a008a3def61329e5ee9501f3a945b8371a09ad02f7a9713fcdf51f63b593a033

Analysis

max time kernel
299s
max time network
232s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 17:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
virus (1).html
Size 62KB
Sample260730-vye6natarc
SHA256 a008a3def61329e5ee9501f3a945b8371a09ad02f7a9713fcdf51f63b593a033
MD5 a0241abd91ea27f7255ad064de507e5b
SHA1 2240d92b3f3e3042c60fe22a190ced948209a1cb
SHA512 4044a9d7ba7cc9358477df5be678f4b9793b4e24dd85a159da462e7f19809d73348a5ad902f372a596e7d50d2aebff5a8e8dccfe205d0e6107d60cc1303f6b19
SSDEEP 768:ZvjRb9SCf6REQ+AAxGxj/Y01mYN4KedHN7dd+1G1OBAMTpru7whhLmI9r1E:ZvB9Si6REQ+AAxGxj/DmYN4lpdhGvLW
TLSH
T1185393AFA91621518933B77DAF6B6208FF3351635542C2A07EFCD2400FB18569266FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
22	discord.com
23	discord.com
25	discord.com

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
13	api.ipify.org
3	api.ipify.org
4	api.ipify.org

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299058312660295"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{F5D9186A-1E02-40DE-8C0C-7DA3251BF436}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6760	msedge.exe
6760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe
6664	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 6664 wrote to memory of 6756	6664	msedge.exe	90
PID 6664 wrote to memory of 6524	6664	msedge.exe	92
PID 6664 wrote to memory of 2040	6664	msedge.exe	93
PID 6664 wrote to memory of 6524	6664	msedge.exe	92
PID 6664 wrote to memory of 6524	6664	msedge.exe	92
PID 6664 wrote to memory of 6224	6664	msedge.exe	94
PID 6664 wrote to memory of 6224	6664	msedge.exe	94
PID 6664 wrote to memory of 6224	6664	msedge.exe	94
PID 6664 wrote to memory of 6388	6664	msedge.exe	95
PID 6664 wrote to memory of 6388	6664	msedge.exe	95
PID 6664 wrote to memory of 6388	6664	msedge.exe	95
PID 6664 wrote to memory of 3152	6664	msedge.exe	96
PID 6664 wrote to memory of 3152	6664	msedge.exe	96
PID 6664 wrote to memory of 3108	6664	msedge.exe	97
PID 6664 wrote to memory of 6344	6664	msedge.exe	98
PID 6664 wrote to memory of 3108	6664	msedge.exe	97
PID 6664 wrote to memory of 6344	6664	msedge.exe	98
PID 6664 wrote to memory of 1060	6664	msedge.exe	100
PID 6664 wrote to memory of 7132	6664	msedge.exe	104
PID 6664 wrote to memory of 3516	6664	msedge.exe	105
PID 6664 wrote to memory of 6796	6664	msedge.exe	106
PID 6664 wrote to memory of 6292	6664	msedge.exe	107
PID 6664 wrote to memory of 6292	6664	msedge.exe	107
PID 6664 wrote to memory of 6760	6664	msedge.exe	109
PID 6664 wrote to memory of 3648	6664	msedge.exe	110
PID 6664 wrote to memory of 3648	6664	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\virus (1).html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffb28c5c188,0x7ffb28c5c194,0x7ffb28c5c1a0
  2⤵
  PID:6756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,822131395177194373,18169254956513087564,262144 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:6524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,8101936803715291317,13718254078980484905,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,18374831558901315394,13251532194407314149,2097152 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:6224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,12181977866792336669,15594657659021785030,2097152 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,5601672738288305991,10705248249725807321,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:13
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,6284391147839549797,6124602995717043775,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,7174699863367852398,2621463002653804080,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:6344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,11996866297906791900,15040888051668832362,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,11996866297906791900,15040888051668832362,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:14
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16788138071090869835,8509033643641357808,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,6468565961461779724,5223837811926175319,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,13626512302290519457,16671903994660564434,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,1174275220095176950,15739714386684471888,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
  2⤵
  PID:6292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6260,i,5402298532422856919,3211593055879129555,262144 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,15363717429634546140,14060923444101406390,524288 --field-trial-handle=2312,i,14359021033871759886,5586718816499542588,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:3648

