c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb

Resubmissions

24/07/2026, 04:07

260724-ep4vnasbrh

24/07/2026, 03:57

260724-ejba6a1vdt4

Analysis

max time kernel
148s
max time network
166s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 03:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ZenithMacros-1.1.6-Unlocked/executable/LICENSES.chromium.html
Size 9.8MB
Sample260724-ejba6a1vdt
SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
MD5 0ff177fbf2a3873dd573077840e0b8f5
SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
TLSH
T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3940	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293394221254549"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{130C2478-9862-4E77-94B9-EC945014B0CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 240	2172	msedge.exe	88
PID 2172 wrote to memory of 5488	2172	msedge.exe	90
PID 2172 wrote to memory of 3940	2172	msedge.exe	89
PID 2172 wrote to memory of 4728	2172	msedge.exe	92
PID 2172 wrote to memory of 5488	2172	msedge.exe	90
PID 2172 wrote to memory of 5488	2172	msedge.exe	90
PID 2172 wrote to memory of 4728	2172	msedge.exe	92
PID 2172 wrote to memory of 5984	2172	msedge.exe	93
PID 2172 wrote to memory of 2660	2172	msedge.exe	94
PID 2172 wrote to memory of 5984	2172	msedge.exe	93
PID 2172 wrote to memory of 5984	2172	msedge.exe	93
PID 2172 wrote to memory of 2660	2172	msedge.exe	94
PID 2172 wrote to memory of 2660	2172	msedge.exe	94
PID 2172 wrote to memory of 5876	2172	msedge.exe	95
PID 2172 wrote to memory of 2480	2172	msedge.exe	96
PID 2172 wrote to memory of 5876	2172	msedge.exe	95
PID 2172 wrote to memory of 5876	2172	msedge.exe	95
PID 2172 wrote to memory of 2480	2172	msedge.exe	96
PID 2172 wrote to memory of 2480	2172	msedge.exe	96
PID 2172 wrote to memory of 3372	2172	msedge.exe	98
PID 2172 wrote to memory of 4068	2172	msedge.exe	99
PID 2172 wrote to memory of 3372	2172	msedge.exe	98
PID 2172 wrote to memory of 4068	2172	msedge.exe	99
PID 2172 wrote to memory of 2988	2172	msedge.exe	101
PID 2172 wrote to memory of 2040	2172	msedge.exe	105
PID 2172 wrote to memory of 3532	2172	msedge.exe	106
PID 2172 wrote to memory of 5388	2172	msedge.exe	107
PID 2172 wrote to memory of 848	2172	msedge.exe	108
PID 2172 wrote to memory of 848	2172	msedge.exe	108
PID 2172 wrote to memory of 2372	2172	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ZenithMacros-1.1.6-Unlocked\executable\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff8e6b9c188,0x7ff8e6b9c194,0x7ff8e6b9c1a0
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,13022232117129740524,7797272662310375274,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,8476955262868625692,3255088929097197154,262144 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,2249322513576940095,7349162277603902000,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,7155452260251694474,8657670316184130934,2097152 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,9975730965941120868,18394496513414339753,2097152 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,15217944465562518592,11226387393483446950,2097152 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,3944425556302227797,17831591249167977142,2097152 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:9
