d9729b75ddaac7b9b21c62ccfbfbd12edb0619ab04da3d0cfaf1ff31e77dfc41

Analysis

max time kernel
148s
max time network
178s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 04:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
no way train/(同人ゲーム)[260516][みどりノひばかり] ヒロイン捕まえてナニも��.html
Size 4.5MB
Sample260629-fl2fssdv8s
SHA256 d9729b75ddaac7b9b21c62ccfbfbd12edb0619ab04da3d0cfaf1ff31e77dfc41
MD5 9831b9e75e0208ce0dacb6db23d4acbf
SHA1 065886a77a6eafac21c5c297bfbd4d2cb50751b5
SHA512 27d57e91c41fd4cc000622daa7a404f9ff40c95589f5ced7d7beaf5336b4480ef1ffe972928794c76fabdc923b787bd6673191e1c5a1815d74b9438695637e99
SSDEEP 24576:8wEBqmnLiLIi2hrErjKvMPkUoVAwurQBzun:VcqmLAstCuUcBq
TLSH
T17126D56BBB49037306F282626B4AA4CAF31E903F375A1514346CD15C2B7B92583FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5636	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271831603111228"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-28459746-3881314244-166055492-1000\{64B53404-F746-4A1F-A5DB-48D10009C0FB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe
2580	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2580 wrote to memory of 3564	2580	msedge.exe	88
PID 2580 wrote to memory of 5636	2580	msedge.exe	90
PID 2580 wrote to memory of 1416	2580	msedge.exe	91
PID 2580 wrote to memory of 4704	2580	msedge.exe	92
PID 2580 wrote to memory of 1416	2580	msedge.exe	91
PID 2580 wrote to memory of 1416	2580	msedge.exe	91
PID 2580 wrote to memory of 4704	2580	msedge.exe	92
PID 2580 wrote to memory of 5920	2580	msedge.exe	94
PID 2580 wrote to memory of 4432	2580	msedge.exe	93
PID 2580 wrote to memory of 5920	2580	msedge.exe	94
PID 2580 wrote to memory of 5920	2580	msedge.exe	94
PID 2580 wrote to memory of 4432	2580	msedge.exe	93
PID 2580 wrote to memory of 4432	2580	msedge.exe	93
PID 2580 wrote to memory of 4628	2580	msedge.exe	95
PID 2580 wrote to memory of 5452	2580	msedge.exe	96
PID 2580 wrote to memory of 4628	2580	msedge.exe	95
PID 2580 wrote to memory of 4628	2580	msedge.exe	95
PID 2580 wrote to memory of 5452	2580	msedge.exe	96
PID 2580 wrote to memory of 5452	2580	msedge.exe	96
PID 2580 wrote to memory of 3996	2580	msedge.exe	98
PID 2580 wrote to memory of 3996	2580	msedge.exe	98
PID 2580 wrote to memory of 2464	2580	msedge.exe	99
PID 2580 wrote to memory of 2464	2580	msedge.exe	99
PID 2580 wrote to memory of 2772	2580	msedge.exe	101
PID 2580 wrote to memory of 4752	2580	msedge.exe	105
PID 2580 wrote to memory of 5852	2580	msedge.exe	106
PID 2580 wrote to memory of 5060	2580	msedge.exe	107
PID 2580 wrote to memory of 5968	2580	msedge.exe	108
PID 2580 wrote to memory of 5968	2580	msedge.exe	108
PID 2580 wrote to memory of 1792	2580	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\no way train\(同人ゲーム)[260516][みどりノひばかり] ヒロイン捕まえてナニも��.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ff8c0d1c188,0x7ff8c0d1c194,0x7ff8c0d1c1a0
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,17700415014803944233,143190974517663651,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,14002491942609043698,15428261800769294037,262144 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,10248751055557617888,6040221978562906489,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:13
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,16013897067760592902,8564216118081426494,2097152 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,9489448116262508420,12053973541647701412,2097152 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,14624828363076558559,7856763739986564497,2097152 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4420,i,6442662881843081875,12764154666342821990,2097152 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:9
