cf364390d7ebe46dbffb6149b892fe1eae255f191781b1789accf0a43a69078f

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 07:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
360.html
Size 5KB
Sample260722-h72d2acb34
SHA256 cf364390d7ebe46dbffb6149b892fe1eae255f191781b1789accf0a43a69078f
MD5 9e8c81efbcdc95a77ae8e030c5ce55e7
SHA1 ba9647b29c2ccf2fb9fbaad1b05ed60f300fed2f
SHA512 69c794386360607eba501dcaa891745b10923836919b111b3564949879102c3c43ac6b1756e4aaba9db90a1f850c128154f6e0cc1723a3767724b4b600ae7719
SSDEEP 96:PNyatoXZzIEb0EaW87eUW7G0EUSU9Cubq++hJoqRFVy+x8MzTUGUOKBOYzjYzued:PNXtkCBNW7xEUSU9FWbzFXzTUGU9OYz4
TLSH
T166C13DD788768117C7BB3F92647673AC7310B25AB7048496D0C29A1CC9DFF4B8029E85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
120	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291786216220210"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{48265AA6-3979-4448-8F51-A25BF8069846}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3784	msedge.exe
3784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1096 wrote to memory of 5644	1096	msedge.exe	88
PID 1096 wrote to memory of 120	1096	msedge.exe	89
PID 1096 wrote to memory of 252	1096	msedge.exe	90
PID 1096 wrote to memory of 252	1096	msedge.exe	90
PID 1096 wrote to memory of 5612	1096	msedge.exe	92
PID 1096 wrote to memory of 5612	1096	msedge.exe	92
PID 1096 wrote to memory of 5612	1096	msedge.exe	92
PID 1096 wrote to memory of 2684	1096	msedge.exe	93
PID 1096 wrote to memory of 2684	1096	msedge.exe	93
PID 1096 wrote to memory of 2684	1096	msedge.exe	93
PID 1096 wrote to memory of 5880	1096	msedge.exe	94
PID 1096 wrote to memory of 5880	1096	msedge.exe	94
PID 1096 wrote to memory of 5880	1096	msedge.exe	94
PID 1096 wrote to memory of 4480	1096	msedge.exe	96
PID 1096 wrote to memory of 5688	1096	msedge.exe	97
PID 1096 wrote to memory of 4480	1096	msedge.exe	96
PID 1096 wrote to memory of 4480	1096	msedge.exe	96
PID 1096 wrote to memory of 5688	1096	msedge.exe	97
PID 1096 wrote to memory of 5688	1096	msedge.exe	97
PID 1096 wrote to memory of 5960	1096	msedge.exe	99
PID 1096 wrote to memory of 3612	1096	msedge.exe	100
PID 1096 wrote to memory of 5960	1096	msedge.exe	99
PID 1096 wrote to memory of 3612	1096	msedge.exe	100
PID 1096 wrote to memory of 4852	1096	msedge.exe	102
PID 1096 wrote to memory of 396	1096	msedge.exe	106
PID 1096 wrote to memory of 4356	1096	msedge.exe	107
PID 1096 wrote to memory of 4880	1096	msedge.exe	108
PID 1096 wrote to memory of 4416	1096	msedge.exe	109
PID 1096 wrote to memory of 4416	1096	msedge.exe	109
PID 1096 wrote to memory of 3784	1096	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\360.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffe2b0dc188,0x7ffe2b0dc194,0x7ffe2b0dc1a0
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17790416982336455222,318349693644650100,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:11
  2⤵
  - System Time Discovery
  PID:120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,14079784976587569280,5634590116635241052,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:13
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,12135848006343303101,12715365065638905225,262144 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:2
