7d94e3cc803f03e2b5c15eefd8e5adda300d3712e2acef4411a473573ed4d883

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130379769.html
Size 29KB
Sample260910-ak1vzsec99
SHA256 7d94e3cc803f03e2b5c15eefd8e5adda300d3712e2acef4411a473573ed4d883
MD5 d9fba2e680e6ef16eef1a326e080fdf1
SHA1 dfa6b47b866e325cb3d03c4f6d2f9648f45a078c
SHA512 a2781e06b0feab1eba34a78091635337cc4244fe6a0b82912bc7ca7ef4ad931ff97a1b7d895445056ce6e436e354ff14d87cf3fcfbdd89cf9033c07f5f26f151
SSDEEP 768:/Prr1RofOhrWUYiV+Qh3OrJO48g174boJDdamIcaP/r9CHH7bausHP20/EOuKU34:/Pn1RofOhrWUvV+QNO2g1oIng63YiDc
TLSH
T1C6D279D072C1F51796CD0E33AF4FF9E9E42A5C636484764B86A4BB8E25B9027C1A4CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2428	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334735123901021"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{7C72527B-A12D-4243-BEF2-DCF936DDFC10}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5540 wrote to memory of 4160	5540	msedge.exe	89
PID 5540 wrote to memory of 2428	5540	msedge.exe	90
PID 5540 wrote to memory of 4332	5540	msedge.exe	92
PID 5540 wrote to memory of 4332	5540	msedge.exe	92
PID 5540 wrote to memory of 2144	5540	msedge.exe	91
PID 5540 wrote to memory of 2144	5540	msedge.exe	91
PID 5540 wrote to memory of 2144	5540	msedge.exe	91
PID 5540 wrote to memory of 4276	5540	msedge.exe	94
PID 5540 wrote to memory of 4276	5540	msedge.exe	94
PID 5540 wrote to memory of 2312	5540	msedge.exe	95
PID 5540 wrote to memory of 4276	5540	msedge.exe	94
PID 5540 wrote to memory of 2312	5540	msedge.exe	95
PID 5540 wrote to memory of 2312	5540	msedge.exe	95
PID 5540 wrote to memory of 5712	5540	msedge.exe	96
PID 5540 wrote to memory of 5784	5540	msedge.exe	97
PID 5540 wrote to memory of 5712	5540	msedge.exe	96
PID 5540 wrote to memory of 5712	5540	msedge.exe	96
PID 5540 wrote to memory of 5784	5540	msedge.exe	97
PID 5540 wrote to memory of 5784	5540	msedge.exe	97
PID 5540 wrote to memory of 3252	5540	msedge.exe	100
PID 5540 wrote to memory of 2092	5540	msedge.exe	99
PID 5540 wrote to memory of 3252	5540	msedge.exe	100
PID 5540 wrote to memory of 2092	5540	msedge.exe	99
PID 5540 wrote to memory of 4792	5540	msedge.exe	102
PID 5540 wrote to memory of 4904	5540	msedge.exe	106
PID 5540 wrote to memory of 2920	5540	msedge.exe	107
PID 5540 wrote to memory of 2384	5540	msedge.exe	108
PID 5540 wrote to memory of 5452	5540	msedge.exe	109
PID 5540 wrote to memory of 5452	5540	msedge.exe	109
PID 5540 wrote to memory of 4816	5540	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130379769.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff95e8ac188,0x7ff95e8ac194,0x7ff95e8ac1a0
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1115767469637645769,15429041049758258340,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,5110155125183424465,10156192970881438211,262144 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,3038431864978898415,18172813911546205319,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:13
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,5821110308992575963,13252331542169738928,2097152 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,5309671785925514591,474974174706321594,2097152 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,16957601089349536399,18183550298855053821,2097152 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,5205423168693288242,10762068591213739146,2097152 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:9
