934ff17f383b50f6b510dbaff32f57e051f116a3155f5ccbf4ce1f01086cb33b

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 1KB
Sample260727-ppdzcasclf
SHA256 934ff17f383b50f6b510dbaff32f57e051f116a3155f5ccbf4ce1f01086cb33b
MD5 640b981775c2a8f5d0fe1402465efeb6
SHA1 9671bcde0aec93ef10b16b72818df043fb7834f5
SHA512 91ccfddfc9a3fda0b3d0be16e533886493e5bdb859da19fe6e68b8e254a0922d04a6a9e6ad271e099d4d28acee3d5ea50da7a2df60513f391cc692c05590a540
TLSH
T14021234F5CE1C469329165AE5B7BF80D3A52920F5108CC547CEFC1344F877990AABEAC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1552	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296290364244822"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{ED37D5DB-60D3-4BDF-8477-F3FC8BEE9F73}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 1116	1548	msedge.exe	89
PID 1548 wrote to memory of 2344	1548	msedge.exe	90
PID 1548 wrote to memory of 1552	1548	msedge.exe	92
PID 1548 wrote to memory of 2344	1548	msedge.exe	90
PID 1548 wrote to memory of 2344	1548	msedge.exe	90
PID 1548 wrote to memory of 2984	1548	msedge.exe	93
PID 1548 wrote to memory of 2984	1548	msedge.exe	93
PID 1548 wrote to memory of 4820	1548	msedge.exe	95
PID 1548 wrote to memory of 412	1548	msedge.exe	94
PID 1548 wrote to memory of 4820	1548	msedge.exe	95
PID 1548 wrote to memory of 4820	1548	msedge.exe	95
PID 1548 wrote to memory of 412	1548	msedge.exe	94
PID 1548 wrote to memory of 412	1548	msedge.exe	94
PID 1548 wrote to memory of 1440	1548	msedge.exe	96
PID 1548 wrote to memory of 5976	1548	msedge.exe	97
PID 1548 wrote to memory of 1440	1548	msedge.exe	96
PID 1548 wrote to memory of 1440	1548	msedge.exe	96
PID 1548 wrote to memory of 5976	1548	msedge.exe	97
PID 1548 wrote to memory of 5976	1548	msedge.exe	97
PID 1548 wrote to memory of 1324	1548	msedge.exe	99
PID 1548 wrote to memory of 1324	1548	msedge.exe	99
PID 1548 wrote to memory of 1360	1548	msedge.exe	100
PID 1548 wrote to memory of 1360	1548	msedge.exe	100
PID 1548 wrote to memory of 4732	1548	msedge.exe	102
PID 1548 wrote to memory of 5516	1548	msedge.exe	106
PID 1548 wrote to memory of 6084	1548	msedge.exe	107
PID 1548 wrote to memory of 5692	1548	msedge.exe	108
PID 1548 wrote to memory of 6076	1548	msedge.exe	109
PID 1548 wrote to memory of 6076	1548	msedge.exe	109
PID 1548 wrote to memory of 1472	1548	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd34b1c188,0x7ffd34b1c194,0x7ffd34b1c1a0
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,15483767670166716243,17267761311934752528,262144 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,9277175803220304544,11534192248415016401,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,11494877619739984458,16722865571276404795,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:13
