f4
MD5 ec4e3355748eed9737df70460ea590a1
SHA1 abbfa7dbef02fe2f0a920c37e101c085ded8e35b
SHA512 ed19f7eb77b129a58ab9d450cc06bda5d2ac1fcf424e1aa848f1f52d569eacca754464d3e551ff1da0c0257eef49dba970e96c5be2cba12b5affc6471c371a76
TLSH
T13751954F2B2589D3E771957220E6076932F9A669DBC3DE00C8001E32EA06F71C1EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f16b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f16b.TMP
Size 2KB
SHA256 6ddaa16f0083bcfdf2d8ea6d764db58b9a39fc7864df2ab7f4888742d80d21e9
MD5 89e57a99ce770c0eaa035efc7ccc1215
SHA1 a789535027715ed298105360a0a2bdcf0380858e
SHA512 b5cb8c4d5557543346e4909dd82786dfca1871be6bf75a419a06a9f0c2a64f4d70b160a7da59e9de8f2558ee98a35c3dae30366158729589e76c67da8beafc6b
TLSH
T1D251934F2B2589D3E771957260E6076932F9A669CBC39E00C8001E32EA06F7181EBC57
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 24c81fff4e1fca1f89baa93cef26cf40207a03651aa16831e37b11be85e7a86a
MD5 ba7db82126189ecacbc7f20ae511a8af
SHA1 a62a9510f7d29deecf45c927d30f320593eef052
SHA512 432783b3e18e02150577b5cd255d12c3fa7dbd8abb5e8b4d104b6c14666c745afdf96705d3e645cb0a245d6be0bfbcd4df03e1b861d1cfedc9109389cd5d1626
TLSH
T1BB41BBF3C7E4856E890156F0AB186F1BCE1D0915832C3D6AC9E4AF1B97F2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 38664830741ee7aaa41fc86f845c6a473e73f850553af4c6de88fda611eb3518
MD5 c886081644c43dcb848577de12d335bb
SHA1 d9a8b8d8012efb10e6ed56852c4b92fa445f04a2
SHA512 cd1409d227efb58c2f86b1c449de80b4d5719f30d7165864a5f10a695b7c857c2dd9164ab15145231b77f8a8a61eed899855800e9181a3591fdc051b9b12065b
SSDEEP 192:sxRKRvbu/fmsgYPDxGQwGuzoA8p4l/g6+WNIYofCYVG7IgDnJ:sxRKxu/fmsggDxnpTw/5IqTN
TLSH
T1AC32A61A69289D7B8CC7E21DBB65BF53E2F95032A1D42A48A7FC8B0C04E76DD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e739801c79db2e363813fbd68a5700f6fa576b96a2c3a89cb2fa5dbee4640ead
MD5 9c90c3bd7f17a5d4b2d8e2ffe63c2e24
SHA1 23c859458b9a5558466ea462358a8597f32a06b3
SHA512 7616edb26e8da3e15da4b8faca4dec95de77917a15600fb2a5d1e783303ae4ea1953752c7c892841bca0de17206231137e8b61517f6dab4ba315f47b13d4930f
SSDEEP 192:sxR1Rvbu/fmsmYPDxFQwGuzoA8p4l/g6+WNIYoXCYVG7IgIJ:sxR1xu/fmsmgDxmpTw/5IyTs
TLSH
T1783287566A68A97B4CC7E21DBB65BF53D2F95032A1D42A48F7FC8A0C04EB6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d68c3fba991da3c3b86e948453002fba670d711df407af151d93eb9c3d760574
MD5 e2070308d8e4dff34af8f6e4c8885c28
SHA1 9b5c80fc97c75d806ded3dd928eb976540ce8a50
SHA512 2de107edd8f1ad92257b6be1f9b33b768860bfb712ede5db30e78970803828dc7152d36a17a11e286cfb108d4dfa53e2520c0f07d44a21b892482cf8e74d5a62
SSDEEP 192:sxRKRvbu/fmsgYPDxFQwGuzoA8p4l/g6+WNIYoXCYVG7IgDRJ:sxRKxu/fmsggDxmpTw/5IyTf
TLSH
T14132961A6A68997B4CC7D21DBB65BF53D2F95032A1D42E48A7FC8B0C04EB6DD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9d95b4099ef688ad125596478b8befa8ef76c5c3343bd9ae11ccc4a0bbd1ddf5
MD5 56818657b301de2cdfffdfadbb3521df
SHA1 6a7103694b38e6779230bf0320931fa77d2df22a
SHA512 a8509ba0798fb3bda9f12b72902796f6ee1358e70802ab57ed7250ecd817da52cfaec9c8e2980d894ac0463c8cf0e2171d4050b37baf796906997976618bbcdc