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,14956872785481967467,10556830492515010332,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,8346539195995421856,1658410824849088901,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,11565377471227703566,16654361370976039692,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,11565377471227703566,16654361370976039692,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,1409990264697238914,16133729994444671258,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:14
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,11939209071557479249,2144435664208771648,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,6899904863185408932,17888478348046055263,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2876,i,134903190752706341,5681563104157819052,524288 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:14
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6332,i,575203064265866428,9334319170322256215,262144 --field-trial-handle=2388,i,14879021394206389859,13127793645749904428,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3d8523e3b871d0f16af1d33a0bbcb704b59734cef25f218dadfc3b87f8076ce4
MD5 0aebc96cc61f9980d9c5c53877caed14
SHA1 d3f10eb52dfdd26e628b0965947cd75c01c75f55
SHA512 5363d6ea212df994416dbcb10ee3099e37f3731191e8a93ca5b3b33058c78bb31c9ff3c767771bcfeaf2beb7a8e65686aac8fa8db640302d28db7594d3f0d2f7
TLSH
T16A5130B46B231BB2FFE895B573DE80C8B27685554063EE2E505063784DCB77E90DB058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a5cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a5cb.TMP
Size 2KB
SHA256 590ab9d2ace7158f8d3a72293d0851b7703e484d1e3a14f6e790fa6561831063
MD5 c782e0815026361383986d3eafe50426
SHA1 e4362c4731d36529318b280d9478178b0c5ef792
SHA512 28e487a6921a357ef11ad942d18b583c7d35d9d7f21aa392286dc8724e33c7f8fa6e63f43716533646e9cca7a568f6b00310c8595b4c699a1bbd1e81c6e872fe
TLSH
T18F512FB06B231BB1FFE894B573DE80C8B27685594063EA2F405063744DCB73E50DB058
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 86a080459e4ff3ebfe639a911627f4cf78fe6b45c3e70d389af0e5c1d0227640
MD5 328f224eb9caf2be4315483134ffcbb9
SHA1 e962e1565f5cbd94331588a3d9906dbb7a7eaef3
SHA512 d7a53f0232bc427ce77463c91c22f9352f9663ebf52abc6fcec329450cbeea275072d433f08d0eaf09ececa27365ec84bc56f9ee9aaad51e8a2e646009ad0a04
TLSH
T1CF217CF747B4957E9A0182F0EA08AF1FCF6D0411435C79AAC5E06D2793F3462E085A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 767a96626286bf12c4ac37d15f1fc7e43e80a61d5641ac85b38acce60ca24acd
MD5 83ac6ebedbdee62ead7b8281f7bdc855
SHA1 81875e20ebb4616884550097c315c47fe6da10b6
SHA512 399bcd2cf44991b274cf0ff13f6042a37d41f8ff12aa7bce23d83bc379a41bc7c6c5799143fb375d937abded2dfe712e0a13236d1057bbbc3b4d93f82fbe1d7d
SSDEEP 192:sxRqrbp/fjsOHm2Sm7aX5zoD8p4i/g6+WNIY3TsIGMIgDCJ:sxRqPp/fjsO2Tv/5II6
TLSH
T16532B816A928A93B9CC7E31DBB557F53E6F96132A1D01E48B7FC860C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2c38aec8e98c1f23dc7169f4adc14c91039ea62dd0cf43dff86109294bfce126
MD5 6f3622decf24d4b1cb7cfe9a30f88f62
SHA1 821d3b24d9f900e6be3193e3de97f25108d22cf3
SHA512 867a26adab036244ed05db2c568afab01462028ad6003c490bc8b78a5ba7ed6b4ea0e0b5bd75290086c3deec56650549924d713cede83ef551b28dd6906871cd
SSDEEP 192:sxRNrbp/fjs4Hm2Sm7aX5zoD8p4i/g6+WNIY3B2iIGMIgIJ:sxRNPp/fjs42Tv/5IAis
TLSH
T17632A7166928A93B9CC7E31DBA657F53D6FD6132A1D02E58B7FC860C04E66DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dbeb2330fff77257902aa6341855e4ecc3acab375e5a14377dabe6628f9eb86b
MD5 8ad4e546277f0962c13b33ce6ee4315b
SHA1 3ddec9cfc0bf1c04a96951fcc7cdf4f44750c7c4
SHA512 cc69b27464e6b92a117184ecdd052436245c6d42dbe4313fb554666ba1f9d252ddc711b6a572fa3ffb120d21f51d2de6083d389c2dc9610d064531d7d75ece60
SSDEEP 192:sxRqrbp/fjs4Hm2Sm7aX5zoD8p4i/g6+WNIY3B2iIGMIgDgJ:sxRqPp/fjs42Tv/5IAiw
TLSH