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,8755045183489947100,8933322481004454292,2097152 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,9202673624260066193,12696402798997531289,2097152 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,10703864619175760361,11175202952594346413,2097152 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,5988065811379902985,8922730795069083289,2097152 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,127399113974303785,13774129293376077328,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,16822999059235708229,8045441339299738007,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,6598916958657888072,4488513178641257888,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,6598916958657888072,4488513178641257888,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2924,i,455335880125850936,5308364147565990679,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3284,i,13822676229988049288,15927534421596981141,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:14
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,10434313507993167909,996040691823747637,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,16614686763698920934,8580811352549779356,524288 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:14
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2836,i,17264225869125959459,5149689878273802942,262144 --field-trial-handle=2532,i,17138767779716444155,9209122648131046199,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9cd1e9bbcdd6b52c1ff783c1600bbeb93e05166e083996d4b5e1941cf9b14b0d
MD5 daa496e7620951ee21a059325316376d
SHA1 9c08d590fbac1045a103a35c278b328876a8ccf8
SHA512 1e062dca1d7e5311c1bf5befa865a5ea56ac49a99da57d265f124e56e8a711aa3cf0332260c9ab4b39048331aa3f047f2415fde0d7cde2b4329bd05b9b0c7e2e
TLSH
T1D3512D6A4B290AD2F39506B355F0985A3FF885BB3A03AF2070D6BDF4491FF6021E1497
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ad5d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ad5d.TMP
Size 2KB
SHA256 49783e44c7731a1c6fd5317a642ca8f8e2c651a1e17b13b26d8418be46537558
MD5 868cde8b864950f17f84e4ee7ca95f5d
SHA1 711f7f57b43c7c6521913ab7bc384d91b4c556e5
SHA512 5cf5b02294e3398312d2f68ad6a543fc65c060e0032d3cc2be98b3e7678ba6e6c982733dbb93b5b2aaca6f7fd1b2d29c794face23dd4cd6ca5b2591e2d877433
TLSH
T1A3512D6A4B290AD2F39406B355F0995A3FF985BB3A03AE2070D67DF4491FF1021E1097
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 50a854eaeaed31f5b14cb44ab2168c6c6159eaaabd6b4b7aae3a9aaa63835c4a
MD5 c8fbe39d1fd79fc66585b9bf52fdb8a9
SHA1 cab0268f8733b3f77089af02f155ad3c4a2b0b0a
SHA512 e38f9b9783d73af20977cc2c5058107b0408c57165b7496e2c39c0a7e5d127863156a3b7f0e64b20d42314c2113042051d0b47f96c42cbbec86b6e173f3ee404
TLSH
T101419BF3C3E8866E8D0556F0AA146E2BCE1C0915832C3D5AC9E4AE2BD3E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dc38c4bfebf4c14e541fd8859358b5d745858bd4511de43feae87a3c054df2f7
MD5 5e5329b0dceb91c26366f2375fa1d628
SHA1 b996c23994578ad8144c99d5c4f7606c9dc57710
SHA512 f5d507ae518ed0d2552c446d89f6882655f7435596d264e9e6f8494da0c7d27b35eb5b7da2f028a7423da7c9d41e30e81b9e2e41df4cd17907995bf0e6f3d340
SSDEEP 192:sxRFR1bo/fSVsoDmpq1zgEzoD8p47/g6+WNIYGlkkBGlIgIJ:sxRFfo/fSVsoi48sO/5ItCs
TLSH
T11932C7166928993B9CCBE21DFB55BF53D6F95032A1902E58E7FC860C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 20cb7130871fbf264ca7c6c5c0d9f26f86d4d77e19267d0d0731ff50cc0bb75a
MD5 b6a9e5b3cff19fac0817ff7d7e29066c
SHA1 318dd0b9d9699356cfb1ce5779951ed767340e43
SHA512 8f14d06de16d2cfd26020dbd92bcb39e1c9767c6390d1ace04ff0d7779e9083d13dd39273a5da90f128aac58b7bbf25c64635f5c8796afa9ca97d10515977c77
SSDEEP 192:sxRCR1bo/fSVsRDXpq1zgEzoD8p47/g6+WNIYGakBGlIgDBJ:sxRCfo/fSVsRb48sO/5IFCP
TLSH
