fdbc107bddbdf1e1238677f8565ff00bd017ecf1597a424d3bb317eae01d09c7

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 954B
Sample260719-pg53vsdv7s
SHA256 fdbc107bddbdf1e1238677f8565ff00bd017ecf1597a424d3bb317eae01d09c7
MD5 e229fbd19ced9d718c05b84ed684621a
SHA1 83401c6c790d72c977e3433fd1054ee6cf472f1f
SHA512 159d50f57d6cfb44078e414183b84119c6bacd2973d021a38cc64c3f3e62a8f7eae9aef24617a543eb3d6483b1e21cc0629140f342daa0fef8303eefa32d4ae9
TLSH
T146119C66EC04D48D37609E9F9C34F36DC8D699A92A71C8E084F4462E5CA0BCD5E72492
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2528	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134289371498724020"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{D4DFEBFA-9E15-4297-B09F-35AD70B20870}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1084	msedge.exe
1084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3452 wrote to memory of 4204	3452	msedge.exe	88
PID 3452 wrote to memory of 1596	3452	msedge.exe	91
PID 3452 wrote to memory of 2528	3452	msedge.exe	90
PID 3452 wrote to memory of 1596	3452	msedge.exe	91
PID 3452 wrote to memory of 1596	3452	msedge.exe	91
PID 3452 wrote to memory of 2852	3452	msedge.exe	92
PID 3452 wrote to memory of 2852	3452	msedge.exe	92
PID 3452 wrote to memory of 2184	3452	msedge.exe	94
PID 3452 wrote to memory of 2184	3452	msedge.exe	94
PID 3452 wrote to memory of 2184	3452	msedge.exe	94
PID 3452 wrote to memory of 1540	3452	msedge.exe	95
PID 3452 wrote to memory of 1540	3452	msedge.exe	95
PID 3452 wrote to memory of 1540	3452	msedge.exe	95
PID 3452 wrote to memory of 5848	3452	msedge.exe	96
PID 3452 wrote to memory of 5100	3452	msedge.exe	97
PID 3452 wrote to memory of 5848	3452	msedge.exe	96
PID 3452 wrote to memory of 5848	3452	msedge.exe	96
PID 3452 wrote to memory of 5100	3452	msedge.exe	97
PID 3452 wrote to memory of 5100	3452	msedge.exe	97
PID 3452 wrote to memory of 2028	3452	msedge.exe	99
PID 3452 wrote to memory of 2028	3452	msedge.exe	99
PID 3452 wrote to memory of 5748	3452	msedge.exe	100
PID 3452 wrote to memory of 5748	3452	msedge.exe	100
PID 3452 wrote to memory of 3088	3452	msedge.exe	102
PID 3452 wrote to memory of 4624	3452	msedge.exe	106
PID 3452 wrote to memory of 1824	3452	msedge.exe	107
PID 3452 wrote to memory of 2308	3452	msedge.exe	108
PID 3452 wrote to memory of 3828	3452	msedge.exe	109
PID 3452 wrote to memory of 3828	3452	msedge.exe	109
PID 3452 wrote to memory of 1084	3452	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ffa6c81c188,0x7ffa6c81c194,0x7ffa6c81c1a0
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,8996105370835953288,15048277834179053504,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,18085111932523141984,8873890913988298032,262144 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,13556096950447986913,14003966287074297043,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:13
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,4483892297728651129,1080228598279610182,2097152 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3288,i,13826394176359358556,2487565782278369932,2097152 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,18199263641501522066,14687666255186275489,2097152 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,11183363177432984901,12106881004001550880,2097152 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:9