T17032A816A928A93B9CC7D31DBA65BF53D6FD6132A1D02E58B7FC860C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f63cdd7c1e13c78ceaed696df3ad9ce841ff2157f1f90520cf46bd279f16b2f2
MD5 45e2c0228bcfa694774a79064f25a249
SHA1 e58161639d49e940d4c039d075db4843c287b36b
SHA512 09f8322d1e62e5c3a355ab2e0088a9866a4a2f1f98146b73e93010ae7d65b636ba8af66ca4cd6ca70d227d991a2d3fb9b434e6690983870dff952302a7cf874f
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTXroOLl:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0Vw
TLSH
T1A6B2DA2F600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 377c6a6485f5421e85d42cadebf97064b0dfac893025b548ab70d55456f989cf
MD5 789fac290ae6484c61c6b1c8c235572e
SHA1 ad40d20faf139b4cb17d5e5c1c6cd7b79a56cc08
SHA512 5b490e8f24f4d50d345a7b68c0a194c59f244f0235f6865d2d8f33a7c6d3a181d09750b48df9a6e0a0e802f4ba35ae52b495400e2d3ef3b4eb6051b68769721c
SSDEEP 768:crv+4UNbd43EBc+wfZOLf/66RfI66EvShCQsE2bwWV:cbsbO3EwfkfC6Rfb6EvSH0wO
TLSH
T19003CF72E8689A339EE78244764A7B53BEB95273C4C54784DACD0B0D01876AF370FC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f000b475e6b970b1baf3b5fa0e99fd5f880c51be2c4f203d7b91690103649f33
MD5 9175cf136cefaea355ee06f8492d9c04
SHA1 fdf370a47a11d1519c935294f51afe83e2665620
SHA512 feeb22871b9165c8a9201e71d454b4efdab5f7eb9e586f96547d83113cd476be421d5f9cdac01ce484b187e8acb7923d27589d09d715ab3092509eacd8df063e
SSDEEP 768:wrv+4UNbdI3Sjc+wfZOLf/66RfI668vShCQRED184p9:wbsbu3swfkfC6Rfb68vS4WA
TLSH
T12303BF71F8686E739DE78344B6467B13BEA86273C8C84A94D9CD4B0D01D36AE271FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 3375d7bb407e8de3c0ab52287a2e498bfb87bf7fe1f36e0827d4ab35937854fe
MD5 ff90685dd2207885f57a7c862f2d7c1b
SHA1 33cb4a86717c9c62bdced382c4ab2b190e915730
SHA512 81a3c5eabfb861108dde5e913a7634c8c613ba40f29996ae416826d9effe3d9ac01216a968356b542822eb344d77f2b3bb4b596091ce3e38be0d266a3c951ec3
SSDEEP 768:+H3Ojc+wfZOLf/66RfI663vShCQRED184pJD:+H3wwfkfC6Rfb63vS4W2D
TLSH
T1D2F2BFB0EC645D735CE693447A467B03BDE56233C9C89A84D9DD5B0D00C37AE2B1F829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 bc72343f78c833be7d4100ab1fb0572f39c8f373b904dac2d60eb9ed3cc915f7
MD5 c5270a6360676f76dc11528a0fa8c8e5
SHA1 be8d83fff0847332797a425611023976e3568cdc
SHA512 5c1ade2b1c7c699ba6bc7decab14bf697948cf8fb8e4edf0757990e2fecfa4b59c6d7e59908b080c163e1671cbcee06b872d839f9e438e0bf5d3cbfff85fc4e9
SSDEEP 768:MH35jc+wfZOLf/66RfI663vShCQRED184pJD:MH3LwfkfC6Rfb63vS4W2D
TLSH
T16EF2BFB0ECA45D735DE693447A467B03BDA56233C9C89A84D9DD5B0D00C37AE2B1FC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0d549976ce1e35d5a6369ffc6a24d629ed9bc855c5da7c5b2c5dfa47dbade4e8
MD5 f06c242500c8023160fdf49f121e4e2c
SHA1 144141dc7104109c236df7ff9d4b0138d97e507c
SHA512 61faaa770310456138afde93db71385fac5feed4939de7067cd82bd9c8693bf8986a7ea5e97d50cb7580b59cbd4d195e7b71132c6fdd66f2e55fa56a8f94f241
SSDEEP 768:RFQ93WwgVjc+wfZOLf/66RfI66/vShCQRED184pJD:g93ewfkfC6Rfb6/vS4W2D
TLSH
T1AFF2BFB1DCA49E739DEA9784BA0A7713BDF55173C8C89694E6CD4E0D00932AE270FC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6c973ea205c81e2744b79459d584897367915962c33684abf734af4d7a97c9eb
MD5 5a76bf1dc7b106a903db898bb81d5e93
SHA1 82b30ff20ef750a02fbf464ad0019d4c177e1ef5
SHA512 5c790808ebcb8529da76199f5c8e04bfb210d0dca6ee19963b348e2f3b4a4a7324ff56c0ee53cc8616e0eedbb1bc981b6674459db6d7de455e84820b7abb0157
SSDEEP 768:Rrv+4UNbd43VDkc+wfZOLf/66evShCQtF2bwWV:RbsbO3V6wfkfC6evSR0wO
TLSH
T15B03CF72E86899339DE782487646BB63BEB86273C8C54784D6CD1B0D019369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b777d1b2-85b7-4bf7-8d7f-734cb656bfb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b777d1b2-85b7-4bf7-8d7f-734cb656bfb9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download