1f0f6c7451d1a27b36197d3ff58d53d2ea9b4685bc9f198bb39af4d9fd446f1b

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 2KB
Sample260730-apcc7aam31
SHA256 1f0f6c7451d1a27b36197d3ff58d53d2ea9b4685bc9f198bb39af4d9fd446f1b
MD5 f336738bd73e5c0951da0958ab093faf
SHA1 24e73883aec19b525e7d5a26a416ace6433568ba
SHA512 5acf516a9060b5d9d7d0354726e5c0953969a0ce36ab55046f43bb87170a9bb5f582880396d818ca09e0a34a0109b1c45be98e73fdaa895e2756375b278c2146
TLSH
T1BF51C761F215442E1E27C7E46BD5B7473472C351C5A71EE4B03883686FEA806779325A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4380	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298445790113583"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{94123676-6E56-4090-A405-A39AF13CF631}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 960	4384	msedge.exe	89
PID 4384 wrote to memory of 4380	4384	msedge.exe	90
PID 4384 wrote to memory of 460	4384	msedge.exe	91
PID 4384 wrote to memory of 460	4384	msedge.exe	91
PID 4384 wrote to memory of 460	4384	msedge.exe	91
PID 4384 wrote to memory of 1980	4384	msedge.exe	92
PID 4384 wrote to memory of 1980	4384	msedge.exe	92
PID 4384 wrote to memory of 4560	4384	msedge.exe	93
PID 4384 wrote to memory of 5516	4384	msedge.exe	94
PID 4384 wrote to memory of 4560	4384	msedge.exe	93
PID 4384 wrote to memory of 4560	4384	msedge.exe	93
PID 4384 wrote to memory of 5516	4384	msedge.exe	94
PID 4384 wrote to memory of 5516	4384	msedge.exe	94
PID 4384 wrote to memory of 4824	4384	msedge.exe	95
PID 4384 wrote to memory of 4824	4384	msedge.exe	95
PID 4384 wrote to memory of 1360	4384	msedge.exe	96
PID 4384 wrote to memory of 4824	4384	msedge.exe	95
PID 4384 wrote to memory of 1360	4384	msedge.exe	96
PID 4384 wrote to memory of 1360	4384	msedge.exe	96
PID 4384 wrote to memory of 2464	4384	msedge.exe	99
PID 4384 wrote to memory of 716	4384	msedge.exe	100
PID 4384 wrote to memory of 2464	4384	msedge.exe	99
PID 4384 wrote to memory of 716	4384	msedge.exe	100
PID 4384 wrote to memory of 4272	4384	msedge.exe	102
PID 4384 wrote to memory of 5372	4384	msedge.exe	106
PID 4384 wrote to memory of 1080	4384	msedge.exe	107
PID 4384 wrote to memory of 4072	4384	msedge.exe	108
PID 4384 wrote to memory of 3472	4384	msedge.exe	109
PID 4384 wrote to memory of 3472	4384	msedge.exe	109
PID 4384 wrote to memory of 1372	4384	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe9b70c188,0x7ffe9b70c194,0x7ffe9b70c1a0
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13085024886582226919,12288308723394384454,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,7924984884667345262,10982641661737226897,262144 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,8954959366275047133,12629990994883755277,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:13
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7270793611253727707,7622824418808405417,2097152 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5800253451551589142,13191055548228749464,2097152 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,15756046495706508117,813727625200862457,2097152 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,9171756285642438045,17753016272792692294,2097152 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:9
