8aa36da92b9e6631bdcb4f37bb7a592b019200cc22e3c12389834f3f63d5519b

Analysis

max time kernel
148s
max time network
160s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
wc2026-prompt-package/Documentation/documentation.html
Size 1.4MB
Sample260826-pqa9vadc49
SHA256 8aa36da92b9e6631bdcb4f37bb7a592b019200cc22e3c12389834f3f63d5519b
MD5 446ef588c6586e4ed6567fbf2f2c0148
SHA1 aa370e9b79aaf4221aaf32cbb30c86a54469009f
SHA512 68f632e5167abaaa2d5cfd447b7dd3cb6c4da1d7bb94057fa2ee414f94a39d3a0c6bdc5168ab9d243dccfc3155767b065ca284a749d30250170fddd5da789389
SSDEEP 24576:i08rP7CxLBDmWe5puzXhP+FloHYw85laKuWPFs06wfhfvNKy:iE11xlE5k0X
TLSH
T1C565E13BB729EEC79D53B043491936E01C48D4ABDBD0D118FECC169A5B8D9282E39B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5376	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322211103999201"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{A9FABFBB-5EB1-4610-A2CC-C66B09390CFB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1220	msedge.exe
1220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1160 wrote to memory of 1540	1160	msedge.exe	89
PID 1160 wrote to memory of 5904	1160	msedge.exe	90
PID 1160 wrote to memory of 5376	1160	msedge.exe	92
PID 1160 wrote to memory of 5904	1160	msedge.exe	90
PID 1160 wrote to memory of 5904	1160	msedge.exe	90
PID 1160 wrote to memory of 4624	1160	msedge.exe	93
PID 1160 wrote to memory of 4624	1160	msedge.exe	93
PID 1160 wrote to memory of 1572	1160	msedge.exe	94
PID 1160 wrote to memory of 1572	1160	msedge.exe	94
PID 1160 wrote to memory of 4664	1160	msedge.exe	95
PID 1160 wrote to memory of 1572	1160	msedge.exe	94
PID 1160 wrote to memory of 4664	1160	msedge.exe	95
PID 1160 wrote to memory of 4664	1160	msedge.exe	95
PID 1160 wrote to memory of 3496	1160	msedge.exe	96
PID 1160 wrote to memory of 2424	1160	msedge.exe	97
PID 1160 wrote to memory of 3496	1160	msedge.exe	96
PID 1160 wrote to memory of 3496	1160	msedge.exe	96
PID 1160 wrote to memory of 2424	1160	msedge.exe	97
PID 1160 wrote to memory of 2424	1160	msedge.exe	97
PID 1160 wrote to memory of 1232	1160	msedge.exe	99
PID 1160 wrote to memory of 6100	1160	msedge.exe	100
PID 1160 wrote to memory of 1232	1160	msedge.exe	99
PID 1160 wrote to memory of 6100	1160	msedge.exe	100
PID 1160 wrote to memory of 6064	1160	msedge.exe	102
PID 1160 wrote to memory of 2932	1160	msedge.exe	106
PID 1160 wrote to memory of 3316	1160	msedge.exe	107
PID 1160 wrote to memory of 1508	1160	msedge.exe	108
PID 1160 wrote to memory of 5852	1160	msedge.exe	109
PID 1160 wrote to memory of 5852	1160	msedge.exe	109
PID 1160 wrote to memory of 1220	1160	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\wc2026-prompt-package\Documentation\documentation.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe2b0dc188,0x7ffe2b0dc194,0x7ffe2b0dc1a0
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,10096730435825617103,432202318719889915,262144 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:2
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,5103423299720932110,12270969588880029407,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,17958091752220343237,10145924529163985961,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:13
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,12188827401246724008,17543437250082023345,2097152 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,9133710082909016888,153864846295477868,2097152 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,15751635403850271190,14108620315268644020,2097152 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,14950735573866309555,12478284817776003799,2097152 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:9
