d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 11:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2IPP8a.html
Size 11KB
Sample260715-nrtbdabs5p
SHA256 d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84
MD5 c229b9d23420402bdea979bae2d31dde
SHA1 cf5cb6cd0c16a3cd252c792a13907df48fa2f0d4
SHA512 bdabdc88c2c5f8c1b6e4730801ad263d8f0172f9cbc19d80de98acaec7d06218f830366b5c10a63cf589de17ed23dd3b84542ab2183f93fe383f9fa3bd6f6fb8
SSDEEP 192:zMilLhIJhKYX5kerCNRupjQ4vYJkTcOHsU:zNOJhda4s4vYJk4OF
TLSH
T1BF32764A1EF280E701E785A97DF2FD0DAD85864BD219FC4832BC80A90FD7D468DC7995
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2608	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285891147066572"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{BFD24E90-EB68-4CD2-806D-26F677F16624}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2916	msedge.exe
2916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 3272	2276	msedge.exe	87
PID 2276 wrote to memory of 2608	2276	msedge.exe	89
PID 2276 wrote to memory of 4160	2276	msedge.exe	90
PID 2276 wrote to memory of 2020	2276	msedge.exe	91
PID 2276 wrote to memory of 4160	2276	msedge.exe	90
PID 2276 wrote to memory of 4160	2276	msedge.exe	90
PID 2276 wrote to memory of 2020	2276	msedge.exe	91
PID 2276 wrote to memory of 552	2276	msedge.exe	92
PID 2276 wrote to memory of 552	2276	msedge.exe	92
PID 2276 wrote to memory of 552	2276	msedge.exe	92
PID 2276 wrote to memory of 5412	2276	msedge.exe	93
PID 2276 wrote to memory of 5412	2276	msedge.exe	93
PID 2276 wrote to memory of 5412	2276	msedge.exe	93
PID 2276 wrote to memory of 5908	2276	msedge.exe	94
PID 2276 wrote to memory of 5908	2276	msedge.exe	94
PID 2276 wrote to memory of 5908	2276	msedge.exe	94
PID 2276 wrote to memory of 260	2276	msedge.exe	95
PID 2276 wrote to memory of 260	2276	msedge.exe	95
PID 2276 wrote to memory of 260	2276	msedge.exe	95
PID 2276 wrote to memory of 5340	2276	msedge.exe	98
PID 2276 wrote to memory of 2524	2276	msedge.exe	97
PID 2276 wrote to memory of 5340	2276	msedge.exe	98
PID 2276 wrote to memory of 2524	2276	msedge.exe	97
PID 2276 wrote to memory of 2576	2276	msedge.exe	100
PID 2276 wrote to memory of 4464	2276	msedge.exe	104
PID 2276 wrote to memory of 3456	2276	msedge.exe	105
PID 2276 wrote to memory of 960	2276	msedge.exe	106
PID 2276 wrote to memory of 4312	2276	msedge.exe	107
PID 2276 wrote to memory of 4312	2276	msedge.exe	107
PID 2276 wrote to memory of 2916	2276	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2IPP8a.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff8a1d4c188,0x7ff8a1d4c194,0x7ff8a1d4c1a0
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,8204998209801477047,3077320137605683228,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1792,i,7599944985246927301,12443232367785641666,262144 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,17006689911780468186,574140390374943694,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:13
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,7265560199234243789,5163000964005324601,2097152 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,10603457916089509740,6174940542049191294,2097152 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,6336247091143941593,3679758647254036989,2097152 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:9
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,8493059159584575275,14381788854021428247,2097152 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,6750728225144669115,11771687349296806898,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,11156300502001321014,709787270875722680,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:14
