f85fd7b922774770e0c02728a592f1ee0b04f73f064169c8e252e00e51af641f

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130435638.html
Size 29KB
Sample260824-gza2fadj61
SHA256 f85fd7b922774770e0c02728a592f1ee0b04f73f064169c8e252e00e51af641f
MD5 a17b9c2fa9925cdf0ce762b8a3f5eb68
SHA1 c8d4934f6910e64217f85b68d4e68ac4f1c9e24e
SHA512 0bc662f77761a042eb7a4cf29b3e5f03b1d867c0968bd4421db25e591eedd12f85eac716e8c3b9ca23db6c191d0920c9beee836f2e7a35af4be6cf7078a64d42
SSDEEP 768:jaznIYvicDK0C5KHjFejRm4oQRYZNE+bHDbWGBW5+Z9UzKSRlzPuWScxe0ZczKaQ:j+Ioi+TgKHjFuRYKoaQi5
TLSH
T16AD244D076C1E42357CD0A33BF1EB9F9D66E9C632484BA4782A4B68C24B9117D5B1CF8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1312	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320256542302678"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{C3218CA6-4C78-4187-A6FD-832784FD6B11}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5864	msedge.exe
5864	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 4584	4888	msedge.exe	89
PID 4888 wrote to memory of 1312	4888	msedge.exe	90
PID 4888 wrote to memory of 4508	4888	msedge.exe	91
PID 4888 wrote to memory of 3244	4888	msedge.exe	92
PID 4888 wrote to memory of 4508	4888	msedge.exe	91
PID 4888 wrote to memory of 4508	4888	msedge.exe	91
PID 4888 wrote to memory of 3244	4888	msedge.exe	92
PID 4888 wrote to memory of 1712	4888	msedge.exe	94
PID 4888 wrote to memory of 5240	4888	msedge.exe	95
PID 4888 wrote to memory of 5240	4888	msedge.exe	95
PID 4888 wrote to memory of 5240	4888	msedge.exe	95
PID 4888 wrote to memory of 1712	4888	msedge.exe	94
PID 4888 wrote to memory of 1712	4888	msedge.exe	94
PID 4888 wrote to memory of 2504	4888	msedge.exe	96
PID 4888 wrote to memory of 3736	4888	msedge.exe	97
PID 4888 wrote to memory of 2504	4888	msedge.exe	96
PID 4888 wrote to memory of 2504	4888	msedge.exe	96
PID 4888 wrote to memory of 3736	4888	msedge.exe	97
PID 4888 wrote to memory of 3736	4888	msedge.exe	97
PID 4888 wrote to memory of 4884	4888	msedge.exe	99
PID 4888 wrote to memory of 4088	4888	msedge.exe	100
PID 4888 wrote to memory of 4884	4888	msedge.exe	99
PID 4888 wrote to memory of 4088	4888	msedge.exe	100
PID 4888 wrote to memory of 1924	4888	msedge.exe	102
PID 4888 wrote to memory of 4228	4888	msedge.exe	107
PID 4888 wrote to memory of 3388	4888	msedge.exe	108
PID 4888 wrote to memory of 1064	4888	msedge.exe	109
PID 4888 wrote to memory of 4612	4888	msedge.exe	110
PID 4888 wrote to memory of 4612	4888	msedge.exe	110
PID 4888 wrote to memory of 5864	4888	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130435638.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe41a7c188,0x7ffe41a7c194,0x7ffe41a7c1a0
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,5961740056248508220,10769535513561357987,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8514451121774863627,13175382734754344672,262144 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,15898518118748531137,5317400025696373824,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:13
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,11622949750881364985,18401484461953596339,2097152 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,3523123818463211976,11565520105151357235,2097152 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,1583381879726604059,2849068344992691525,2097152 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,4499886850204981827,17273250073485403313,2097152 