a9a1a843fdcd4dafd2318d71d7bf81c3f53ae88aaf3b0a423570c8c89c71381f

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 17:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 71KB
Sample260626-vvnnmac16s
SHA256 a9a1a843fdcd4dafd2318d71d7bf81c3f53ae88aaf3b0a423570c8c89c71381f
MD5 45a74f503464b5487b6d9a7576914f4f
SHA1 64649dafc01a82a42430779708ee92c1dffaf0cb
SHA512 28f70cbc7ae072d42f6ec307fa0ea4d7e1102eb8db250efff1ff8278fa743ccb1a04416b07e8eeb800c7f63110ed5788c1263de55df77e517e0175c158cb584e
SSDEEP 768:G93YmxUBVhG5Jmf570A7+8OZmenY/YZ4dM0juiI+w1h28xE:G9Yt0Aq3m7/o4dCiI+w1DE
TLSH
T1C963E73750A23E0DD2738C1D78CABA853B14C063C14259EEE9BD592CC7CED96927276E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5332	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269679621978146"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2882181966-868590553-1461876573-1000\{32D225A1-4FE6-46EF-99E1-DE1236AB9E1B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3404 wrote to memory of 820	3404	msedge.exe	90
PID 3404 wrote to memory of 2676	3404	msedge.exe	91
PID 3404 wrote to memory of 5332	3404	msedge.exe	92
PID 3404 wrote to memory of 2676	3404	msedge.exe	91
PID 3404 wrote to memory of 2676	3404	msedge.exe	91
PID 3404 wrote to memory of 5892	3404	msedge.exe	93
PID 3404 wrote to memory of 5892	3404	msedge.exe	93
PID 3404 wrote to memory of 5752	3404	msedge.exe	95
PID 3404 wrote to memory of 5752	3404	msedge.exe	95
PID 3404 wrote to memory of 5756	3404	msedge.exe	96
PID 3404 wrote to memory of 5752	3404	msedge.exe	95
PID 3404 wrote to memory of 5756	3404	msedge.exe	96
PID 3404 wrote to memory of 5756	3404	msedge.exe	96
PID 3404 wrote to memory of 5272	3404	msedge.exe	97
PID 3404 wrote to memory of 2292	3404	msedge.exe	98
PID 3404 wrote to memory of 5272	3404	msedge.exe	97
PID 3404 wrote to memory of 2292	3404	msedge.exe	98
PID 3404 wrote to memory of 5696	3404	msedge.exe	100
PID 3404 wrote to memory of 2528	3404	msedge.exe	104
PID 3404 wrote to memory of 6128	3404	msedge.exe	105
PID 3404 wrote to memory of 3964	3404	msedge.exe	106
PID 3404 wrote to memory of 4196	3404	msedge.exe	107
PID 3404 wrote to memory of 4196	3404	msedge.exe	107
PID 3404 wrote to memory of 4836	3404	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffe49ffc188,0x7ffe49ffc194,0x7ffe49ffc1a0
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1344,i,12732312083893244153,9533450080150089154,262144 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,17704158992860005882,7135181484954645037,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,9433779426020700990,12194683867311844573,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:13
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,25733298966682403,16854947952537894908,2097152 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,7004321226159654996,8754693134919915691,2097152 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,12018396391506143247,15100784256916962638,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,773756026093700708,863355814774135805,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,3219011220503658803,12411756295896101366,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,3219011220503658803,12411756295896101366,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,14283721901278253467,12396748948143705722,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,17345496055818041719,15183500768117869670,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,14034319522549403242,7152669433014360072,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,8664866350736773909,6242607161833629762,524288 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,12314145970943764986,14241915157531175871,262144 --field-trial-handle=2268,i,7790085383300803344,3471132617074544161,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff07219f3594693f0fac57895f6888104d17957d039d3530d82987134771108b