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,6082519145926660170,6988446503315936444,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,16391866154841215202,7363997539308486469,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,4986243869165774056,1416687903041160358,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,4986243869165774056,1416687903041160358,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,15706733884338912617,10661242712607629414,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,8505511777852810849,10500201598043147675,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,1428932626526768629,8894515447878316554,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,15009365805382141167,6261738278623163204,524288 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:14
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6452,i,3042630614034188569,1440544192160786567,262144 --field-trial-handle=2448,i,16560882125737407319,4923094025405455256,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c0d42031a7d93e5968427abeb5db2f2918bdb889c1c9158d8de6be0288c5250c
MD5 93f79022ef3fa8b6b710818e97343105
SHA1 989797dc9c676a30dbb18b6f3ee6ceb204b71966
SHA512 f9069bbbadd6da073a76fcdabe54c2dc2c7379e6240691d2b83d6d9b2dafa52f5b18fb7092ecf78a12622c53cfca5079ad59c00694df798488268d9a08b58db9
TLSH
T1D8613E090B121EC2CB6443BA59D124DCBAFDC9D103876A5080ABED7E7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59896a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59896a.TMP
Size 3KB
SHA256 ebd188aa3586d7832d71d0e1503b6a01323e8bf5a3c028e5c2c8e94b1dac1d10
MD5 5ffa034cf63f1aafccceef315a0aa4c6
SHA1 94f39c2a780e72440ba891a2b02c8e0e26b8eb70
SHA512 cc126d1f6fc68a84e9754fda6af4e2443d43576dc1a6d88e14fdaffa8aa9abc472c4f59d143d585986a635345fcf7297134243b7e45e785823f8218a1d9c1b27
TLSH
T1666120090B121DC1CB6443BA59D524DCBAFDC9D503876A5180ABED7E7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 10b936b3bcf02b7f6c18cb290a23fec5717125a41fb90492ec4e0d1996e07ea9
MD5 d02f14656194968f80ad9057050a5d93
SHA1 a1eda19b2645f2d262252e2d64d454a7abd48d64
SHA512 ee72c96cf5b7e816e46d1ca58571d9ea4d32e364816940dd7cc5c6d0a8a11b96e1c7afa87f2af4b20a60366bcb2125635fdc43a60bc0f8930f0157cd8239d45f
TLSH
T1AC31A0F783B4956E8A0196F0AA14AE1FCE5C0511431C7CAAC9E0AE2793F3472E045A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1ca759e46d2e306102d8fc883d07d5aac1eb9a2c44d2e2c07219da69dbc7c46c
MD5 1589dd0c27edc98d6f4892b6ca011851
SHA1 7ea731f17990877f21b3c5ad63379d2b4f60d3ff
SHA512 ff621682c0d8c130d08846b0a3253c4d06453f08e9205dafd6eff238d8a59c1c15a17139a72cfbf7cf6acdec388a02273044307097a44dfd1d679e6935ecf384
SSDEEP 192:sxR/Rybv/fWs0cmprQ5nzoA8p4s/g6+WNIYn8UKh3G6IgDYJ:sxR/uv/fWs0cmNt/5ITZ3A
TLSH
T16A329516AA68AD3B8CCBD21DFB55BF53D6F9503261D42E48AAFC8A1C04E77DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d6d10f2817ad6cdf93d24a7a0ea4156e1d00762821c95f4e7ee3bdbe2beab4a0
MD5 afaf23c0ec55bfef4de7a6b28e04945f
SHA1 1289ac8514fcc25c8d41af8bb599d50a4c93bfab
SHA512 f24a0bd4e3e0a579e3f961dedf6e83973a7a32c066621c3502e754c8742168569acd2b6dab49b3adea22b3879852042d05320943b153fdd0e4841f113dc10513
SSDEEP 192:sxR/Rybv/fWs0ccprQ5nzoA8p4s/g6+WNIYn8J4h3G6IgDqJ:sxR/uv/fWs0ccNt/5ITg3K
TLSH
T194429515AA68AD3B9CCBE219FA55BF53D2F9503261D42E48AAFC8B0C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 869a72f198277dfbb0b72f9eb395aa8c2ca00bdecff99832b4febbcc20cc447d
MD5 25eda6409386e39864637e8c631fb2d0
SHA1 165edfb5791958fda2d74b1f16ca6ae8bcc4da9e
SHA512 b610133c6c60f923b78cc6b14dcde850ca80cc2b31b99ba1aa3cbdf4ff3181f2423c515560a9f8ff4bb81e4b1e60eede45265bd49c2d4d5cd623dd6d42b85838
SSDEEP 192:sxRIRybv/fWsAcmprQ5nzoA8p4s/g6+WNIYn8UKh3G6IgIJ:sxRIuv/fWsAcmNt/5ITZ3s
TLSH
T16D32A615AA68AD3B8CC7D21DFB15BF53D6F9603261D42E48AAFC8B1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 00fc60aab1ed500cf8e0b938e0b64e079bf3f69dda95a1c207a0c6f2c0daf498