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,2023415271811052516,16431582446950189020,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,2023415271811052516,16431582446950189020,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,14208016156221476107,2026496489913824055,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:14
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,15395920464488353304,5085166232908403238,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,7249153456712454573,13524774628445172024,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,2536190573789690395,9283457817901745241,524288 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2152,i,1214116050831429591,3948680876892917929,262144 --field-trial-handle=2632,i,14456308199271842654,6413518500740023893,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4b02caa81bf0882e077c14c31e14b44aa2fad2fad3a9bfcaf2749e988a6fa8c8
MD5 c7cf9e317a4cd6a7c5d063e31355e1e2
SHA1 a20c0128d330a421983da1b820870ae56113c884
SHA512 e7c28302e76452e0a7e6a5d861dc720906903b49857a1fbbdfd1cac83f6ee92983c9d83b8bdbb558a64f2c4adb0e127cd2b57b9c08251b27ca3fee1a761cc3bb
TLSH
T137615FD5231A2B92EF208EB1DDE2764D35F3CB54090BAAB048406D360B2EF1954D2DE3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a9f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a9f2.TMP
Size 3KB
SHA256 4da93e5c3ac0f621ffbc07c19fd3091a28f26bcb8bec170c85aa9ab078a3d78d
MD5 1234663dde2b0166434ca19f409efc00
SHA1 c1645b78d22f69c9ec875a9b0dfa16ef84ee25a8
SHA512 ae8f93d92a7d4136bf7ec3abd29d2a9ad22de452d7e10ef1ba7708c3ea64fdf0c75fde4c7656ebfccac4bc3f08e5c3c85580b8dee9bf329f9ba246448885d4fe
TLSH
T1B66150D5271A6B92EF204EB1DDE2764D35F3C754090BAAB048006D360B2EF1954D2DE3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a50198ecfc272600e7547f1e2ad800488ab7385396103dcd69e45ee92179c742
MD5 e4907f0eeb4cc32431a8d05ca1e8ed26
SHA1 f11c767f1e8af70a1e7a7dfb51bbb329f03649e7
SHA512 2c64e9ad5ad3a41e478a1cc1bc016e4e77382bd4bc4c4a8cb9dcdb040cca9115fe2bfe2c7466eb8a5dd7e06ea0b42643815186974c1d58d3e20cc9f54c9a321f
TLSH
T13841BDF3C3E4996E891146F0AB187E1BCE2C0915432C3D5AC9E4EE5BA3E2871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 24e661c9dfc4cf3837a0ba3970ebaf61e9c30804eb6da2f961b20aa3439fad31
MD5 88f9eb2b90c752d7a2230f3137d1c33d
SHA1 f746b5de9e1f2103e5f29b01703882ceeb859347
SHA512 e86b6fc50a2a3161641dc415075b40af5a93c1bd8b07ca552b569c57482ee615880cce39e61e1c1622e243bf6c9cda3894f97e1179ef472dc65e1e8a83c7c8b1
SSDEEP 192:sxRhRFyM/jK1Ml8wbr/fXGss2voKCA94/zzoA8p4Pp/g6+WNIYD986ShGrjIgDwJ:sxRhllr/fWsPwZ8JSp/5ISSoQ
TLSH
T13E52C916A6345D7BDCDBD20DFA557F93D6F91433A2901E44AAFC9A0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2d93095fd102d26c7d3cca4e46a3feb4b57881f7000201e21b1aa58328702bf3
MD5 a32bef24cbaa9e35189897c155501b63
SHA1 ffb5cc828df0cd0d338799552696cc867e4af4da
SHA512 5f9a7d209b764463716ca7df372802ac16efe9c5074e2ca762ec0794c89c02baf06dd797076bfe95989ee69af795e5045e25f0430cd41fd882cd5f397664059a
SSDEEP 192:sxR+RFyM/jK1Ml8wbr/fXGsA2voKCA94/zzoA8p4Pp/g6+WNIYD986ShGrjIgIJ:sxR+llr/fWsrwZ8JSp/5ISSos
TLSH
T10652C90666245D3BDCDBE20DFA557F93D6F91533A2901E44AAFCDA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8cfc6ae89276eb4bdda77292ad9d36acb57224f4895b0edf6b509bf080281256
MD5 600f82c350f2bb9e5d188e5002508015
SHA1 66b840e71888103eb9ffa5aa8d65ae1e55eb368a
SHA512 d0f63fc2a82b170bd8b59494e1d05e6471ccd03bf5de56b8e8be757c5475a98da52f3f72f27380bc6c4e606d3ae6ed7ce152eb99317365da22237916614f1ba5
SSDEEP 192:sxRhRFyM/jK1Ml8UQWbr/fXGss2vJKCA94/zzoA8pePp/g6+WNIYD9H6ShGrjIga:sxRhlqor/fWsPxZ8JUp/5IPSoa
TLSH