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14433472902451620835,12838261701462442788,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,7466418691196503633,3893202600858862117,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,3411055466392297885,2927659772092146962,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,3411055466392297885,2927659772092146962,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3884,i,8517634441938561667,16035978068839610232,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,12105277353771947728,1433295559080227180,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,10785375870739614200,10650737708328811067,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,17694679673179752959,15513606232019078023,524288 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6100,i,10793579804933622851,3718883507195275737,262144 --field-trial-handle=2704,i,17600733884500241221,12698589008524853041,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1724

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7c27006ffa137c90dc32d03bb47a055686b87993f7827f5afb17e2ce66937c7d
MD5 ccdef4af1c3fe07d46183f80dc8de6ba
SHA1 d378c2545daac92c7475c5a8847288855255f529
SHA512 3a976d67ec19b60301e375a17ea9fd3232cbf3cbe36e36a316a25d491e55e6298f06edbbe2030cfd543f569569797ce367f9a1eb8c1e81699b4f62fbd2378a08
TLSH
T1825165830771DBC1C7BA867A23EDA79E3BF0E4A9414B5E10A06E6DBC0D86F4B58D0153
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b329.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b329.TMP
Size 2KB
SHA256 bf724ed686600b16ff3256c635c595099a61bd944ee9c9ed047c4586a68e2495
MD5 a36d98efa13b96c925f81cb0c5ab66bd
SHA1 fac0da0ff0582f0470f8140ebaca457f3583c8eb
SHA512 9b27b2fc5322701ebd8c217922774343d987df13f0444234e66225caefb6fba24d77e95a755bcda37474ee488e8332bbae1f548e468718b7a321e478f1b4a8fd
TLSH
T1A75176830771DBC0C7BA867923EDA79E3BF0E4A9414B5E10A06E6DBC0D46F4B58D0153
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

609485f0-d3fd-4573-ae0b-d23d1077c28a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\609485f0-d3fd-4573-ae0b-d23d1077c28a.tmp
Size 2KB
SHA256 e541d040f73c47be3a61db63043b6727a2f46a7bdb72af2cceb0881b020b82c7
MD5 6045cf0ea0369e7f2938601f5dbad1b0
SHA1 5b7490d62bdb9f20daacacb75b56b8031cc61d99
SHA512 0a32d0375c84f689d0122b38ffb9576e4e9d0980332b6e4597b45ea422e2f8df9f8c6d8dee9a05e090c255f0067909333483f5398f56f20c99e02cc2194d2e9f
TLSH
T14141CDF383F5856ECA0556F0AB18AE1FDE1D0515432C7865C9E0AE27D3E3472E045A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 53531a87c837747502ee54d97a681b149116a2135158dd5ef2bb7aa2d1738ee7
MD5 297e2b4b4e08cb3ebb2cd2f01e12ca63
SHA1 d248b92a40772fc589146df6b68021f6b2afdb8e
SHA512 600599fc0d4426a945b105ce30b0fc0d1340ad0836fe2c8620d09abb9c2914032b179d4a05ddd8ab07a07f219a110257a0ab35a72e3774aaa8caac693fb32634
SSDEEP 192:sxRIRdbU/fEsFlGpKrjDuTzoA8p4t/g6+WNIYEc8iKQG+IgDBJ:sxRIXU/fEszGpgk/5IyRv
TLSH
T12E42A6166928A93B8CCBD21DFB65BF53D6F95032A1952F48B6FC861C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 59bace25371e305ebb76412e835fdc77b054a997f991270c4750bd32f7a322c7
MD5 5403ef482a3f6ed9f889acc23ffcf2a1
SHA1 9cd070caa6469800d626cb99b1c36c98992067a0
SHA512 0d68f556c0f565842fd591c5f7f175fbfbde0b74f2f5939dfd2bc81f9b7c02e5769dac6c5ab40522e968243c308db679fa82dbd00f41d44e80badc71dc4bf4b4
SSDEEP 192:sxRjRdbU/fEsWlGTKrjDuTzoA8p4t/g6+WNIYE/aiKQG+IgIJ:sxRjXU/fEsGGTgk/5IfRs
TLSH
T15632A7166928A93B8CCBD21DFB65BF53D6FD5032A1D42E58B6FC861C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f574f4679cf67bce2026c555f1756af0548cc221ea663ec9228039b9c132b329
MD5 3f4ef8fc3023a2ba0c2b9f417a07abe2
SHA1 6b1e72adfdec03382b1be1204817dbdf9d693a23
SHA512 fb66c76ea78c63e801a8f5347da6fb73cc15bf7e0d087661396567f53a3816bde84f9b3a556649f21282f740e060792ae3726c6fbd60b7ee21f61ca224d671bc
SSDEEP 192:sxRIRdbU/fEsFlGTKrjDuTzoA8p4t/g6+WNIYE/aiKQG+IgDfJ:sxRIXU/fEszGTgk/5IfR1
TLSH
T1D532A6166928A93B8CCBD21DFB65BF53D6F95032A1D42F48B6FC861C04EA6DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d0e660e5-bf67-4a35-85f9-212e5b2e8957.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0e660e5-bf67-4a35-85f9-212e5b2e8957.tmp
Size 23KB