MD5 35dfce3e665f976c7821b70b1355685f
SHA1 8ee3b625a756b8e5fafb9823c2365d398e23c6e8
SHA512 deaf334def5623511410a81183b8766aa76e87231651c5e29250b6bf5edf0a47f7dae03535cb899070835b4f8f12b2a679e1ece567b0eff8cdcb65fde8f7313d
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPcrohMb:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VJ
TLSH
T106B2EC3B604DCB7E5F800AADEC19AFDB7D9802C79A988D4447FE950C02C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2329.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2329.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 98cd3fdf6befa273df5037c03312607e66de15cf0b1aa81ccc444b349045b6ed
MD5 0cc3cd0dea67df238c3f500070ae39a9
SHA1 a0e35a95c7f06a7c79fc34920418663f8b6261e4
SHA512 da02f5b037d17cc2cc418ea234419e900ab90450c0e26a116196b4dd965066bd29677db4fe2506db7c561cc247e40bf167aa08e3f8aab569ffc6f992f857285f
SSDEEP 384:VZcI838NjqLIdLqy8CJDZNfNoXOVSUUBoG7LdETRzcoXfK86sfxEZxxsIj4lBtXR:t83lIdZzDZIO0BoGGNzc4ReyIsPtR0u
TLSH
T19AF2BE72ED65DCB7ACF99282BA0776437DF4815B82C86ED095DD6B0C0A472ED031F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9d6dcdbb9d5807cd9fdba0272a43f61ca575ee147117a7f6923148c160b4e3f9
MD5 7e080f14a26be092ac13d0916e440e64
SHA1 df0a89286a6823a51b4a64c469b0e5f64489481d
SHA512 d2c72c9717f6e496544b8568ee207c16720511c62544e2ba3fce60e3f8a15972eb02e15b6212abb89789abeaa4462c0bc7aaa60d6df23846e21ef5a19c288750
SSDEEP 768:jrv+4UNbdn3cIdrzDZIO0BoGSNzc4ReyIsPtv:jbsbl3Drtc44bsFv
TLSH
T16903AD32F869A963ACF6A686F50775437EF8515B81C91AE0C5DE2B4C064B1EE130F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 230e690ee5839e5213ef9402e7433a181b1f68c25aac2ab2e32c558677796228
MD5 bcc0c320b27e3d98d5dd689833b18e51
SHA1 9cbbe61c8401105a724678ed80b26b3220fd3d1e
SHA512 2b6012657b91dddc4a8dcba8a53d19438e9196d1a4f07387b435ac1c571f477eee37490666961a1dd4b9fb8c077ee8b1f6e857158a616760023cfec168cfa890
SSDEEP 768:tFQR36wg1IdZzDZIO0BoGCNzc4ReyIsPtR0u:8R3xdtc44bsF+u
TLSH
T10EF29D72AD94DCB7ACFA9782FA063243ADF54167C1D8A990D6DD6B0C16472ED030FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9bb0d0452ca3626f2e86a176fbfa08c653478bb8eb939e687ab90ede2ea5ca9a
MD5 7b1292ec691058ac00e1ba1e10db3b92
SHA1 77543abeebde26d089baf4c73e2aad1fb687a527
SHA512 0c972a21f561b726fb8842423d76d2d20ca626b7459d01625d96ddbb20fc3a3a2e9317fc46f5381b8862c84b284a0123ceadb2ede2ca8bb56667c7fece4c6753
SSDEEP 384:RZcI838NjHLIdLqy8CJDZNfNoXOVSUUBoG7LdETRzcoXfK86sfxEZxxsIj4lBtXR:583iIdZzDZIO0BoGGNzc4ReyIsPtR0u
TLSH
T181F2AE72ED65DCB7ACF99282BA0776437DF4815B82C86ED095DD6B0C0A472AD031F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 71f6ae040aba022490038cd50aeac73a74175c40325a120d9335baa64e1878a3
MD5 23edb708a1dd449426ba3c868d6cd6e9
SHA1 27d13165fbcf72623e488748acbd35f11f9c2eb9
SHA512 ca0c9e0a433240650358ed09d757e82c9b9b53558c0b1ba58b4db4d77db659abff076fc4e4cdd1855a6229de0d3cb0f95e9062db3c8d78edc4eca0e43696b540
SSDEEP 768:nrv+4UNbds3fpDZIO0BoGoNzc4ReyIs2teVH1S5D:nbsbS37ftc44bsqEH1Y
TLSH
T18B03CE32A868D973ACF6A686B44771533EF8911B82C81ED0C5DE2F4C4A4B1DD031F967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e24aa4610f0ef13d61ff715b991a4c19c0b9dc0f84fb549910cd63585f3f7c56
MD5 7d69836d5d75bb38b6587950df168815
SHA1 b07d8f9cbddcc5e3f852d425d3abafdfa3b439ac
SHA512 fc8e863ed64099a76627d020dfcddd0459165acbe905e9354438ab9aae7c8514f0b52f0a7e8441ee6f0ed973a976384639a107c873d0580ed7da28e29e75a3c1
SSDEEP 768:6rv+4UNbds3qDDZIO0BoGRNzc4ReyIsXOeVH1S5D:6bsbS32qtc44bseEH1Y
TLSH
T13503CE32A878CA73ACF6A786B54776533EF8512B82981ED0C5DE2F0C464B1DD130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a48ea66-f79a-4d48-b280-4042ee20571c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0a48ea66-f79a-4d48-b280-4042ee20571c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download