MD5 26fba9d3c09d715a1b951844cadd62c5
SHA1 9e4dc8d0a08f2feba8c030b217c14a6a5c1e4827
SHA512 fc2fc417004bf59d775f5e0fafa0e6d4883632e585e21934aba3d8697554f979efd3a818d1e74c7713d51b1993f1678a707621ebef66bdf01536cd7793ff1e31
TLSH
T184D080357B46EC53C0163071583743A4625682166567D5177850D01EC846595B7D2147
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f60cd2d9231e56b0a0784a59fb17664fa333e06aac5ee1d5692effc5152b5c30
MD5 cce4d9b2c5f5fb7c3bfaaab4af8f0448
SHA1 17b40c534fd35eb849f575565dee407cf6215d92
SHA512 5e1cbca923a813696df373e5b185a1b3fc4f73a39029b41c0ce02bf3dea25ad383c02c9763a6d8965f882055fcabaceefe0852b44c19af280ddaf74994edc4e6
TLSH
T119D080357B46EC53C41630715C3743B46256825A6967D5177450801EC88659577D214B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 d40ed50deff5310fedf84290a800153716af91d0017e9a7be4c7bdadc6b2f178
MD5 890345e47d08309c84018d4e18725f19
SHA1 5d61ee07ec0dce7223cabc1eea1356b6942911e9
SHA512 68d306ff4d24ad49320eed725b748b739183d99aaef8e652365e61e7a8c625f39aa36d1fb439d6231c59e96161b3a4675ff8145ac463643008d7c5a3a61fa867
TLSH
T11CF028BACC21EC3719FD1B1D30A90B4BF76013676782995B3A3C920C8FB197B498691C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bca2445790599f5dca6c0b66cca2ee1b19a121353c69504b754b1e924057a838
MD5 bbada4394f29af292101567703143212
SHA1 a82d6e2c1301db6dcb446524dab3eae471f362db
SHA512 5c691a2d07453ad0eb5dd89f9336d9dc20f2d4e51c1dbf3f3557c6d73133d6104a26318fbd79c7c74ceb6be5fb10a05a59579067f7f9d29d4f6211e12ef023e5
TLSH
T11751BFF7C3E8866D891196F4AB246E1BCE2D0955832C3C56C9E4AF0FA3E24B0E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fe87e2462e3bb65445688ead0a00891b2811199d997da6334013a11b8332643f
MD5 137739c9caba574744d7466aba69b4ac
SHA1 218ad2769fae6d8f1562bca1ddf3d5f90585ab9a
SHA512 725afce0437df0e20cd510bf9e653762d0dabde24ea37c284986eb168a25435497134a5511bbc209fd7f76b32db6550d6897e550afddc17767c643d5c7d95bfc
SSDEEP 192:sxRrRgxyMqZjK1Ml8wFu/ffsjgjaoMpPZ5NtzzoA8peA/g6+WNIY0l94K6Q+GhIC:sxRrjbu/ffsjhpRAz/5IL4K6Qrj/
TLSH
T14D62D905A934597BCCDBD619FA45BF53D6F81523B2505E48AAFC8B0C00E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 68aee076211f56d8ed34f3bd1b1ccaa838e9ac92bfa325ebe684033137c23ebb
MD5 278607b72a43b524e53a00ce798f063d
SHA1 8ba678e4400fc6c7a75e4607ad9437340eaca053
SHA512 7cfab19745728ed81894f2319e3cd00bf0819d19240fd2ad7a621d739259cfd451a497695f60446779205f3bb39c128971bc1dddcdac462e8b6277d40a533df5
SSDEEP 192:sxRTRgxyMqZjK1Ml8wFu/ffsbgjahMpPZ5NtzzoA8peA/g6+WNIY0t94K6Q+GzI8:sxRTNbu/ffsbh2RAz/5Ij4K6Q5r/
TLSH
T1FC62D815A934597BCCDBD619F655BF53D6F81523B2501E48AAFC8B0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 5c75bb56c84de3e223c9d1421d818fd21727009674b89619ad8b7722623920ba
MD5 b8f3bbe063a8467e507d85b84c6f47fa
SHA1 b1bae83806050e3b39c47ad68d4afceae959739a
SHA512 1eb118a6749485d44ff0b956bdf64e00d0eb3fd9ae9c3b604e17d917310fe6035ef5124c900d91b56df56996f898144197df7ab8a91c2af7eea69cd5316cfeec
SSDEEP 192:sxRTRgxyMqZjK1Ml8UQgFu/ffsbgjahMpPZ5NtzzoA8peA/g6+WNIY0t94K6Q+Gn:sxRTNqWu/ffsbh2RAz/5Ij4K6Q5r/
TLSH
T1BF62D815A934497BCCDBD619F655BF53D6F81523B2941E48AAFC8B0C00E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1fe0b7974154a70f350c36509905d84433c05fce3c5656e2b80bcbbc67ecaf32