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,10553466443476539062,149378118410712062,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,7674933789337574807,5439046475529132126,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,6540779553229635683,14519114174648769424,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,6540779553229635683,14519114174648769424,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,3770504605698296494,2591002223601183467,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,2474109542845351077,13490284467935445295,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,14215279331406540280,8042037653479032540,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,9986561713190003156,10168715586643803546,524288 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:14
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5712,i,2290408527319184419,11701221037900438585,262144 --field-trial-handle=2316,i,6337489537321197586,3567272061737080137,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 81491f7764a75e014563e72286ae0faf0ec42c2611a12782bf4e5220a393fd20
MD5 f0184d77f50a914656e31add3c671313
SHA1 4c1edb687c1a62ab719dc73aa4b28072642f9453
SHA512 8c951eb2e08ccc9672c44b2ea851605e4bec3e4c2f1e5ab886ba7252963745738b449bcdc05de5f7000ce2f66b05d51f41768268f057dc37b8375bad4c2d1916
TLSH
T1D2614291732F0791DB27EEBA17D1E4C5B1F86C56A20B6A00DC843D74E086F167EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f2a3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f2a3.TMP
Size 3KB
SHA256 df0e3b8e81cf95d45c2d33198b6c00c4a44c2b6cfea028259572214e0a257a25
MD5 37c705bda80abbd6c13bca373d1f5980
SHA1 f32d7b045f98824cf36385806b843296deb21fb6
SHA512 e191299c472d09f65472db6a960cb71f83fc4249aa4b07f354d2a43da66593c86368be88b0f281111764cecf22b91cbc816d74cec65846a74903b37d74076451
TLSH
T11B615391732F0791DB27EEBA17D1E4C5B1F86856A20B6A00CC943D70E086F163EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 81742fad0e69c91fc4bb463ad99082c247506b3540d0eba9c9b327ba326bb04d
MD5 af8c3b07b62751f3395bc15b67222841
SHA1 7949e4ac9e9acf6ea8d5c95c12b64d924b8d1e11
SHA512 a267959d8f19823f6a6fcf1692145e45c91ed35087f084c6a189ccafc4606afde00801490eba109a5813c93ab85289a95b924056270b655856fd439fcbcb8641
TLSH
T1F8419BF7C7E8857E890156F0AB146E2BCE2D0915832C3C5AC9E4AF1B93E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d4526ee2371e1906e8e5534145a0d35c12f3c299b6f23e8717b7171b81fda6a8
MD5 c89bb35a7d217d3ca77d049949d10789
SHA1 356923b98bd00f90f583b1702c06c8553ae74a9c
SHA512 e9af7b7496eb39c14439f4e3c0caf93938a8044aa2f013bb8c2de1ce5543a8419556d447ac47cdd7dc9b1fdbad399817e17d000805714c05e7174241131ab106
SSDEEP 192:sxR3RQbP/f9siktYCbqzoA8p44/g6+WNIYEh3EGttIgDgJ:sxR3oP/f9siktPnF/5IJbY
TLSH
T11342B5166D28997B9CCBE21DFB55BF63E6F95073A1902E48A6FC870C00E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 17e27726a8d30622233fa034a0afdb8fb9295d15c7062a5bec284be6762a965f
MD5 e302131288d706b5dfaa1f3b264df2da
SHA1 5d053b664be62cc5b46af1ce31173864bec8db76
SHA512 079b7fb97cf12ffa8c83175175b5fd606ac174873d6dc941a9490e44ba92617ec8675a5d2f47f288168dc7d51c337c8a9ef500887a8dc2952d8ec855a02dfee0
SSDEEP 192:sxRkRQbP/f9sU5tYCbqzoA8p44/g6+WNIYE93EGttIgIJ:sxRkoP/f9sU5tPnF/5INbs
