ee278c85f5a8f5e223abafca5bd48cea4ff53e8e4d3818c6af931b4767cf8de9

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vv/home/index.html
Size 4KB
Sample260809-wvrkystbme
SHA256 ee278c85f5a8f5e223abafca5bd48cea4ff53e8e4d3818c6af931b4767cf8de9
MD5 52c20a3402f23119ed6103485801b4dd
SHA1 b9403bb8116b2b112033a2b5213a13ffe8a2d8e9
SHA512 7abd7475e38f760cfa4cd6a805a15bb184a31b18b911dc0c6eb16fa106e6e84b3ecc18a169330796d576c95f167f8f2044527ebab57786bf1adec6a610c50d0c
SSDEEP 96:iJVhuQFs7tO3ESVsUaF7to2AlSp6d7KdOShNUHF:iJVhFItO3ESV/aF7to2MSp6d7KlhSl
TLSH
T17991FF217D9DD0BB003382CB0136EB18D46FED75EA23D815F6F807771BD0E18A882166
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3236	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307729200548984"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{32CE76C2-1AA4-4109-8273-912B49CBF4CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 8 wrote to memory of 5476	8	msedge.exe	89
PID 8 wrote to memory of 3236	8	msedge.exe	90
PID 8 wrote to memory of 6084	8	msedge.exe	91
PID 8 wrote to memory of 6084	8	msedge.exe	91
PID 8 wrote to memory of 3592	8	msedge.exe	92
PID 8 wrote to memory of 6084	8	msedge.exe	91
PID 8 wrote to memory of 3592	8	msedge.exe	92
PID 8 wrote to memory of 5304	8	msedge.exe	93
PID 8 wrote to memory of 4832	8	msedge.exe	94
PID 8 wrote to memory of 5304	8	msedge.exe	93
PID 8 wrote to memory of 5304	8	msedge.exe	93
PID 8 wrote to memory of 4832	8	msedge.exe	94
PID 8 wrote to memory of 4832	8	msedge.exe	94
PID 8 wrote to memory of 1872	8	msedge.exe	95
PID 8 wrote to memory of 1872	8	msedge.exe	95
PID 8 wrote to memory of 1872	8	msedge.exe	95
PID 8 wrote to memory of 716	8	msedge.exe	96
PID 8 wrote to memory of 716	8	msedge.exe	96
PID 8 wrote to memory of 716	8	msedge.exe	96
PID 8 wrote to memory of 2344	8	msedge.exe	99
PID 8 wrote to memory of 2344	8	msedge.exe	99
PID 8 wrote to memory of 1544	8	msedge.exe	100
PID 8 wrote to memory of 1544	8	msedge.exe	100
PID 8 wrote to memory of 6020	8	msedge.exe	102
PID 8 wrote to memory of 6000	8	msedge.exe	106
PID 8 wrote to memory of 4340	8	msedge.exe	107
PID 8 wrote to memory of 3344	8	msedge.exe	108
PID 8 wrote to memory of 1496	8	msedge.exe	109
PID 8 wrote to memory of 1496	8	msedge.exe	109
PID 8 wrote to memory of 3408	8	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vv\home\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ffa51c5c188,0x7ffa51c5c194,0x7ffa51c5c1a0
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,16407283664013308673,8874453919934910637,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,15672782145943131911,7073915628981076612,262144 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:2
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,15624197226649851338,2964445786930017153,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:13
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,3735862382367262809,16396161143664876890,2097152 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,5106856027413665343,2518359147791385681,2097152 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,16469213079927212026,7426881280420654614,2097152 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,12170089618127700446,2404165909734574256,2097152 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,5313948958893095388,2199841181407609149,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,9012379418692276956,16197538725310710340,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,5061397228614867048,13175005379094243159,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,5061397228614867048,13175005379094243159,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,17798158141826979427,250350057738509766,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,17591960316635964085,13722726271837152060,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,14844753505380197999,13485005677300926360,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2700,i,2817466806696792734,2508147337482276273,524288 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:14