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,13173386578408121531,1702397836777452465,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,3223239263841548043,10953409477014268263,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,4462077521624220219,15620538045345840104,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,4462077521624220219,15620538045345840104,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,11719682903631423489,34242248026191812,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,1139512068316366427,9988836182826262603,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,14026675118086783060,16085694869771597887,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,4827397984052341237,3709655122336650399,524288 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6484,i,18032964548080525706,12711762179662976449,262144 --field-trial-handle=2640,i,4648616911283420255,5350735279199627274,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b778cc535cfe9ef8131b9d727f221c5d63c7f15bcd4cd19db345f2c97bdf5594
MD5 a4b8f3b6133ca4686118d40b6c8d4ea7
SHA1 cbca41492cec17181764c1371da84a0e0481f93f
SHA512 65135f099a2e372c9a11538ad8ff73abdfa24612895545773034b613318a9166b5560e41026d2ec245dda6b088efde1566126dae35182ddcb3fe795a786554ad
TLSH
T1B7D0C0743F42F108C04904F08534EF101337B81230839900F070C80E84E40C0A3C9053
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b4edbbe62f29386512f6cd1726c675b23fdeee21a26a2896a394ff9b87143167
MD5 c0060c375421fc206e85d98fc2ea6677
SHA1 2189b0dd881564dfef39585cc2cffda4dcd3ec91
SHA512 338dc8a4791fbbe759582d4a8fd55c1a6245fcc722bff11ff926118daa91041d62e98b05cb2e63b22ea119d41a557c511dcfb12592ab416dab9980af0b5ca713
TLSH
T1F2D0C0703F42F008C04904F08534EF101337B81230839900F170C80E84E40C0A3C8043
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3243a8312acaea58857251be8b80f48c663d8c1def89eb28173e067571991736
MD5 2e56de1ea78fc0cfec0593b48cb10b78
SHA1 85a7d59559a1b2c6d020c91ed7f6b29f346b75bd
SHA512 dc527ca5d417dc3354efe247704a1d9505c3549fede625a10a6f3fd0a63f5c788f2fe51a41e5e0521db444b241e0804ef3a251fbbbcdac672c0f50a0412f85bd
TLSH
T110610A578161ED62DB7C577634E054D937B7CC85EA83EE2C0161A0B4CD53B4C0133887
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 62138f6d84b122f95ffab86886ace11e491aec3b2d6ee814c95ae546e7510071
MD5 ffef294904ac01bc4949b1756bbb266d
SHA1 a41ee86769e3cdb9a95925379bbb51a33e939239
SHA512 a4bf5442ff464fbd9366add4efb1e917048fbcf3b0fda15938467097fdd74fb1a77d38ff6c004e494ab5b77d2c696b9802f9b4a05da15f8364fd7d8ece5657e3
TLSH
T10E41BBF3C3E8856D8A0156F4BB146E2BCE2D0915832C3D5AC9E4AF5BA3E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fd8cb528e445a7cb4fd4c99f43e4bc11bc3ec13ad79118e32d3779d06b28a411
MD5 f85b4904368410b8bb78e2b6e73ed54d
SHA1 976a684c09880e7e8d43b768d50ba76304a3e38c
SHA512 d2f4e3a6670abc5bda0b50871eb3cddd816d0ecb4db383b4d42282d0e993abd163441555dd82aa6446d79f3ab7b74c0e6ac0af989872c130f7c40b924e7b8e12
SSDEEP 192:sxRSRvyyM/jK1Ml8wFP/fPsSfcGqXlzoA8p4G/g6+WNIYYMHYuqpCGeIgIJ:sxRSYbP/fPsSff3j/5I0qes
TLSH
T17252D8166A24997BCCCBD30DFA557F53D6F85563A2905E44AAFCCA0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 968d41f89e012854e2a791ca84bc9e32caf0ae751809fcd1a9af4d0a0df2c869
MD5 f7f86e54e9bef3b4a8551d4c17e182d5
SHA1 c3fab296e1cd5672d7979904bab2d8cc549a7def
SHA512 348edc5203b9eb621927c476f598af71bfbf4d2c9088f62e9e176a1b0458786821eb4d462fd3cf937de2cc28ada172c227cc3e1bc420d381e3bce12f96c5c324
SSDEEP 192:sxRRRvyyM/jK1Ml8wFP/fPsofcGqXlzoA8p4G/g6+WNIYYMHYuqpCGeIgDiJ:sxRRYbP/fPsoff3j/5I0qeS
TLSH
T1E762D716AA24997BCCCBD309F6557F53D6F85563A2905E44AAFCCA0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c527a2732af55a9abb023b7711beaa3a1ecd92b5b5509cf37badc240ce8c463a
MD5 850ab54f07b292fd5199b9c4e8152c7c
SHA1 981f4d96b81afd92943c90c5899ffc90022b0174
SHA512 02941041c7df4c506610cbc61fb933af636781fce8ea7ecd5cd1f8edace4ade98075202656a7dff276d92dbd77df1cc61837355d18b18afd9f5484858fd62972