TLSH
T19632A5166D28997B9CCBE21DFB55BF63E6F95033A1942E48A6FC870C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 054de13575da78cfe9c33733eb0329350b479cb2c45df1c79da00facc1537f28
MD5 14d12b54f74ac1f6ebd15ec43b5ec1e5
SHA1 9cf5f341776893ba4b01c4ad27a96f9c3b036449
SHA512 a1e0dd59dda51a72bb9eff682089d2a493bd86fd16fa52bea57b9bb929247c1d757f97b8e58e1a6fd76392e859f3690b20b07c928fbdb5f49632786b6381d0d4
SSDEEP 192:sxR3RQbP/f9si5tYCbqzoA8p44/g6+WNIYE93EGttIgD6J:sxR3oP/f9si5tPnF/5INba
TLSH
T17532A5166D28997B8CCBE21DFB55BF63E6F95073A1902E48A6FC870C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e8b189f5e93b1f9c5d8d7b340ee329a79a75c75900ba215382412e1e8c716224
MD5 9805d86fe4822cd5f50eb77467d1ed0d
SHA1 2facc325160336acc86b652f282bd99aed7ac782
SHA512 533614d097ec5671f7ca6e52dcc8425e13d1dc88494a6062002c8c8f5160ce4843418d84685330dbffacfbfa1a71787b7521ae2c3f7baa22074e74bcb76cdbc3
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVL:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uoy
TLSH
T193B2DB2F640DCB7F5F804A9DAC19AFD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 3e03e8fd482afe79107aca30fe2266e935f7a2eaaaff61677a6c1680bc9e2495
MD5 c6317a5b43228af5c3ae266a2e65ec31
SHA1 0bde6a60d342a00b2dc7ed038a4cf65a23f29e4e
SHA512 d979b3246824cdf78840239c0f483ea1d338114d87b60016c78df6c25525b60f633aed0d40e54d4212e0ed3eb5074ac40e1497085393bf940f2ad4899f865121
SSDEEP 768:s93kV4tkDTd+ZgtxtKeX6+qTko0u229a4vsT1b9Mw:s93CyivVTVKa4Mb+w
TLSH
T1C3F2BF32FC204DB389A6D785B25B36176EF55263C7C82B84A9DEAB0C055757C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5b9f90794cdf51f93aceb207c0f64f2d9c657f2731e1ce3d3fd43c4216a249f9
MD5 373fb72b1babd454b5b8ecef5f93deb6
SHA1 b94b6fb8c9237ed61976f4e8a27381aea60473df
SHA512 21758494db5f17e19836c78f0f4bbd6fb6bcf1b050a5ea41d8d53284dc1d456e280b0eb3cd149689378dd9bbd226050aa98db2a14ba6d955a7ff5a88a081ea76
SSDEEP 768:r33kV4tkDTd+ZgtxtjeX6+qTko0u229a4vsT1b9Mw:r33Cy3vVTVKa4Mb+w
TLSH
T199F2CF32FC204DB389A6D785B25B3A176EF55263C7C82B84A9EDAB0C055757C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1c67e3e7ac2f60bab5bd2ad29de04470095107861abcb95636967ffd15fe486e
MD5 9ef03c7bdff27bc4f1a3d5ffbeaf6da7
SHA1 4bec6ab95351024f454eb9b80ae9a627edff3e78
SHA512 15a1a7ff2fecef7256b4f77b965ee83e48983400ba96c8756a12935a4131fb348d153ff59b1cf19c19c87520723d0fc72cd84e3364dd646337266f12da9ff9f7
SSDEEP 768:prv+4UNbdG318XqDTd+ZgtYeX6+qTko0u229a4vsDneVH1SdW:pbsbU3c0vVTVKa46EH1h
TLSH
T17303CF32E8648D778DE79784714B75473EB95163CBC80B80D9EE6B0D069B5AC230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dae77988fc55b596c9ef228cb5d61db51b92aed8a9b69862a62e620dbc3e3029
MD5 d7ba4c771503e6247d3aa27a58cb57a6
SHA1 55c0c4f9036763aa983cc32160cde9aaae46a079
SHA512 11a24cb002549998bd20c0bd5145c1029232af8de0727ef5ec21f838b0514525b9b6b4b901418878ea8c1926e73e77b7c78226b637fafd1e3314705b1c066517
SSDEEP 768:M33924tkDTd+ZgtxtjeX6+qTko0u229a4vsT1b9Mw:M33oy3vVTVKa4Mb+w
TLSH
T167F2CF32FC204DB389A6D785B14B3A176EF55263C7C82784A9EDAA0C055757C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1582f931-b9a0-487a-a53b-d3556e9079f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1582f931-b9a0-487a-a53b-d3556e9079f6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download