MD5 06e2c23aca53ab42036e739e23b99a5f
SHA1 dced2a65afb2e2930d6589be7bad14f39c555542
SHA512 8aa13a5580aa25326d4a129f7a1b9dbcc8485f161ab8f7c052225cd39b98d7a3cde4d48a453b6fe8fe927d2a5623a1d5b7a9cfe6bdb9666aa174d4ee4730eeed
SSDEEP 768:PXoDVGWgoqfjs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3RiW5oroV0A4:PXoDVGWgoqfjsu1jaKQW5TV0A4
TLSH
T1C1C21B2F644CC77E4F841AACEC2AAED76DD801CB97584E5447EA880C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 50434003b1131d713ca2ad9886a17a93ab77c048d52aa480521212944d7413c6
MD5 3a14c6fb0f171f7170821bcc0b76857c
SHA1 bb5453d552871e9832ecb38db7ba46ca20338659
SHA512 682a405a0bff829de76727a4d546a4fa62c2d8c17ca793f1b36e10c09f6406d215dfe1c2c7fed6553b746738c559e0444859af27fe2e419f267c0fef397a6e60
SSDEEP 96:KsGsKXq6SsAKNue68Knqmi8AKpGuJGKK8SurqKEsL0YKxCiOVCKG4psAKRKKOn2r:6H76D7ElhDfFJfpdBJ9XvC797LTu
TLSH
T1EBB24611793E220538BE2918D1A5856F674130B3301AA63B7BBD60E61EA7E005FFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b08f97a08ac6043965af69afbd157cf077453805a77ee078eceb8495576082c1
MD5 29dc211f42b85c11dee4dde10d0cca2b
SHA1 352cf5634339629f1499edcdc87e844bb6788a4f
SHA512 09cbc7d76c38115d4a80d3dccf99a7c7c571627ce50ae6b9782ab901e742ab4cb5aa8d04a88c7538b9e8884638c9062e5f6b1447fb3c5a618da61ff4f3eedc2e
SSDEEP 384:nQiFptNn/s3n9S+8Nw8TUNTUlIR5UGhYEDkmfViDPJ6MHnNGQb87Exrns8Lk1IzA:rFpj+9nxwgAChiDPhtGPExTHvRa
TLSH
T13CB23932E8A4DE77ACE68BC9B70A7646DEF001A385C869D4D9DD1D4C00DB6ED034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 f167583f8b3397186675967c374d2dabb3fd68f3478e413ae8735572ab83d924
MD5 3e004923933f8abeeafcf05c69b09ff6
SHA1 92669f6a85553be89f1330f7c66dd08ddb6d9ad2
SHA512 6c649c158cde793e80977b8b74e62c11d97a0aab079b9a2838ce5fa4935b47e709056afd27e7abadfe714f1aa62e9bde3f7eefd2b845170e8cd147e99f4052c9
SSDEEP 384:nQiF1tNn/s3n9S+8Nw8TUNTUlIR5UGhYEDkmfViDPJ6MHnNGQb87Exrns8Lk1IzA:rF1j+9nxwgAChiDPhtGPExTHvRa
TLSH
T1ECB23932D864DE77ACE68BC9B70A76469EF001A385C869D4D9DD5D4C00DB6ED034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 50a78c698a080ef719fba3ea25ef8d0757817f37431991036ef431d5556775b6
MD5 14f3c4ce586ee0a25df0bbb434be0ac4
SHA1 ed8de062862cd240c74cb5bd7dd2bcf89776c816
SHA512 8626d439710b6b16457533c3d273108dc93694dd6299dfadc2952a25770a4a2e9e83ce7b2c3ddd401970a08afffcae594842a4b3bf3fcfc9926291dec203052a
SSDEEP 384:nxiFptNn/s3n9S+8Nw8TUNTUlIRtUGhYEDkmfViDPJ6MHnNGQb87Exmn15wbAjEN:YFpj+9nxwgUChiDPhtGPExmn12bfN
TLSH
T184C23A32E864DA77ACE38BC9B70A7646EEE04163868C69D4D9DD1E4C00D76DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 478fd1709bfae8e4dbc64bba64f56b52de3bfa75aad4d927b755d7c9806f2657
MD5 c6dbefc16b3c210b3bb23f286606ce10
SHA1 a32cbd5187aebb638c0a55f550599e0ddba5e5ea
SHA512 fa6606162a6d1d488153edb18064aaed352a8596c82fc704b12f62bc8effcde9371aa53a93c0d191147d567c8978f122dc4f73fc8ae39333df7b19cc9e9529da
SSDEEP 384:nniFptNn/s3n9SI8Nw8TUNTUlIRtUGhYEDkmfViDPJ6MHnNGQb87Lxmn15wbAjEN:iFpj+9hxwgUChiDPhtGPLxmn12bfN
TLSH
T192D24A32E864DA77ACE38BC9B70A7646EEE04163868C69D4D9DD1E4C00D76DD030BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b6952f1a6daf585309a44b6e9e243e3d2d962b151ce6058a1bfeacfdb905c16d
MD5 aee9747aaf1619008ad183827a6a5d0f
SHA1 bc1401337fea00412d9d6f100ede3b165f7a45e2
SHA512 553d723928fcdbfb6a5d2ace5f0b7de6700d8a1768bf3da5d4defebe5f5c2c7d76d0bca9a8024fb0dcd97f27676851550e39619ba3a261db2d8c7c25b1e10e37
SSDEEP 384:nQiF1tNn/s3n9S/8Nm8TUNTUlIRfUGhnb7kmfViDPJ6MHnNGQbfrun/Pb9oRLpoJ:rF1j+96TwgugpiDPhtGkrC/ALpuv/
TLSH
T130C24A32D864DE77ADF74FC9A70A7A46AEF001A384D869C4DAD92E0C00C76DC134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download