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,11323883895900449527,7502396623344351426,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,15594033266540865084,2421883138451139760,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,18369494095922742106,9507725400177096886,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,18369494095922742106,9507725400177096886,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,9757989122740825466,9275115316851282250,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,2430198381907161337,14318396808630958398,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,16874739296856986018,6063808040997136552,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,8779695767006179842,15000790759107295338,524288 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6480,i,7930751105465512033,10182677122553392203,262144 --field-trial-handle=2640,i,733110526020153762,2285531143892512924,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1084

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f74984bb599a848f6ab965da744d6cceb07a984b8db4bdcdc437205f825f6848
MD5 e41af5bc8594ed98bc31d0cf903a3990
SHA1 18ad9202c1584497d3cd5d245a294677e2a95728
SHA512 ec32e9772b5bdb4148cec063623d4c223ee922a26f7c1f0ab36ca41fded7a31ac57e8e593c1b74844541a449ac483c58c8b704d3dbf2154525848506df64cb09
TLSH
T19551B795437709C1D73347B2E9F09B663EFAAAEF09472FCD4C7835B4A8A6F685002560
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597cd7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597cd7.TMP
Size 2KB
SHA256 146530a42ca7d9d387fefc2e4e1172227c690a07110373cc0696c00c076ad3d3
MD5 e3e3affb987cccfdeb4132e0edb23e9f
SHA1 54f1b214b4049e7d7ee6fae7361c6c79360800df
SHA512 6ef91dfcdb12c718b358fb28de6f5d89fb11595c9458036902bcb41247c627dc222639df06ed4efcaca466737a6bf6be3567bdd0717da8520e652c16028dac1f
TLSH
T1EE51B795437709C1D73347B2D9F09B6A3EFAAAEF09472FCD4C7835B4A8A6F685002560
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c4e4ce4b76487380bcd8f5f86291bff9421dd182b46de493384e096e0d5bdeae
MD5 a45a96f73e19633c21b56e71337ba013
SHA1 bad1189c73b6ee8780839fecee68046fc0a10101
SHA512 f7b47bfffcd0fb6435d9f0d7b93898cac3a0e250e6bae032368a57e0a4e1a6bf346efe54465445c362c2199ade1780ab1c95289070cb0ad8d8f6a3f26ea8bc5a
TLSH
T1F341BEF7C7E8866D890156F4AB14BE1BCE1C0915832C3D16C9E4EF5BA3E24B1E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6be2af5b4b8e75b3df8f6f7a9bdfd81cd097c9c01091a62ab3c02893322743a5
MD5 5f959c639bca7a8da7924bbe73e69678
SHA1 ccd1ca90c37d9c0119da9037aeeeecf0ec1874d1
SHA512 cec3714a2425be08a3261bace3981ab88e2dc632bceed391ad7221760984552b87f354817f29bc7e2aaa536598dcffb281954433f0d93301125cb13efa06cd06
SSDEEP 192:sxR0RZbS/f9+ssfed+KCA94/szoA8p4I/g6+WNIYD986SnGtRIgIJ:sxR0jS/fwseed+Z80h/5ISS2s
TLSH
T12D32B8166A28A93B9CCBE25DBB557F53D6F95033A1D01E48A7FC970C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e6b3e23f024e79781f50a4391514711cb2db096dcd409c5e921e2ee74c61b087
MD5 1c737b2293b29f9bb45929a9ffe494f1
SHA1 b5e59bfa207ea9041b5609e3bf19b860d3c5fd48
SHA512 292edc385e1a567b779e8fc7c2d7afa8ded17547568f452f3e70354bd0c2d13007310062e2f252c905d1ea3fb328e843c7943fdff401aaedfde477ce5a7c3fd9
SSDEEP 192:sxRDRZbS/f9+spfedUKCA94/szoA8p4I/g6+WNIYD9z6SnGtRIgD/J:sxRDjS/fws1edUZ80h/5IfS2V
TLSH
T14532B7166A28A93B9CCBE25DBB557F53E2F9503361D01E48ABFC870C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 393d935145364e2284fe67351a27a91ebef331835322533fddae9ce63a4d5faf