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,14651743465600446200,18127538341153315305,2097152 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,10466687447485053153,2543210196823231773,2097152 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,8185378256379630564,15311410060780608233,2097152 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,11073114009343077244,13821352130302297671,2097152 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:9
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,14555246929776043424,11183263672891249109,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,9378324220823273494,6278873771319620710,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,7457613461192261834,10851170629892669270,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,7457613461192261834,10851170629892669270,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,12188776159787481813,2280287753841753810,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:14
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,9615514231038466183,17516926600208794446,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,17524181984057595078,11629823584102758391,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,18206963610099748820,11041536182381363384,524288 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,5329066940742400613,9368001570379108999,262144 --field-trial-handle=2696,i,5014608147488605067,3071571023199454633,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3784

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3708

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6197b5ab5b34f40dec7c4fe0b51a17f8c8f30305db7651c80a7a68793ab93ff2
MD5 176b6d6362cf0c6f985c0b30145f9b06
SHA1 904f1ce9a4da5d809ad3a9e2207daa09333a15f7
SHA512 22465e27f34a154da2e2d60a99413c59dc29654cd5256377806cbb7600e24920b1ec77021f465136b5be534d3a069285a1b3f563f1088d165fe4bdd74bfbc59b
TLSH
T12D6120090B111DC2CB6443BA59D524DCBAFDC9D503876A5080ABED7D7883F1B5BD522F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5984f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5984f5.TMP
Size 3KB
SHA256 4f76ac05e07502c09b1b13c383c654c896e7c145decbf265050fa7ce8ee23f7b
MD5 9c4799312f74598edc8b7a1c747012d0
SHA1 904038ac8238cb3197e43563e6088530eddef679
SHA512 a6d084f0169b41edb12900a860847f159dbfb6953aa379afc27faa482b71a00e11aac579f74967c7540c9c4d9bfec3d9c132be0fe4dfc252d31bca8cf60c1b89
TLSH
T1D8613E090B121DC2CB6443BA59D124DCBAFDC9D503876A5080ABED7E7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b0f57461ea4e7d170fc1aeee5f7dc9ba303fe8ec708b6c3d4e33afaab8ae5aff
MD5 1ef23e6df62318b3b516fab0b868ac9c
SHA1 25c9e45f737fbc72b34b689d24817a0f356f4c7d
SHA512 72b2d22fee75be06d5300df77d5e9ca24c623602021a887c95f763003679b156c4de6455a6947dfef08792eecb88b6dc8d4bdddf0e6d5272fd545f6845f750f2
TLSH
T1E841AEF7C3E4D66E890196F0AB187E2BCE1D0955832C3C5AC9E4AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 46c1dbb43fe2319b799bf7a48c27fb5f87ebf9b201274c46260915c0584cdb58
MD5 869c7307b46b2ee07977306e7f349bfb
SHA1 ac96795e9222531c315044eb459fccabcf277d62
SHA512 018c4f741ef647610d08500c699125f06fb61085f84c67c04695c6c54bbaa941a526f14a04d1cd2e6b9490e540ea901570df33d4cf724bf7780bce580808110f
SSDEEP 192:sxRVRub9/ftsxvprQ5+zoA8p4i/g6+WNIYn83hdGRIgDxJ:sxRVi9/ftsxvOj/5ITRKP
TLSH
T1BE32A616AA68A93B5CC7D21DBB557F53D6F91032A1D42E48A7FC9A0C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 17c0aba6b0764fdcd082d554b8e9ca39c153135cb90b1cc195299bfecd6ef04b
MD5 f68a385403e0938cac23b2be21487c66
SHA1 144b5b047e251504767770a5364cb129df6e880b
SHA512 3da111f89aa6a6f90581f3cb73b9f5a3c40a691e617daa4511e47a9b7cf44dc17d8efd141687d69a819872337e21461dd59a0e61feb2a7c2c522f8db3a9fa3de