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3f4a558b-e6bc-4b65-932f-ba6a7015212d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3f4a558b-e6bc-4b65-932f-ba6a7015212d.tmp
Size 28KB
SHA256 a633a3255454ecf356300c656a754fd26ed8e111f0a3a590974fd415bd74aa6e
MD5 32bd3aa69de588110f88ebb56683d472
SHA1 437b33d16ec793906f9a5612f18f92fe4f155f42
SHA512 1e845369a3762b8a923240f40f480c34186a8afbe4ad437e17c58ae42ceba0a158a6cac010f6af9426f0d9611a759cf443da489baf9b717b67fe2a7f292fd064
SSDEEP 384:npiFiZcIz8NLG8TUNTUlIRbPvuTFuAEqfbGGNcA831yHZ2Xd6OObjI9G6w7z78Lp:AFQzQGwghuodGaA8lRd629MM
TLSH
T121D26C32EC64C9B7FDEA4F96A64E3506DEE09223D6DC5AC8EAD95E0C00971ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ed9213056ae74bab1723509a60f5bff2d26eb586bac34d2fd71f1ce6e2853860
MD5 a743c3d6de41ca00ccb2cafd2fb5884f
SHA1 f457b825e75a96a9d306a3be49238c0b20ec0e44
SHA512 7edb56dd603f7d38bf5dc4235910af5ad8db833164905db50591542be6a6f2b5ddc6d59e79a0b535a1ab59473a1802e677bd8870886ae79d59bdbf14a68a774d
TLSH
T1B7D0C2A8A8ECA94ED6E409BE97A5F0100F6402820416DA120160F9C136A52E41BAA020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 d92b7b8b8dad34b7a8db6fcb7dfeaa5b44aa5c910d15af4c57cceeb70a3e0fef
MD5 acc15f33fb405627b718a77db3fe975c
SHA1 d06c5a4dd515298edef836c30e5288e738621896
SHA512 ba4c57be0396d59aa632279c8ed2bae287fa3e1fd167f959fa2fc31bb01cb8481de255eed21a8bad5b33a0bbf6233851476aa95938540a3a3dc6bf5a0c9cdc90
TLSH
T1DBF0F9A6C821BC3729FC1B1960654A47E750132B3B41D84B3B3D921D4FB463B468681C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ddbf5957139c2fcbf8f281cae2b69bc207f2f38003438fae84e4e2446eaef42f
MD5 e44b8e3d8b970ccfcf3b9bb18f364990
SHA1 857684ae637d2968c339c6dfa139087710202df4
SHA512 86817553902b5fd24d75c7bcc90edc4a819f7861d01ae8c26bb3e68a93c752b3355572b134f7454e299bec8d6007dd99dc8f74eda0e44e4767fdd4101f34a2e3
TLSH
T13651C0F7C3E4866ECA1152F0AB147E2FCE1D0555832C3D5AC9E4AE1BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1f28d6aee56b213ca39fad2ee8454cd90d525865fc916623a66470323a93541b
MD5 946f943ae34226270b922add0fb6a073
SHA1 3b3bfcac4b90c7b1bbbdcbf54229d4fbb21f4abe
SHA512 ed76486d068858679febeb8346259196f21cddef8a71ab42848da5dfef2029e9b9690650291680eee83d4fab05d8731c242ab485bdcb534f73cd14d5968cb909
SSDEEP 192:sxRMRLyMqZjK1Ml8wbm/fksZWNRZswzoD8pe5/g6+WNIYcC4CysGQ9uGwIgjQsJ:sxRMIlm/fksZWN/swO/5IW4xsGQ9Gjd
TLSH
T15362C9166A349D3B8CDBD20AFA557F93D6F91173A1505E44AAFC8A0C04E66ED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 73e81f31989d8dda2c5831d2c35792b9b453a9d4119f9dd1571e4ad7e9718192
MD5 0a2eff17b95210f030ee2a2fb41939cb
SHA1 d8502e54927879ad5935b2368ba466ddc6681e1f
SHA512 caa264306bb6eb65a801a0363794a05fdf8c6de8ca64601fa5c8e63e7e1d8d096b27e3632c276c5b9091eda20663e1d33df05b7ced23fbe710cd53ea54fda956