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5388,i,15790192850004996186,15863229182576709456,262144 --field-trial-handle=2792,i,12773691808136984465,5180202633833984102,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 16f7f78d6683e434275e83a0ce018f6444f9491820f4b18a5bdceb56d591142b
MD5 1f7d971c9a63ed54646c4ddaa3d1bcf0
SHA1 bb7ff4fd571eb3c2712cd02badefd4160cad9788
SHA512 8f0091f533dd25143e9ed1f66e9008cd850295c5b20e3426883568441ebf2d7e98de504f2e0cf1dfee3d1110ef441a35479292716953c50bbc76a5af88d3faec
TLSH
T12851A684176D16FAEB24C4BB6AD9B8DB76F48C697E0B6FF110906DB00443F1829E3217
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598591.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598591.TMP
Size 2KB
SHA256 7bd6bdf22ceae4f9a28a9a35f580510927ef02605e9df9ebaedcd9c121af7415
MD5 922c98d61df8f5ab454c1b0fb9123aec
SHA1 ade008379166b8f02a872905ab614161d44e3d23
SHA512 416ebbfd8d7333370aafd06cb23c9eb9d536134efc6de9f9f74fed30be0d1d5f46b687f52435b369b02e93dc0799c317b7f6867cb7df41d29618b96200b9c6bc
TLSH
T19F519794176D16FAEB24C4BB5AD9B9DB75F48C697E0B6FF110802DB00443F1829E3217
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0fb728de0ce9ec52bd9cd8c8a13d5fdb88962cd04fbd0e42363c0abce1246376
MD5 c53772926ecce81f888a7a6d341ff74c
SHA1 75646e2c17cb99497fe7cc90cf2a0790510ab537
SHA512 da8f35dd5728ba9cf6b141bfec5bd7058441a52ce5565b38f6884caa55a6a4e831a25fd37f12663e0e01fcff5d80ddf161c726b04d77168777357b2a87be07b9
TLSH
T145319EF783F4856E8A1196F0AA14AE1FCE2D0511431C7C69C5E4AE2793F3472E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6dfeef2aeeabea17327651a28dd008fef23d0772948c6a820ed497a27b88df87
MD5 f0c46267da737388dd06041eec4f52ff
SHA1 c81d5ea0d7d3bb91859f1d56ef1c716c6c4fcefb
SHA512 5f6fcee450373995b19a320494a09041af9323b9759719522bb2ab0d6571c5671d719b3d0c259cb1b219bfbc38b6a327e0f80200b0436f65f3e2207a4305a295
SSDEEP 192:sxR7RbbL/f3sObYCbGzoA8p4Pl/g6+WNIYEZ33KjGWXIgDkOJ:sxR7tL/f3sObP7Y/5ItK3Ya
TLSH
T19A42C8166928A93B9CCBE21DBA55BF53D6F95032A0D05E48B7FC971C04E76CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9f6cf3990889e5f546125dd20fe1b48844f59a819f527910fd50e45eb8212bd3
MD5 025cf8f941ff22c710bab1fc9f246507
SHA1 c63e73cae0302a91de4de995c9669c13de2d7d35
SHA512 7e75208558c5f6479cc581adb963fcb825c7a57b5b8e129cf95e68f5f86c03e6305d500cd3a9504d9feb65c2a8229592f3f314803fa1e1b7e4f8b33a7953da0c
SSDEEP 192:sxR7RbbL/f3sOrYCbGzoA8p4Pl/g6+WNIYEgv3KjGWXIgDksJ:sxR7tL/f3sOrP7Y/5ImK3YQ
TLSH
T1C032D8166D28A93B5CCBD21DBA65BF53D6F91032A0D05E48B6FC971C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 24b391d7bb407e735a2054ad6e52a2f0107b3b2b8a23e7565fe662759c4aad20
MD5 c71455a783098e56cff1e9f8a8621e73
SHA1 c9c26bb8644e8977b0c5194a5cf6ce328ccc59d9
SHA512 472133c6971e1ecf5fe462927b3c98d9e4256c22bf9d21f7d0e53653437c086db18bfe29354af9a98e0006f7b5d0cb4606465bd8bad39ec14044c98ced46db87
SSDEEP 192:sxRMRbbL/f3svrYCbGzoA8p4Pl/g6+WNIYEgv3KjGWXIgIJ:sxRMtL/f3svrP7Y/5ImK3s
TLSH
T10432C8166D28A93B9CCBE21DFA65BF53D6F95032A0D05E48B6FC971C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 87c3e273201c32cd625f95aca683d9e449ef4dfb9169d6e207a40ca39fac9c99