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,10191491274690214322,15926685966597365064,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,6075524799253552074,15578863536939500474,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,15352437276230229617,4351544907822360892,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,15352437276230229617,4351544907822360892,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4068,i,5990659306323625052,8869454949313302660,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3192,i,17551286296020155215,14298046479348632622,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,10909704682351591811,12987701309750563181,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,17216688944531900919,1852579289150955211,524288 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,16021885396355578841,461816007332453399,262144 --field-trial-handle=2288,i,11771663235404525967,16550325801685519932,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 504692a06bfeb47da17dcf1690b92c0b6ff76aa5f0c49eb06e02f9a3b19c022d
MD5 4f93a806f9cb0a46a74a287ddf72af05
SHA1 6197ee14d0cfcb92c0e0925324fcb489f808e2fd
SHA512 0b762bd739970fddbc6508869f301c8f4b679b2918d0de73dec94abfd1e1071c84356ee0dc86d13971a0c0dbb75d99c3ed154829b8e4e83713f722278bc35fa6
TLSH
T1D621EB6807281ED3DFA155B2AFD1466E32F9AC6F12C72F901C41AE70ADF1F9450D1443
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59599f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59599f.TMP
Size 1KB
SHA256 2658c1e07c2eb2b4076486bc9f3fac2069a80b9ea168c8f07bdad4424df2012b
MD5 561217e422aa243ba1de6521da5ade63
SHA1 906a29a6b6adcfba788e8c20b02a96f9bd056283
SHA512 58a74f5a7928b57a7e6b6221124988a9ce9215abc55520b8ca14e07589936a4da918932fd51f04b535ce8203f5c9608a37625eebdf758830ba816dd8971dba89
TLSH
T11021EB6807281ED3DFA155B2AFD1466E32F8ACAF02C72F900C45AE30ADF1F9460D1053
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 11859e52a8400224fa39515c8aac5b7902abebc1d572eaa8e1e672891c445c0f
MD5 82582d3a6614df55dacb837f26434ad6
SHA1 11415dbaa46ea60ba0c7d37ff15efeda0f36b4c6
SHA512 63cef49c6a286a63f474a8c5edf5d7f1242e530c88def295833d7c06914e1c69db5d4067cd221503ee0df51dc0fea42dff402bafe49f591f40fc76c331dd8f9a
TLSH
T137419BF7C3E4866ECD0556F0AA146E2BCE1C0915832C3C5AC9E4AE1B97E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 93ab4f90ae87bd3fbdbfdde89a6ef0213a99188f209ff6bdefd01876915edfe9
MD5 9ef03a061cff42b37a37a942083e18ab
SHA1 a86f65c6b95cf659d2d55e6d4d6f29a9780a9408
SHA512 27e113792ac1e8df6cb86c18a3032eade44fb681ab49902c196d4a715312d417c06c4ac93a51fa2d33c0fcc238e1eefb27527ccf780ed544d1fc2f8892aca3d1
SSDEEP 192:sxRtRiyM/jK1Ml8wbC/fxsUMpq1znwzoD8p4U/g6+WNIYGlkSW+GCIgIJ:sxRtAlC/fxsUM4bwV/5I5WAs
TLSH
T18F52F9156A349977CCCBD20DFA517F93D6F95533A2905E04AAFCCA0C40E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 56c350dd6767f07a36ad5007b7af82435d7ab8e268c499f029470b9855b5db29
MD5 ee4de53976c4827b48e4d896aec4484d
SHA1 2bbb9d49e0e95741975dbbd71f49de2e697eb4b9
SHA512 a6716f678f8e4fffe5d79e65164a4061d108ccebcedac5963885def1785f37561387011ebfd5c32c8dd0bf9665aaff151b28b8bf4c06441a2dd3a7a93fcc9f55
SSDEEP 192:sxRGRiyM/jK1Ml8wbC/fxsjMpq1znwzoD8p4U/g6+WNIYGlkSW+GCIgDaJ:sxRGAlC/fxsjM4bwV/5I5WAS
TLSH
T14462E916A6349977CCDBD20DFA517F93D6F95433A2905E44AAFCCA0C40E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dcbe02e24b183962690f16cc4ff3c1ad3229a56af0ed6a390781132eae22bbd5
MD5 6d823f4df49f7156e5b00f02ededee2e
SHA1 e5cc9e77ca9f9876bb5db5799bb67e6b079e7f25
SHA512 44b597f0eac7c5546aa8ef7a3415ac4f4320ffabff5505d8edfe7d51a04da8bfd78e3f0576a659f9416d8c04d7b3e39966381d42b64a0645fd4210affe399894
SSDEEP 192:sxRGRiyM/jK1Ml8UQTbC/fxsjRpq1znwzoD8peU/g6+WNIYG9SW+GCIgDAJ:sxRGAqnC/fxsjR4bwv/5IKWAA
TLSH
T11362E816A6349977CCDBD20DFA517F93D6F95433A2945E04AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 99cb220095265f9f21427e4d3cce817cd6adf0a7fc6ea89261cdc26b3388c379