MD5 2ed3bc185036ce7f0cd0b32994d6a446
SHA1 206c66fee1552e25276ae69751fb992a938e7909
SHA512 58255bd6309cbc6f49764f2fb47a43caa8af2407867fcc3a54a58272c355d5d9a975cd079652e585a6c0b270fe17745df09709f97c85b70b0971d35cd69249e3
SSDEEP 192:sxRDRZbS/f9+spfed+KCA94/szoA8p4I/g6+WNIYD986SnGtRIgDZJ:sxRDjS/fws1ed+Z80h/5ISS2X
TLSH
T10732C8166A28A93B5CCBE25DBB55BF53D6F91033A1D01E48A7FC970C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 992efe9fa3aabb65cc14f4f4b92fba176e60b0812c9229130f9e89385a8c45b2
MD5 db44c6bb7ebbc365a867d51a23e47036
SHA1 2846cda567d5c87ed18e2bae02db453e2c81adf8
SHA512 dac41fd280cf7411f59dcdedf72b2372d15a9553b67d6daeaeabeba063e4ff428e6cca99422f94114dbb1ffd24a09ef2dc0c4c6629b2920817045e5425f86492
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRc4ropDa:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VQ
TLSH
T134B2EA2F600DCB7F5F800A9DAD196FD76D9802C79B588D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9557e9b0-b18f-45a5-9f0f-8330fa3bb65a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9557e9b0-b18f-45a5-9f0f-8330fa3bb65a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d28e1c7aec7cc24fab80404ef8137744d31dc3e8308e2a3b4abdfade78038b46
MD5 14e3d8b0a11398690baf89637fd94799
SHA1 af6118da8822b144d4c3231b79df3239200775e9
SHA512 10f28cfc06cbaf4c8c00b28eefc87497593b2a694106a8e33f2bd36088c5ef6d589f87be7f886504f919acfbd1ca1d671a6160618b47219f69c489ee6cebc179
SSDEEP 384:VtNn/s3n9S+38N821eMZzFZWZlf8hyEGunG77nqy2rEoajo4cdR8eHhVODjYPNDc:Vj+953dKOi0XWrEnjN3Gac1FNb9Mn
TLSH
T156F2BF3579A59EB38CE6D3DAB1477642AFF046A382C50E949ACCBB0D15C75FC8307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 befb0a1adb88bc749bfdb11d0412ad3bcec4d211bff0249bda7150df71d7829f
MD5 2ef5435161c316dbb89b1652135abb56
SHA1 d08e5adf8e1df68a824874c2df9f9ba46619ad73
SHA512 0a396ae5187e5fcf6a4d49bb4bab524a41f1f0f50f4dc73ba895c0a7ec8fb9c091e3fd1b14808b84821189072b1ac8d30438c1fe64d254f9fc2d82c28e105ed4
SSDEEP 768:TF1j+913/wg9KOi0XerEnjN3Gac1FNb9Mn:C913/JuQnjMamb+n
TLSH
T18403AE3669948EB79CEA8BD6B5473642EFF006A3C5954AA4E7CCAA0C11C75FC4307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ff176ea725302e9bebb5c9d8ee9c951b6bd98f0f94f617095ca5fb6d35a61564
MD5 8ca62a653c583fe19ab77b9c8b6d4454
SHA1 d684b5963d134efd747034d3ac028794f2b9026c
SHA512 18394a999dae615ad6d03ff62b8c3d868cad3218fae68981ea411bf4f1ac95f2452fa20c26300ad5854ee09a02be4977fdd6705a6272c7f715a8b249f2764213
SSDEEP 384:Tsrv+89zHqlDNP9oidX38N8+1eMZBFZWZlf8hyEGunG77nqy2rEoajo4cdR8eHho:Irv+4UNbdX3dIOi0XWrEnjN3Gac1FNlI
TLSH
T1D703BF3279689EB39CE6D285B00376437FB406A385C50BA4DACD7B0C16DB5E9630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b8612897ac911576636af38a27d2d3ebb7ee707bb7d5169e182dff841d105c7d
MD5 b2ef4bf935e3000d8202ddfcf3131e97
SHA1 e691d7644c5a536694593afb074e06e6e0490526
SHA512 24c2ef81fdde70c153901809942730997c15a5086bb425c9b71947b87af115f44e10ed2f6e8cad95732abf6523ea8e7d5e143a5bcb90233bd0e00bbb8e0e95b5
SSDEEP 768:rrv+4UNbdS3hmi0XSrEnjN3Gac1ZteVH1SCz:rbsbg3mCQnjMayEH1V
TLSH
T19803CF3269A88EB39CEBE385714376037FB4125385940BA0CADD7B0D12DB9EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed97bb3d-ad69-4cc5-99e8-25f4c023ba32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ed97bb3d-ad69-4cc5-99e8-25f4c023ba32.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download