SHA256 e9cd264dcfcb86d54e88aa3d1734d59566f7e81f63671d5731a60d0c012ca2ae
MD5 deb5d1df794ae417495df3a783de5ad9
SHA1 71c60eccaf7c1887da80cece7d2f0a992a5f09bf
SHA512 f92592dee82c3463e3f15d7505486004143ec3e42e9a2941c9d25cc592e71902c3fc8c0742c87fce0311be29ed619d87beeaf972996de0ac272655dc245d60e7
SSDEEP 384:0OhQi3gfCtgHZFfeQKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwY9VHRAAroZCO:0UQi3aWgH7feQ8F1+UoAYDCx9Tuqh0VD
TLSH
T1D7B2FB2B600DCB7E9F800AADEC296FD76D9802C796588D4047FE994C03C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a514e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a514e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5a7da9272f6d2447c011a3d7e33947bcbefb33aab2dd832056b8401067ae407b
MD5 0f8b2bfffa256d7e6334bfe6cf8d7485
SHA1 a707225eb11449c7911902d7d7bc02c562f781ee
SHA512 a926cb243967690e956316ec7ae0d7a493afb96dbd0f5ed98da32a13d27ebc4fd259808a4d5cf202db5240d21e68a70324a16bcf99968cbaaab9d654bda3e881
SSDEEP 768:qrv+4UNbdBs3k/rqGKhDaZtxfK48dHeByERRFzjK3YxbMK:qbsb3s3UWGoaZtY48dHSyw/vQK
TLSH
T1B603CF7068A89E778CBB8288BA877A53BFF0010385C81664D2DD6B4D45CB4ED170BD2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 cd6b6e1f7cdb884623431c6632e1143441b46de843e064168f03b341b1ca2b75
MD5 d7147fdbe60b18ed1a8ff2c08cf99c2b
SHA1 e9efc3b50237a70fca0623e451713fb3c052ce79
SHA512 881e287a1594c174e9bb4843960de65bd60dc6581c8baaa178327e90799753a803250547d70085a78da7f9c2d7e1d0d81220f4ef390f1053800b10704b32b605
SSDEEP 768:Ios3I/rqGbhDaZtxCK48dHeByERRFzjK3YxbMn:Ios3QWGJaZth48dHSyw/vQn
TLSH
T13BF2BEB05CA55D778CABD2897A873A17FEF0421385D85664E2ECAB1E04C75AD070BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 693d5197e707a71dc1d79343df5b2dda6ff8aca2f6e4b9995bc58db2bc5d25e7
MD5 eed91ae686eb254bbd12ff1a2958c01b
SHA1 bd5694d42894d3ebd46df3c524fa60059fef5e68
SHA512 ca7690cc0a9f300f2c9ef5bc42cfee85c5053fccc50363e6256151036a8daf8f23c3d4518420d18dc39dcd32139f3563420804e865944676b175b74db092d583
SSDEEP 768:uos3J/rqGbhDaZtxCK48dHeByERRFzjK3YxbMn:uos31WGJaZth48dHSyw/vQn
TLSH
T115F2BEB05CA55D778CABD2897A833B57FEF0421385D86664E1ECAB1E04C75AD070BC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b952f5056ae97d26cbb7a93dcdfdedce6a8689761f9db2236c34bfb1c2a6b688
MD5 7843707a7afd07b07ba77c8074c7e9a2
SHA1 b9f86680e24315ecba20dda6c4727ffcd982c73d
SHA512 be28a31256fc88cf4d2ad82b45d4eac60f266ad5093de770d9a6adcfb4e5a12e6e7eeb91b948a8c90b321ace48ded56dbd954addf7dc9997934da7d9926dda6f
SSDEEP 768:Qrv+4UNbdf38qGpcDaZtNK48dHeByERRFzjK3YCeVH1SCj:QbsbJ31GuaZtk48dHSyw/4EH1Z
TLSH
T19303CF7198A85E735CE792897683B61BBFF4411386C41B64C1DE6F0E868B4DD130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 32361ed4a4afa3e3ff3f4b002c77d8ef90731398c2e4d33c7c17b98b85a26c8e
MD5 3198b0ac5cc35b8cd18acba8a5673e11
SHA1 ba2ac4869e57c0aed9249ce1557406c0bd05470e
SHA512 4be6bae187d2d225dcd22bd859051df5fabc32fc254c6569f291df3687b4713498c0a5b040999f0e65f016c4613402b7953c22896cb22df3fa4e20c800a73ea5
SSDEEP 768:krv+4UNbdf3sqGNXDaZtxfK48dHeByERRFzjK3JxeVH1SCj:kbsbJ3FGFaZts48dHSyw/0EH1Z
TLSH
T17803CF7198A85E734CF792897583BA17BFF4421385C41BA4D5DD6F0E858B4DC130BE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 5095a277bee8b8e9ccdd375107d11355459a58b3700f8e29a621abb656bee59f
MD5 a3a4e7a33eb46fa8c6564d6a00c93a2b
SHA1 051ec086112256e5f81f98a484a95d8b89ef0c24
SHA512 4de1fe9465a5c72f1cb79d09c5d1538295c52b5b7a6a4125fc78c854989b6c5e94b25941cf0d0709ab7bdbcb71e63fe41e0e456e4b14888bdece26228957365e
SSDEEP 768:OFQZs3Iwgr/rqGbhDaZtxqK48dHeByERRFzjK3YxbMn:lZs3mWGJaZtt48dHSyw/vQn
TLSH
T158F2AFB24C949D7B9CBB9B89BA873717EFF04153C5D4A660E2DCAA1D10875ED030BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3dda8f0-38f1-463c-a7ba-dbdf0460fb47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e3dda8f0-38f1-463c-a7ba-dbdf0460fb47.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download