44ca7364a900277f82a0f814201849ef863834c776add10dfeb479d6a41eb263

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 154KB
Sample260910-apb3escj6v
SHA256 44ca7364a900277f82a0f814201849ef863834c776add10dfeb479d6a41eb263
MD5 25d4a75b16b32aec6124418dbcf5e299
SHA1 f148aa5ee97b0ca10e08f451ecb9808014079917
SHA512 e7005cd5ca5cd709a5529373f87077c9ef6d1db587fce8f68f539b0ff71f5d539e7446a173e37c341d03cc265583e0979f7365d09cce84da847d59a2f7a6a0bd
SSDEEP 1536:hVYcK6R4OFIBFXb04mHYofU6XYGnZ0EouJzbouL864NayD3GYlH0PCJInKp9wJEA:KAUl26E9fQQY9Llhwez640
TLSH
T1B9F39663684A202F7137C39161F8F5BBED55C50AC6218A49F8AEBBC9C751F12763722C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5532	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334735250405967"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{332AB6F0-ADEA-49CF-9356-8A8C5ACDE355}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5312	msedge.exe
5312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4108 wrote to memory of 1268	4108	msedge.exe	88
PID 4108 wrote to memory of 5204	4108	msedge.exe	90
PID 4108 wrote to memory of 5532	4108	msedge.exe	91
PID 4108 wrote to memory of 5204	4108	msedge.exe	90
PID 4108 wrote to memory of 5204	4108	msedge.exe	90
PID 4108 wrote to memory of 4724	4108	msedge.exe	92
PID 4108 wrote to memory of 4724	4108	msedge.exe	92
PID 4108 wrote to memory of 3096	4108	msedge.exe	93
PID 4108 wrote to memory of 3096	4108	msedge.exe	93
PID 4108 wrote to memory of 3096	4108	msedge.exe	93
PID 4108 wrote to memory of 4568	4108	msedge.exe	94
PID 4108 wrote to memory of 4568	4108	msedge.exe	94
PID 4108 wrote to memory of 4568	4108	msedge.exe	94
PID 4108 wrote to memory of 4936	4108	msedge.exe	95
PID 4108 wrote to memory of 4936	4108	msedge.exe	95
PID 4108 wrote to memory of 4936	4108	msedge.exe	95
PID 4108 wrote to memory of 2620	4108	msedge.exe	96
PID 4108 wrote to memory of 2620	4108	msedge.exe	96
PID 4108 wrote to memory of 2620	4108	msedge.exe	96
PID 4108 wrote to memory of 6000	4108	msedge.exe	98
PID 4108 wrote to memory of 5912	4108	msedge.exe	99
PID 4108 wrote to memory of 6000	4108	msedge.exe	98
PID 4108 wrote to memory of 5912	4108	msedge.exe	99
PID 4108 wrote to memory of 2448	4108	msedge.exe	101
PID 4108 wrote to memory of 3856	4108	msedge.exe	105
PID 4108 wrote to memory of 6080	4108	msedge.exe	106
PID 4108 wrote to memory of 928	4108	msedge.exe	107
PID 4108 wrote to memory of 3056	4108	msedge.exe	108
PID 4108 wrote to memory of 3056	4108	msedge.exe	108
PID 4108 wrote to memory of 5312	4108	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffccf0ec188,0x7ffccf0ec194,0x7ffccf0ec1a0
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,13578402185433895779,9103675288630063053,262144 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:2
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,7217022139277862030,13800643394920618901,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,65855370354736093,126849664593921322,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:13
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,7540905087107724535,4323473744562567630,2097152 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3392,i,13155875164029052812,3299321278325321279,2097152 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,10660462884149936958,2142433848556676815,2097152 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,17934282266871955625,3123080387717296118,2097152 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:9