SSDEEP 192:sxRMRLyMqZjK1Ml8UQ1bm/fksJ1NRZswzoD8pe5/g6+WNIYcC4LysGQ9uGwIgDUd:sxRMIqtm/fksJ1N/swO/5IW4OsGQ9GAd
TLSH
T1A962D81A69344D379CDBD20AFA957F93D2F91173A1905E44A6FC8B0C04E66DD2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 80291f4088218b3626882cf4ca01febf08b27668fe5ea39418d48e11efee2a39
MD5 aa2cac2beb000f8173ce5da8703d7f3c
SHA1 08f232f2ec06a42d26654e6118516a3f4b4f86d5
SHA512 c5e1962ee92bfd4b1c5417702dea0768b1d6fffe3dc2cfcf8aa02481558f524968f03c325ec414786be9232c039af99d1b63969d974d197cf74ab351f0fb7120
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9d54:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR1
TLSH
T10DB24D51713F4680387EA90C91B8981E86C2B4A37459E53F7BAC01B65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 9e78623f4af546ff0952797c39cdbbee39075e26c430ebedefe5b752f8e133aa
MD5 db0be1505193cefc92a4d39e6a3b6999
SHA1 36e3f0a086717d59e0a89b7f00a357ddf92b6170
SHA512 9e340c39a723dbd9e7a1be3fa23b185f1691febcbad07b269d992239c6a98a0ff20fa96234db0ccbc98fa45c42836a380939b5e68368f4c64a7de729e83322cb
SSDEEP 384:nfiFiZcId8NLG8TUNTUlIRbPvuTFuAEqfbGGNcA831yHZlkzd6OObjI9G6w7z78d:qFQdQGwghuodGaA8lrd629MM
TLSH
T174D26C32EC64C9B7FCE64F96A64E3906DEE05223D6DC5AC8EAD95E0C00971ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cc730380cd7941715e0fc39decbe9a2f12637d41c7196169b44dbb05cf4cb1fe
MD5 0cf31772c7eb7faa5d52ffd20f12d90b
SHA1 4b38635560c6cdb00eef1e4c5d8f47b77e325c59
SHA512 86c1b86e1e3c5239f2662b6ff41be6898723325446e0ad55d27882994b916d3eff2731eebd3986b5e4bc48dfa12f6720e3543ab27f93be61278f3a2653c645ad
SSDEEP 384:npiF1tNn/s3n9S58NLG8TUNTUlIRNPvuTQuAEqfbGGNcA831yHZ2Xd6OObjI9G68:AF1j+9QQGwgzuNdGaA8lRd629MX
TLSH
T1CDD25B36EC55CEBBEDE64F99B24A3A06DEE0525385DC5AC8EAC95E0C00DB1ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e87a8fe491f03c53887cc9aab2eb4cb39493b9f3fbdc6c1aac9dd7a5f6c28ba9
MD5 6b0beb26f5757eebd60441f6010a8e7b
SHA1 d2f6f12f3f5725c9222ade40c64be8bc8549a81e
SHA512 904b8f531f518f8f8d6d530f50e668468e34aaf7bd178170749a9b3f17354b1c5b3805b5358f549d11d4f9ac053f0d56508472ecccaa3dfb84009b7c1e5b4d7c
SSDEEP 384:nsiFiZcIz8NLG8TUNTUlIRbPvuTFuAEqfbGGNcA831yHZ2Xd6OObjI9G6w7z78Lp:XFQzQGwghuodGaA8lRd629MM
TLSH
T12DD26C32EC64C9B7FDEA4F96A64E3506DEE09223D6DC5AC8EAD95E0C00971ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3fbd82b59003b43999b9ac4c41f872aee759d7954e81404ea8c6fbd1cc90d1f2
MD5 4d523303c109a068ea5166ce959e5226
SHA1 dd012e60b6d66789b8c1b48c9f6c50e56a24df4e
SHA512 a5e5eba701ce26571643f87bbc7f0858de27ac19eb11f355f12bc6c69b57fbab275f45fda4dd186199a7ef1af1a3c98c0f08935dfe212a1af59b8461390ca34e
SSDEEP 384:ngiF1tNn/s3n9Sn8Ngg8TUNTUlIRiPvuTuvREqfbGGNcA831yTLdHOObjI9G6w72:7F1j+9SXgwgUuGqGaA8lYdH29M2
TLSH
T135C24B36EC59CDBBEDE64F99B34E7A46DEE0126385AC59C4EAD95E0C00871ED0703C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download