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXIro982:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vm
TLSH
T1BAB2EB2B640DCBBE9F800A9DDC196FDB6D9802C79B588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9318d036-bf6f-4c7a-8ae5-921823329914.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9318d036-bf6f-4c7a-8ae5-921823329914.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4671efd22ce4c5d066bda0a6cd254905a9a9e4817150ed6419a69b19c1a465df
MD5 8969b48706197b50f7f603bcad60ed64
SHA1 f30fd3a307e2b5dcd31635ab6d12b014382e40b7
SHA512 d558dfabec845236473e00e9a1a28317e5bdcc6825e008c880b96ba4189426c12cd1414182134087ad6f60abd150c728fc511121ab6590a8f4d052fb03c578f2
SSDEEP 768:nrv+4UNbdo3tJ/TBOW1r+CONXyer1IRCzni9pt:nbsbO3HjSIqnqt
TLSH
T13603BF32E5A89E738DE292D6B10777837FB81067C6C40790E9DA2F4D05DB99E230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8fa8066eb53d517e5f2ba733636bdb7cd2d877c3154b63e243838894d1d904e4
MD5 ce27e778a6bef10753a9e5ee26118374
SHA1 4d3db82395dbaca4e242b4487545e390c346410a
SHA512 4f0dd0d7c1327489b42acaab2c0802d56103fb7bf38ccbd5dea383cb362f3f0cd97edf5dcab2b617f2d3cfd3f073246df054d6d82d569999e3e24602fa464b34
SSDEEP 768:+j+9a3/J/TBOW1r+CONXyer1IRCzni9pb9MU:99a3hjSIqnqb+U
TLSH
T1DEF2CF35E4959E734CE1D3E6B1073787AFF5517BC2841A80A9ED6F0D09DBA6D130B80A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 18da25ae026806fc0d629d01f9f0cc0224656f50a11e3b20c9d5a40fa23b91e2
MD5 1c6a5699abd9958afdddd56679f483b4
SHA1 764de5652b03cceb309d0ffcbc817395962cd288
SHA512 942bb9d2e0ed6fb531e980dc00beda680824c165f4b3784eccd9479e1cb66639313f954b1565561143e10f233d862f94ce004b5651af8f4169df97ad58ab8646
SSDEEP 768:Uj+9a3UJ/TBOW1r+CONXyer1IRCzni9pb9MU:D9a3qjSIqnqb+U
TLSH
T16DF2CF35E4959E734CE1D3E6B1073787AFF9517BC2841A80A9DD6F0D09DB96D130B80A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e355ddb9c544da9d939859086e0be964e3bbc8ac612aec2d2a04f20b6eff948e
MD5 79149d77f768d0ac11b79107aed13d12
SHA1 1fdcc379c4ab74fc41e8a1e23d7056a3d7f02169
SHA512 71a4a49bc98ab7e04e52799b86fb15fb04523faa859bc9f5a582b373ae4ed60a402dac3f8887bb4e496d4e96429cda3c15f1edcd170f8b3dfd8c699c1117e86c
SSDEEP 768:sF1j+9G3FwgxJ/TBOW1r+NONXyer1IRCzni9pb9MU:B9G3/6SIqnqb+U
TLSH
T14103BE329484CF778CE297E6F20B3787AFF541B7C5845A90AADD6F0D059B5AC030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2069a6e6061f4cabe698e5cd881da8f6a59e2772faa3ecd604c8f6afb203a617
MD5 5bf6d702d86225b4a6589ef12326a62d
SHA1 e689494f2877bc660b14aad09b06c79a589ed4df
SHA512 6ad750f90984a6b5ceee8998635656da29c7e8b328343c1c981df1d3a347134cccd8cb07e2300411ef6e0de748de577694927e3ffbfda5a284947d807da8378a
SSDEEP 768:hrv+4UNbdz307/TBOW1PONXyer1IRCzniBZeVH1SK7:hbsbV3Y/SIqniEH1l
TLSH
T10E03CF32E4989E338CE2A3D6B147B6437FB86057D6840790DCDE2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98bdb4da-c3c6-44ff-a101-3367e835c443.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\98bdb4da-c3c6-44ff-a101-3367e835c443.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download