MD5 39a75f979f0b690337fd6511f394b697
SHA1 6a7d40ff0b88d60c190497aed4826ea1bedc3f72
SHA512 14cef93dc4ab25c5661eb408d9ce8ddccbdaaa69d0f382bdaabbbc7dbb2215269ccfa9136ed6115ba87fb7a6b69ce26efaada3c4a4630ff99677b1d2c52f9d16
SSDEEP 768:UtiiWNWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPpN0proYlPs:UtiiWNWgv7fgJu1jaCf0Co0
TLSH
T1C2C2FC3B640CCB7E4F844E6DEC29BED76DD801CB5A984D5447EA890C03C77EB521A49A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 85e920a7e74129d933a93b9e5dbb3d396c5289d811bf0ded9420c0c034ed934c
MD5 adfcfde2acf484801b50a579e97b7894
SHA1 cbfea94e632a58cb17969f21656e749a17f0957b
SHA512 29f00723b3a62d4d978e89cc9f8378f2f95a529d85ad07a1cd96fb9fe68c3c69a6c16ddd79d7acea7dbfd0c20af6d9799865e38711723610b1ce9a50cd8400d8
SSDEEP 192:Cm7KmgIIJ4tWGm7g09OGlkEfEIEtEpEfEdE9EcEJEmEtERE7E4gE/EeEnEvEOERX:MUg1Z
TLSH
T151D12A45713F02D1393EAA0891B98C2FD2C17497706CA46B7BA911A51F6BF03ADFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a7ae7d7a-14ee-4dac-b304-8b7bd55d430e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7ae7d7a-14ee-4dac-b304-8b7bd55d430e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59f4c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59f4c6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 2a71a51d2843203a407741cbf0c6485626855b411f26b80dea3c6aa8be0d1bb3
MD5 88a2b2e1cc02bf1edca7d5b9754ffe62
SHA1 fe423af2f4eafdd5ef9af4613d39ee469741533a
SHA512 af38f98d21b63c9daa5f5e7b822ff7cc6a1d3ab7fc94141948ab169363329546f80f3e5734fbd7773885851f4dace7bcfc29478383c6f85b13fb449da16a7fc7
SSDEEP 768:/krv+4UNbdC3afZlYy7xZ7Hucys6BRvi82oP4/z6himo61b9Mr:/kbsbA34xI3imOz6Imoeb+r
TLSH
T1E713C035F8198E73DCF78195B04A7E533FE4522786CC1A94E6DA9B0D06CB9AE430B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 824f27a650ba68df46a01bdcbfdad8741236b10a0c73fabc80577478e5fd5444
MD5 633cfc734ef8572598062d1f4a27b6a6
SHA1 b450ff97f9b1f726f4ea61e04143702df7dd104b
SHA512 c9403c8a7692291da571d49a9086f26493ceb7da4fe238a39ed0f5576a4d25b45eea5b2886cafd573dffa9e0c490e9d5fb398e74fd6cf94de4d663ce381240fb
SSDEEP 768:FAR3JfZlYy7xZ7Hucys6BRvi82oP4/z6himo61b9Mk:FAR3PxI3imOz6Imoeb+k
TLSH
T10EF2AF35EC558D72DCA7C295B08A3A537EE0933787CC6A84E5EEDB0D06C7A6D4316822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5b7af7c528752ed2a2ff2bba84b50d5a33104eb20a00615274d9c64395927702
MD5 f25b622b6deee04c7b746b721607f234
SHA1 c0c025aef70f5ef33394b10b921ed0767a62dced
SHA512 326253c24b1db0ccde5036a0e2f0f6790176b280dd5b00026b3b6d9ce388d49934c6194e6f3487b80b5ec6a3be0abbefbdb040ea0a8b9b3666956770431f8c3c
SSDEEP 768:9pFQo3IwgEfZlYy7xG7Hucys6BRvi82oP4/z6himo61b9Mk:9oo3JxT3imOz6Imoeb+k
TLSH
T13703AF36DC44CD76ECAB8695F44936526FF05233C6CCAA94F6DDDB0D12879AD0307862
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 08c9dcd9c13881c5141d9f6fea95921d6c60309d141a8309dd095bc0f5b5a2f9
MD5 7b8c8928ec5671b6f049c3711baa835a
SHA1 f522a9e68bd82d6717163b2bf0262eafa79e5140
SHA512 0323d2112e77a06fe90de07752d9d921420afccb915bacbabafe72e0d8df7ef459bb9c03cc0a9392e4a9d95811b4320ba1be4601f1a8bad078b76990ed50d14d
SSDEEP 768:xGrv+4UNbdS38BPlYy7x87Hucys6BRvi82oP4/z6himo+U2bwn+h:xGbsbw38Rx53imOz6ImoX0w+
TLSH
T18403C035F4549D72DCEB8188B44A7A533FF4522346C91AC0E6DD5F0E429B95E630BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babee539-024a-4c2a-b789-95ea99bb11d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\babee539-024a-4c2a-b789-95ea99bb11d5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/4272-177-0x000002B242A00000-0x000002B242B5F000-memory.dmp

Download

memory/4272-168-0x000002B242A00000-0x000002B242B5F000-memory.dmp

Download