T18132C716A928993B9CCBE21DFB55BF53D6F95032A1912E58E7FC860C14EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b7aba5140822d21ae265bee6824d85cc32b0b2a404426a7e858be163dcbaaa74
MD5 4a48c8a86d54fc7f3e8ac8b684b715f5
SHA1 5ea43898ba9767a3e746272e1a39a4ed2ac0b5d8
SHA512 8e080ad2ae7757735e91d35a479178302f9928217f373386927b027b8b0115ebb7679d3bcb8ab1ad97fee20989d16b15c6d5f9f0fbd129c1195c59634d015053
SSDEEP 192:sxRCR1bo/fSVsRDmpq1zgEzoD8p47/g6+WNIYGlkkBGlIgDfJ:sxRCfo/fSVsRi48sO/5ItCV
TLSH
T19A32C716A928993B9CCBE21DFB55BF53D6F95032A1902E58E7FC860C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 dbf9caf0c4eb42d47e663fc9aba484892eb59ee6b5c52feea881bf4a794ec224
MD5 f1a2da413fed9e290bd73d2786aa1eb5
SHA1 672f526ce82cd26c17b1e0bd90cd864997916a31
SHA512 5dd832fbde079540dfdeecaee3b3de1bba4bb1dbb5d2b849ec5b5b381932d934eefdce23101e5ede79804578b308b4c2689810b9a0a2f0dfa00b7ff93f943406
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIArowp6:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0V/
TLSH
T1FCB2EB3B600DCB7E9F800AAD9C197FDB6D9802C79A589D4047FE994C02C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f9fb7fddb048831aa8ea689ded60c4d03c8f3c5172e1e457e96325915eb6f26f
MD5 343ba6237098fb45fd96ac45737f003e
SHA1 d9aceca8f06c4524b480ca9b6f65e7054cff7a3c
SHA512 a3cde8bcb7fbaf2dfff95215b58addf245031067f55ebbf32c6513fb040a57ac25bd36d07b30dce23e7ee2adf8a0bcd152a9c14db52dee847eb15aed952a8f37
SSDEEP 768:dAv3JSlYy67Hucys6BRvi82oP4/z6himo6Wb9Met:dAv3q3imOz6ImoRb+et
TLSH
T136F2B035EC148E72DCABC395F1467F526FE46223C6CC2D80E5DEAB0D1697A6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 491e22190ae02d4cd89b0b1f48e3dd5708ec8c71f154be9e70a2ad116e03c007
MD5 760c00f2bf0d6d4a81b1c0bdacd5b64d
SHA1 aaa61b2d6470067f3ceefce1785e7bffa6f745e2
SHA512 0748fc3614cde2ce5371ca59e52e82a87e6fa4e985dd8fa654e105f733cd117ad619cf50c4907ed3fc4730834bfc589128755e17e9c4d5fe22f654c54fab490f
SSDEEP 768:aAv3wSlYyt7Hucys6BRvi82oP4/z6himo6Wb9Met:aAv3W3imOz6ImoRb+et
TLSH
T159F2CF35E8148E72DCABC395F1467F527FE46223C6CC2D80E5DEAB0D1697A6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8458b8e3e229bc082dc6dca5134f76c07858ca348ad161b89af91336320cf3b2
MD5 f125f412ab257adc2feec8ea82789cdf
SHA1 41df3183fba945af28c79744e02043fe0263bb76
SHA512 f5c2f60500c0a79c8e58994b1e20ec90be8db414df9e285e84a910ab187f8597b19d950d281d0d5dfe9024fdc89c8533aef04427f7d4ba4d586ce966f0f4e573
SSDEEP 768:iiFQk3Hwg4SlYyn7Hucys6BRvi82oP4/z6himo6Wb9Met:i5k3q3imOz6ImoRb+et
TLSH
T19303AE32D854CE76EDAB8795F54A7A12AFF05223C6CC6990F2DE9F0C12975AD430B821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cf8185852575d41b4686207571b55a6b85ab56a86665c8400dd0ef82f93a2791
MD5 c39978eb830d7080bc68dc5b52caf4b4
SHA1 87f3f6a079052795c5a0e2c8be4bfcca5d996c13
SHA512 a35246552c2fd32f77392dc3e718ba55ff703415cadc9cef29953bc9132ebe8011eedb0816a769b641221645034f3f7e9630dc3ffa96726c7dc18d29c09e6ebb
SSDEEP 768:xGrv+4UNbdS3TsdlYya7Hucys6BRvi82oP4/z6himo+L2bwn+h:xGbsbw3Tm3imOz6Imok0w+
TLSH
T1C903C035F4548D33DCAB8288B44ABA937FF4522385C91AC0E6DE5F0E129B95E131BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c26c12f-632b-4ca7-a0b5-6ceaa33b949f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9c26c12f-632b-4ca7-a0b5-6ceaa33b949f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download