T16062C816A6245D3B9CDBE20DFA557F93D6F8547392901E44ABFCDA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ff493453a72e1f7d17a3725faa939d5b3d0546a88a333814f913fabaf035e249
MD5 50e9ffeb6c71f50ac275c2539842801e
SHA1 147e9fada367d8d58bc29589cf6e61c8b5ea0373
SHA512 1285e08371038ac9dafc2c969a081c81af81559bbfbe1935ad9c9008a3282f78d24d97261ccb19caf37b60a46649f504e084636088514dca917896212b81ac2c
SSDEEP 768:aW5WP0Wg/XfCf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyc1saro/0Drx0:aW5WP0Wg/XfCfu1jazysR/0+
TLSH
T1ECC2FC2B140CCB7E4F844E6DAD29BED7ADD801CB97988D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2cf402c267351ed1002c6998d23e15ec38fd079c88e6b07fd1bbdddb6045af6a
MD5 a9c51452d7d510865a076cc685255e3a
SHA1 9b8757c45152666e7141ba560313eed7d545e075
SHA512 05ecb86591e2425cd0f253a87db96a9b3af663be093605fe6cf6f83baa77d5edb315a7449483c8c150bbbe73196f39f1bf79a612dc676d2ff60d1585261d5b13
SSDEEP 96:KRE/iE/nE/OE/iE/UE/0E/kE/iWE/sE/5E/RgE/SE/iK4E/HgE/IE/icE/yE/6Eg:CE/iE/nE/OE/iE/UE/0E/kE/dE/sE/5W
TLSH
T1C291344235360250387F6A08D5A8992A93D1BC733119F97B7BE941A60F2BE134DFECD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 61cff7bf4f39f55a99635a30fb7f1102e23284a7601750f62d623e6f65c81da1
MD5 e2cc367f190158b7cc622db7f0f7ac9b
SHA1 25cb01ce7c826f18447d08a51795ed7e431cc5d4
SHA512 563ff79f096574e4996c76d270daf483a53ec7f7cc4e153339b553de9c11f5a414c720b8adf23b1f3ecc16d5970097b4eefe991126c8063a9f51bd7cfeef7e7d
SSDEEP 768:Grv+4UNbdC3iHi0QWuNrEnjN3Gac1F7Mj6:Gbsbw3UXuNQnjMao1
TLSH
T18713BF32B9A88DB38DF7D285B0477A03BFA4065386C40BE4DAC97A0D45DB5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3f4effabdbac1ae92963863c4db45fcafd34a98c90755c04d832e3578461badd
MD5 9d0e1c02df2ad877db65f74134b1ba41
SHA1 66ee1158a8a92bfb69a7ff671f139266e93c5153
SHA512 2f5c9a2b37a3a9bfa50855e809abae3e869738312004827931b15b5ca4242f0693371bdf6db57d00be5807f71bf5cb9a9a5902ec5bf73727779c48e5ad27925d
SSDEEP 384:ptNn/s3n9SD38NJPNH/f2WZlf8hyEG6f77h7F+uxy2rEoajo4cdR8eHhVODjYPNw:pj+983GHi0QWuHrEnjN3Gac1F7Mjx
TLSH
T1DEF2BE36ADA48DB78CE6D385B5473B03AEE0475386C40B949ADC7A0D05D76FC130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4d80159df2794f09449d243a42c229f32ef9bb1ae25e7d9454c9b2f5bca464ee
MD5 e146af8f31097cf6ff27865522dba548
SHA1 8fbb41a08b0a6c1b5fc13e35a6e0ff998658053d
SHA512 102bbe36764c6903d69491bbdf369ec51413a6a453983f6c6bb3bf7dea7f65ffa4f85c011f84c83a9420c59135921d3d99829cff11ebb0114b9f3f7c8c54c987
SSDEEP 384:7tNn/s3n9SD38NJaNH/f2WZlf8hyEG6f77h7F+uxy2rEoajo4cdR8eHhVODjYPNw:7j+983NHi0QWuHrEnjN3Gac1F7Mjx
TLSH
T11BF2BE36ADA48DB78CE6D385B5477B03AEE0475386C40BD49ACC7A0D05D76FC130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7f8a1dc0867ab49e3e8119b0c58d06838ff137de90f5da0f4276270355f56faf
MD5 901a37ffe4d3ecae635fd5f0804bc0ee
SHA1 a8e609297fc166c4158480bf8c3f0c88a2dbfb6e
SHA512 1412c5b6e522c5550e9a82876fe1647501603b90cd2e92ce6d1f3c2dcb3f20d8b08ed548127da225fd4b9a2ec266dcbcd569b40a464ee7bde3128be880f7957d
SSDEEP 384:YtNn/s3n9SV38NJPNH/f2WZlf8hyEG6f77h7F+u2y2rEoajo4cdR8eHhVODjYPNw:Yj+9K3GHi0QWuyrEnjN3Gac1F7Mjx
TLSH
T1EEF2BE36A9A48DB78CE7D385B6477B03AEE0475386C40B949ACC7A0D05C76FC130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d672d72142ebd3ac0a83a90aa67f93a6b4cf78368944198c937c3b3eda84098a
MD5 a49f1c071f56e108e4c353eaa734f8f9
SHA1 8fc71fe500c0b00d27e392eb15a28417acc470c1
SHA512 4d93a702480c0ecf4e32e632c459dfd2494b7f42fc27a1dccdc6736ff5a64211592ccafdc7860bb598975119b852d983adb17cc0af8c61f40f76a939ea263ba8
SSDEEP 768:rrv+4UNbdS3gmi0QyrEnjN3Gac1ZreVH1SCz:rbsbg3X7QnjMawEH1V
TLSH
T19503CF3269A88AB39CE7E38575877A037EF4525385D40BE0C6CD2B0D02DB5EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download