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,11348937319664564930,7960482747367731625,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,14495186581325306237,4011407848964753368,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7041833377006860696,13038088580962727539,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7041833377006860696,13038088580962727539,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,18185595448168780960,4170715292612449805,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,13743613321743180422,4889046994328706913,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,12888958284455823322,2320098734873147967,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,17710241345387154710,11193519761496147831,524288 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4320,i,3239094670813335341,8797911682467480809,262144 --field-trial-handle=3084,i,10501185047857803149,6970589902709924311,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7704d69b2b93350a3898f13c4b7d1225fa1537baf4c424ddeed17c450570f842
MD5 d87168c17b4e4e4bbfab67cd6f1c3c5c
SHA1 38d587910162373de375370825de2db60a48d672
SHA512 681509a20c1a2a93761bba201636a48d870cd5c2f17d9339bbbc699d08cdbc44dc2f45f8b6a19f4d10a68ea6b87d00e5db7aa477f5847181a80c9a9d85f545e3
TLSH
T1B9613B5C2B5905F1D7DC5CB941AD54A932FB84500E4BBA01C5586DB7EC2AF3452C1363
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f4b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f4b7.TMP
Size 3KB
SHA256 37a49526c92f824ca855326a09427aa78385344a815243d1fd65ab5516e02f9a
MD5 2febcfa288a408f44baf348be7c902e6
SHA1 054fbf044d681759f00ba910400f2b627e1c2de3
SHA512 28e72ca29fff4abbb11b6931167774b2910d48f2720089bf8446ea4f2fd034e0d84abf2f25c61273da1a9fd17e2658b356c991d25864021db33ed83fa76e1235
TLSH
T19E613C5C2B5905F1D7DC5CB981AD54A932FB84540E0BBA01C45C6DB7EC2AF3852C5363
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 14822c7d6b41bd0ab196728cbde87ecae13e51066f72ecc60f1d5c10b4365108
MD5 8fbc3ed79985f56f85360f8b868e51fc
SHA1 7241cba9d5e64f7b8107e4286bc262d35f11d43e
SHA512 cc7deb3b0f34844cf862da0986a381291285b03d344fa1fb7ffd8b6a9ce8b6ceff0a35052b0fdf0997e2dc514dfbb1b97e96714f3f79491e6376a4db09da44f0
TLSH
T1EE41D0F783F4867EDA1196F0AA186E2FCE1D0516432C7C6689E0AE2B93F3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 447e4707740fbde4c553cc0b68006c70e839860d9d3941862287aa547f557449
MD5 4aa056633ec9996b7e4a702757aaf4c5
SHA1 148545455be2c8f2b185bd4129c18d030f0fa4e6
SHA512 28ee5951ec4d7122473ce41d3e7df9bf751701b36211da6ff40c9da89292f4aaf1048881c9e1f95e08cd1ea21393cbd697ea645d7be032b858ac9ce32b2f76b8
TLSH
T12531CDF3C6E8563D890142F87A143E2BCE2D0854832C3D5AC8D4AF5FA3E1871D28094E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 85d4ca631096d76d03579a9f599f9a55bf7625014ccebe2f0b2f0d386a94fccd
MD5 4a3422fc2683fda0312f9f39ad5f1d49
SHA1 3c90e24f8c6647ffd3a7d5a2d738495953f7334d
SHA512 24c63596e373bb324eb9cec14ee45dbbf7d765c09e786f8e8e543052b6f01dd8463a28d729ac02e5a2d26fa5e92b4f08310f34e3f2082f8333d4aa6a676acb0a
SSDEEP 192:sxRJRYbn/fQsqo3AtjzoA8p4N/g6+WNIYZFLifXGwIgDQJ:sxRJIn/fQsqod0/5ISaI
TLSH
T1C532C8166928A93B9CC7D30DBF55BF53E2F96132A1901E48B6FC871C14E7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 496f432bce9c65667079531b71e0bf69fae78db869cb467d0a3479070c57774c
MD5 a17a4adfb10745a044ec633dfa19dd8c
SHA1 17de584960b85f818b4f5be7c9cc6fe325a3a50f
SHA512 5cf2d5e5c7b8d0ddd30cd3cd48fc2699d14feb0960bab6766218b5a02a0280b402121f54625cb6096e67c0de59b94b2e7a8740504f16fed2e871c444880e4e91
SSDEEP 192:sxRWRYbn/fQsVr3AtjzoA8p4N/g6+WNIYZFLK7XGwIgIJ:sxRWIn/fQsVrd0/5ISks
TLSH
T11332C7166D28A93B8CC7D31DBF55BF53D2F96132A1901E48B6FC861C04E7ADD120784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a9544f45ab43f8616c034349999f912b531bb372291cf458650fac773da84237
MD5 779c6c3c4eb4b7d0aa381682ec21c0c8
SHA1 7433d3492678ced0ce258a35fc11e978d944745f
SHA512 a457e365390f92d969314d17e5247e6e720ad68a48a4b4291bae78d3be48ac1cf0c74e5361ac51852c99aa10e8716ee3adda07a25377d26f2c143ef557f408d1
SSDEEP 192:sxRJRYbn/fQsqr3AtjzoA8p4N/g6+WNIYZFLK7XGwIgDqJ:sxRJIn/fQsqrd0/5ISkK
TLSH
T1D032C8166D28A93B4CC7D31DBF55BF53D2F96132A1901E48B6FC861C04E7ADD120784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 79d5a677beb1b07d86d4e0e5a2d5d628838964e3b9a7edf8669a9e15b139bd4f