MD5 8afd71b1ae90791fbd10be84ad2d87af
SHA1 61b73f381a5157f34b1cfd41377abf29529b3ea5
SHA512 7d8177c9d2dc781876b67a1942bd7fc8a1577d529e81e6975ec6574999f802a9a2be9a21fad5f8eb60f0390f088d26fa80d2af1ab8d71cc880f10cbda2027f17
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVJ:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo8
TLSH
T1A3B2DA2F640DCB7F5F804A9DAC19AFD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f5b97d8ce0c8c1d1f0e962ade38dccdf7ebc061b4042ee26268ebd79e8ad4ac7
MD5 93fc4123c39a7ae128066a29088fee02
SHA1 2b1b4e73840e46085ffdf79079e6cc2d5565658e
SHA512 4fbc4578e500802dfb7a0eab4e720165014aa5e9416cddeb979a3dea4f77433eabf153fb5ffec31d76ca9f41229a1be23a798e1f845af509bb711ef77a9b713d
SSDEEP 96:KRT8ZNbRRtWFKAg1tK4MgbtcjbylxWHm7KmgIIOW4tVgGOKM4NMoK2i8Km3n0Q8A:CT8ZNbRRIFKR1nMgbCjbylxWHm7KmgIT
TLSH
T11791F19170BA42803D3FA60D85F9D95FC28178E33038A46B7BA851E94F66E015EFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5c73acbb-5013-4229-b5a3-c0e8957b47d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5c73acbb-5013-4229-b5a3-c0e8957b47d5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 acfed575c43d637ee9a12b602b1c7b4aa52577c2621840e8df7228379cb39fae
MD5 3847c48b77dabe10fd576588fab3caef
SHA1 0abed165f34c6a57f51879a3e2da5b85daa8e200
SHA512 fb61b31b307e1519d3a2347987d4ea22ca92997c63cef4fbbaec18d961b5afaf9e3819f7ac47c5262bafdd271c9145b7265df18c52a7ce8cd87598f8fd1eb156
SSDEEP 768:Ge3L4mS+DTd+Zr1faeX6+qTko0u229a4vsTg2ewBKZOLY:Ge3cDLvVTVKa4d2evZaY
TLSH
T1F8F2CF31F8259CB78CEAE785B10772475EB911B3D6C81BA49AEEBB1C015716C170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 632af47f8a915d0b6c70f107ce3bebe891e2154d25cfa7ccc0afa7d0cb90221a
MD5 01267c8482478cea3fad86b1a7a416ec
SHA1 7fab9bd86d3be3dd157d5c8f24f243853d0e7e28
SHA512 22ec01b891c603ff4de54e2c6b88f23fe23a83d01b53a2cee0150572852c6364e03fdcfe568a571f7c82ea3e3c8c00bd9900d5790ba234b9eacfc4dbee7761cf
SSDEEP 768:Te304mI+DTd+Zr1faeX6+qTko0u229a4vsTg2ewBKZOLY:Te3XLvvVTVKa4d2evZaY
TLSH
T1F0F2CF31F8259C778CEAE685B10736475EB911B3D6C81BA49AEEBB1C015716C270BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d5602f967c188a7d40f64442fde35c9f27ee7e297f979c6544aebe701fd63307
MD5 ba4b97d456ad075c5d11aa6d4ab26271
SHA1 a0f251021408a98057b21ab9daed7e1f12a9a46e
SHA512 055ee36dee3d2f216a40603a72539023541359009a68bd9e6b89805ecf884902132e23a0f14fed4cc2f1397c9aec588db6a06f270bef02926920547cdf057597
SSDEEP 768:ZFQo3awgb4mI+DTd+Zr1fSeX6+qTko0u229a4vsTg2ewBKZOLY:Yo3lL/vVTVKa4d2evZaY
TLSH
T16C03BF32E854DD7B8DEADB85F21732079EF501B3D6C86AA4A6DEBE1C111719C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 477f69a4e57dca3c802da453429f1619f124805386c0c0ef1e6a572332a2fb5f
MD5 19eda897808e6765a5d0226c40054135
SHA1 2f266e540e32e05826667a4a80783f1b832d392d
SHA512 0bbc07fd63e958cd7106ac299941378af227805398a37e34b75d9865ed49f30ad592b0eead6de2f68945a96ca5e4ed9d0035c4d031a157a23ab6ecd7b94cc700
SSDEEP 768:prv+4UNbdG3ycYDTd+ZrIeX6+qTko0u229a4vsDueVH1SdW:pbsbU3HbvVTVKa4/EH1h
TLSH
T18C03CF32E8A589778CE6D789714B75472FB91173CB880B90D8ED6F4D064B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 c5c0d154d86173c6700170468ddd2d2bc11357b4ebd32bdeb1cbab4fa0b14aa7
MD5 a5317d2e592bc696c8f78774c5e550d6
SHA1 09cb73e156c5e2fc20b6c946e2cf09033448942d
SHA512 b9ab1558ace300086cb9432c20a7eaa493ac2ec84f35d2872dd3f73cac8cd3561615742ae443aa239dc168ec29b6900e9edf4faa43f53a08ce64131d17e97a6d
SSDEEP 768:hrv+4UNbdG3ol8DTd+Zr1fkeX6+qTko0u229a4vsSgeVH1SdW:hbsbU3qxvVTVKa4WEH1h
TLSH
T17003BE32E4649A778DE69685B14775472FB91163C7880B90D8DEAF4D064B0AC230FD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download