SSDEEP 192:sxRRRvyyM/jK1Ml8UQKFP/fPsoa4cGqXlzoA8peG/g6+WNIYYMpYuqpCGeIgDYJ:sxRRYqwP/fPsoJf3N/5IIqeA
TLSH
T1E462D816A6249977DCCBD20DF6457F93D6F85573A2904E44AAFCCA0C00E7ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bd27b0f8421ca4fc0a7354b4b7c0684e434b031d128cb67850913197d1129da6
MD5 82bdc898cb6b8b67a06bc34d9e471d67
SHA1 b3533467bb8231b224158387b0a2486ba731aab7
SHA512 ab3837f05fcaa9e685257e53c4204493e7254ddb7e999fa05c128c0a791f3ef3052b41187d23bf6e5cbef2f6343fe1edcb267a8f47eb9e9305ce689ba8ba4e2f
SSDEEP 768:j+8uI7WgNVfq38F1+UoAYDCx9Tuqh0VfUC9xbog/OVbBJ6erolg/:j+8uI7WgNVfq3u1jaaH61lg/
TLSH
T136C2FB2B640CC77E4F844E9DEC25BE966DD801CB9B988D5447EE890C03CA7EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a03775d95067c661e4e1ca9faf3f0571f984ff86225c25dc190e7372956f1c6c
MD5 605ae4db850234c36218477664726ea9
SHA1 1870a3f39d95d433d8acc3279c8147ffda0db418
SHA512 f2c8e678b80453602c056c85e293021a84a2710441b35389698cdc76545941e1f0a7df95764ce77ac9087a9548bf9af3b204ada250fb72ea105161824b0ffd8d
SSDEEP 24:KFAf3CFgqFIIu+Yes1I7uuK49hg0u1S2+Sk0qd6evyXehfKH+g7F7v3+XLsuI7T0:KItIFKmgw/yxOIvKTSU3/INKUcAPyl
TLSH
T1FA916411357613046CBD268A81E5D55F828130B3308EB46F7B9920EA4B7FE405EFEEC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5ad6ca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5ad6ca.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 313dc2c8f680576e8ed254c7429764f73a5a93ffa27531aa222583ba11e611a4
MD5 dc92de4756107276460a7a98e7f812a3
SHA1 f1b6ceac69d1f694c46435f26b70971f90854740
SHA512 81df359b21bbe563332bf364a04066b5cf23f645555ae398e91ba773ae7bd99aa2aad3299cae61801e0be786ddd1b829e3e36a8620d651a941f4dc88bcd557ff
SSDEEP 768:NjaeqD4MlshiLdMm83qxSlgaffVfYBzfYBnyJ5p3EFlnNMLmO/yjWtTsTE:NqcjhIdMv3FfVfYxfYGp3EFlSCEyj2r
TLSH
T11C13D0369CB09CA78D72A681760B77936EB44657C7857B589CCC7B0E019B2DE130BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0e4ef60880b7809be4599ed4142089ffb3fc9d29ede7290be8b963d801734c5d
MD5 41488ee8936120c5f1da6ccf4a9f50f8
SHA1 d4cf2edd96d04447a6b27fa25b1a5aea0c49a243
SHA512 cfd06a48bea4290e07dad47d3baea0a2b18fe8cc9e4017549349c616a6e00b028ccdd1cbf3632bbcce541a5be545f9eb4067f9aefe54d33efad747ee4e258bb1
SSDEEP 768:aj+923tmSlgaffVfYBzfYBnyJ5p3EFlnNMLmO/zn12bfJTz:Z923JfVfYxfYGp3EFlSCEByJTz
TLSH
T199F2AE369CA09D639DD2D7C5754B3387AEE88627D6842A9888DC6F0F41DB3DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1dc54f394aa1da7a7a40fea0ec709f41243e49d6163e9bd3da6e4f631f1cbcd4
MD5 ee5066200a6893567340842adc08f81c
SHA1 fbe31a157fde41596f5334b5ac57f3edbfd6df32
SHA512 27ea3fe105234aa6d39b8aaf34d1b5b2bcd6ce7ad4478255c80e3d796e3f7ce1e8595b13ad27538ba443c4e17ad483da55a320bce87c2e38bc087ad6f9e552b9
SSDEEP 768:Mj+923QmSlgaffVfYBzfYBnyJ5p3EFlnNMLmO/zn12bfJTz:L923afVfYxfYGp3EFlSCEByJTz
TLSH
T115F2AE369CA09D635DD2D7C5754B3387AEE88627D6842A9888DC6F0F41DB3DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c7e59f37f3e63aaeeb2857ee858985e38685a1fdcea845140d993db50cdf4515
MD5 c37a303ec0399bc453485b21232ebc2a
SHA1 33d0350eef7f6836b1820a58aa54aeb87117c1e3
SHA512 cbee1eee3367ab57039972b8075a66e5d2346505d9c39e5610ed80828e419a2cf57e9641531525eef754fe73425c36145cbb90e2b5e7eee343f039097aedda96
SSDEEP 768:zF1j+9l3IwgOmSlgaffVfYBzfYBHyJ5p3EFlnNMLmO/zn12bfJTz:i9l3jfVfYxfYOp3EFlSCEByJTz
TLSH
T1AF03BF339CA0CA67ADA6DBC5B50B3347AEF48277C6846694D9CC6E0E41DB2DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 abcba4ffebfdda1e184330d5f178a4aaacb1ca07112828e65dcba5d49933a9d5
MD5 43514c5771f06aacea3474d917966e74
SHA1 19521fe1c4e223e9f48eb94e95f16fac48b3eee4
SHA512 20a43cd7c83ebd4162437b330e68772d6ae541ab628ff6f85f63fdbabc4df19ffbf92ae99472ec712de73a3575dcf0eedcbf892ef3ef00e4866c3a2b3c48708c
SSDEEP 768:UjaeqD4MlshiLdMmQ3kjDgaffVfYB6yJ5p3EFlnNMLmKuyjWtTzTb:UqcjhIdMH3CfVfYlp3EFlSCVyj2v
TLSH
T1FB03D03A98A058778C769685760B77976EB04293CB913B59DCCC7A0E41AB3CF130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download