MD5 4a8043179e417fbcea23aba7ea5daf30
SHA1 fccfe81af825de7e600c22ac432f3cebb428fdb5
SHA512 7bc052a66c8ce69572a33f7a0ad856799c31a73448d8aaaf4967c87418149a97f5888b770db5d08fc65702ba98f19d26d35b96ffe2dbe3a0eb12e487e4ff1807
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGBrocmE:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VZ
TLSH
T1B3B2CA3B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

162bf2d5-473a-4efb-b991-aa809d9462e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\162bf2d5-473a-4efb-b991-aa809d9462e5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c1d17d8dcf6cafb27b0fe529607f0a5304eba5bbd7dd38b310e7228d46bdf29a
MD5 1bfe106807737d3e3904c4b2a56d6392
SHA1 169043df3dac643cfca2af2d8ef4d2e261e6a57f
SHA512 f3ad21b7bc7534a14b3c631890b3d65dc048b3639f7f5a20c0e012c0da4ca62e5b0bd86454906f719dd4a25463d851ebc416e47e14e8778349d625928e600470
SSDEEP 768:Yrv+4UNbdF3An+LeSFOUDmX4fouOToPvB2thtA9VAgKD184pJ/:Ybsbf3qsnnwthttvWs/
TLSH
T1A303CE31B49C9C73DDE6D298B10BB2432FF4915399C40F80AADA2B4D069B9AE570FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 99a9bd67cdabf28b82322a32c362aabe4aba95c729150975df29a28672872085
MD5 d52c4625d40ef6dc0f14d52006fa9d3c
SHA1 44fc108a38abe824b829e653f884715e882ce2e9
SHA512 309898b4afeb53a86e4b68feec3f6c5ebf95852394a2c7e2feff02281707c4429407213dcd22826c737d14f2bf1a5867a49c0fe2825379fd2c91e2f5a7ae34bb
SSDEEP 768:Orv+4UNbdH3IR+LeSFOUDOX4fouOToPvB2thtA9VABKeVH1SlX:Obsbh3wsnnwthttUEH1Y
TLSH
T1AE03CF32A4AC8933EDE2D398710BB2432FF4915396D40FC09ADD2B5D069B9DE470BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7144d2fdbf678e4bbe2e5201a6e4a696b4e805dc37c0a7a53a6277ed2ca1e351
MD5 f5454f1e9085d62ba8f9834ead7142f3
SHA1 bdb0aa4c38a97647309aa9d0a9176e271e7d20d4
SHA512 390118fbc8fc90a013c74b9e75d5facdd329e9b6d5321a1324a31e7ea55e55df8010d154898700a1b2955c2373fe9a274b8ef3cfc364a0ece165f878a2c15b57
SSDEEP 768:0+39n+LeSFOUDmX4fouOToPvB2thtA9VAgKD184pJCF:0+3/snnwthttvWsCF
TLSH
T107F2CFB1A8988C63DCEAD384720B72435FF0812395D85FC06EED6B1D0597AAE070FC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 59fb03ffe933744ac80bc90ddfa01a0581e787f6f66ff0f44178e2960ba60203
MD5 653e746a8c35f828a93a4c55443f15f2
SHA1 b06a5aaa350b7123cacb8105f7318f5944a99e0f
SHA512 213130e1926f3daaa5ab55cdaef65efc2f308dcc502458317b7ddc1c2b384c70dd1a6230300e1bc5d9ded955fc80c6c833f0f700210b694951dbfff1baadf9e1
SSDEEP 768:hFQE3HwgAn+LeSFOUDaX4fouOToPvB2thtA9VAgKD184pJCF:wE34snnwthttvWsCF
TLSH
T184F2AEB258C8CC7BEDEAD394B60A72429FF08163D9D4AB80ABDD6B1D01576DE070BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6790c63fdcb38c5b5ed3fef3a03b8369cbf6c6d92ef6e141d4266518263e41d3
MD5 e3fa64f78f7841d210cb9d5d675d4f59
SHA1 341061dd06c2e4f3f3e2b4c6b41a7e57a98ecde2
SHA512 ca432fd8435e78af16b2c22e4c30d44de049c2451de9293955f1b2f30be984fca19eaa11c06013d4b1b804c405f175d4a59ea9d1f188f88057b950dde0d1f57b
SSDEEP 768:grv+4UNbdH34A+LeSFOUDHX4fouOToPvB2thtA9VAwleVH1SlX:gbsbh3qsnnwthttAEH1Y
TLSH
T14103CF32A8AC8933DDE6D388310B72572FF4916396900FC4DADD2B4D069B9DE470BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5726031-39d7-48ba-acbe-0f27ca863f67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5726031-39d7-48ba-acbe-0f27ca863f67.tmp
Size 33KB
SHA256 0315e951a61b80c2ddbd3fab47f1b8d2d1fbc45e721a06d1e6e66ee3c41736de
MD5 829d6869e6622c98b35883dd69ce7e3a
SHA1 6216b4ae32e03e83c56afe53713c7244edcc8b9f
SHA512 fb1d854c3fbaeb8c539d5caf33a422e358e93fac698dd97bdf614553aefb37906ed38f17ad069bbbf57fd1e2f631d038a331755b9cd358890fdd1c9ca5ae3050
SSDEEP 768:X+3In+LeSFOUDmX4fouOToPvB2thtA9VAgKD184pJCF:X+3ysnnwthttvWsCF
TLSH
T115F2CFB168999C63DCEAD384760B72435FF0812395D85F806EED6B1D0597AAE070FC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30f2fdc0-d55e-4afa-ac86-fd54334f7482.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\30f2fdc0-d55e-4afa-ac86-fd54334f7482.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download