SSDEEP 192:sxRVRub9/ftsx8prQ5+zoA8p4i/g6+WNIYn8/hdGRIgDHJ:sxRVi9/ftsx8Oj/5IT5K9
TLSH
T19932A616A968A93B5CCBE21DBB557F53D2F95032A1D52E48A7FC9B0C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88c28b8b94970c0b30794421509d8b0aa0f160a11c5f6ff8a76b96cfa4f4b9b7
MD5 cba14f9e4b075ec4be5b7289786d7034
SHA1 926d30c68ed834b2f1606622e75a2b300a3bea5d
SHA512 59fecbcaad127391ef31bbc11742b5beb73878cef64a34e838fce071b13225e309b43703d9abf14b959e459748ae181726cbf0a9e49f3b2175cde35ee0634c1d
SSDEEP 192:sxReRub9/ftsQvprQ5+zoA8p4i/g6+WNIYn83hdGRIgIJ:sxRei9/ftsQvOj/5ITRKs
TLSH
T1B032B6166A28A93B5CC7D21DBB557F53D6F91032A1D42E48B7FC9A0C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 803b02f1232099ee2b312702b803de83df0b0a776e026f89286a45052cf4fc4e
MD5 621d18bc11e10dfbb6908f3f425f7ba7
SHA1 42ca9a21dc532839ca3c74068b0c2c9a16510e92
SHA512 630891ecd6ef1e1c6573ef95e89fc14400ec13b9297dbaf5271794981a5c8495bdcdcf03d2b3de6860fc2e4e2eb51f15d0f0c8173df883cf63bfda29a5f3dc3d
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPkrohMb:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VF
TLSH
T13DB2EC3B604DCB7E5F800AADEC19AFDB7D9802C79A988D4447FE990C02C77EA51194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ad71978a-698e-41ea-9e68-5a0fb5207744.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ad71978a-698e-41ea-9e68-5a0fb5207744.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ae9f9a0e6f5c8e57a4d505372596e3452cfbb66a41d901ff3b84b72d767bb8b8
MD5 574607f3590d538eba4dd0bea5c56c93
SHA1 ef0cc8944ca5736aa2ddd5bb67974db380d3d9e4
SHA512 7c5faf0f16acd7810a8bcd87ea806a15e3b11deec6e8fb24554096aa556273cd69fcb9fbf1abf20fabac06277fb9c67c963bfd096bfce3adec6b1e0c9693b732
SSDEEP 768:4j+9z3VI4PXDZIO0BoGcNzc4ReyIsPSMjS:n9z3V5tc44bsKF
TLSH
T1A5F2BF32ED65CD67ACE69286B50B3752BEF05163C1C82ED8C6ED2F0C06872EC0317926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7374488b3438cf4f2cb9a9c9d04dec0acc55e8870da809e23122e5d62adfb562
MD5 0dfb168a4f5b0d09e57704ab6363b350
SHA1 5ecdc0ce1f20846dccef903575f7f8634fab3aa8
SHA512 22219f5fd30424608ef23eed897c86a7a753731d8932fe61093622051c4421ac3fff10d1a854f63992dcf85eb8dac9c05683dada937e1893f5c3bc96eaad57ad
SSDEEP 768:+F1j+9h36wglIqPXDZIO0BoGuNzc4ReyIsPSMjS:79h3mRtc44bsKF
TLSH
T1A903AF33AD55CA6BACF69B86F90B3352AEF041A3C1C46E94D7DD6E0C05871EC035B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8355f3445504534320bb96152e3e72afa7d64d1ddfc9b8eace9873124c0b02a8
MD5 56f98935f6308b0103eb581ea048436e
SHA1 3d51ccdac739c5ad6defc2bb9cc31e2087e29ec4
SHA512 2a5fac7a1f295b5dececc8acf156e240282aa36a2362e20fa502b3df7f5d833bd1aa9d5fe311112c0a95befdb9efd7ea23a63ed0d3b69c409dc1a8d27e146d6d
SSDEEP 768:Bj+9z3iIqPXDZIO0BoG+Nzc4ReyIsPSMjS:c9z3wRtc44bsKF
TLSH
T13BF2BF36ED65CD67ACE59686B90B3752BDF05167C1C82ED8C6ED6F0C06872EC031B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a1b9b246a60447f1c8b9ee9510b563e51db77ed6f2f279215273d7ce9360f46d
MD5 03c61ecbe6e14b86ef557dfe51ac9da5
SHA1 5346990473e6d63651b1e0528265354e36a2f5ad
SHA512 e282242348d911a63cd0328013f0c04e3b8937e32432b6e71f05eb4812c9e10fc1ef0f5f0daaa7230acd9b7411c1eab57703f46b7bab9a11f47dd0d4fe711c13
SSDEEP 768:6rv+4UNbds3LDDZIO0BoGRNzc4ReyIsXTeVH1S5D:6bsbS35qtc44bsjEH1Y
TLSH
T1C003CF32A878CA77ACF6A786B54776533EF8512B82981ED0C5DE2F0C464B1DD031B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8160541c-1e1f-4d02-b304-9fd0fdebb8de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8160541c-1e1f-4d02-b304-9fd0fdebb8de.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download