3ffa1e71f48a1d67c41ff25ffec121d4de204c309f3c05981d21aa8712e9975e

Analysis

max time kernel
150s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
YouAreAnIdiot-UnFlash.html
Size 290KB
Sample260811-bbglesbf43
SHA256 3ffa1e71f48a1d67c41ff25ffec121d4de204c309f3c05981d21aa8712e9975e
MD5 485371df5b6102ed3c4e97cf853fe0b2
SHA1 88664e2788cb561d639c96b86f2d8f1a09bab0c1
SHA512 6fcf32c2b5575448d388ea17b920324b0d342efe37a5d038ef0c65d857cec5c5470c810a4aa53f24b0b3c69ea08b1765234fe8223efb50efe41f90b9ce1a1bfd
SSDEEP 6144:uHUbIC8M7kNUREMP82ZitwKl3p3ZWJ4X4j1crHaoxmyXStnEi1xfNlbIUt9B+B+c:EUbIC8M7+UREMP82ZitwKl3p3ZWJ4X4O
TLSH
T11054F9B1F071E23D015F229AF1B09754D397A29BD64A68E2C13FD6E882D2CD8F6E3055
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1744	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308835175146844"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{08342AF3-3156-41C4-A0D9-F0D387B9ED3D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2060	msedge.exe
2060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5424 wrote to memory of 2580	5424	msedge.exe	88
PID 5424 wrote to memory of 1744	5424	msedge.exe	89
PID 5424 wrote to memory of 4572	5424	msedge.exe	90
PID 5424 wrote to memory of 4880	5424	msedge.exe	91
PID 5424 wrote to memory of 4572	5424	msedge.exe	90
PID 5424 wrote to memory of 4572	5424	msedge.exe	90
PID 5424 wrote to memory of 4880	5424	msedge.exe	91
PID 5424 wrote to memory of 3512	5424	msedge.exe	92
PID 5424 wrote to memory of 3512	5424	msedge.exe	92
PID 5424 wrote to memory of 3512	5424	msedge.exe	92
PID 5424 wrote to memory of 2616	5424	msedge.exe	93
PID 5424 wrote to memory of 2616	5424	msedge.exe	93
PID 5424 wrote to memory of 2616	5424	msedge.exe	93
PID 5424 wrote to memory of 3140	5424	msedge.exe	96
PID 5424 wrote to memory of 5220	5424	msedge.exe	95
PID 5424 wrote to memory of 3140	5424	msedge.exe	96
PID 5424 wrote to memory of 3140	5424	msedge.exe	96
PID 5424 wrote to memory of 5220	5424	msedge.exe	95
PID 5424 wrote to memory of 5220	5424	msedge.exe	95
PID 5424 wrote to memory of 3716	5424	msedge.exe	98
PID 5424 wrote to memory of 3716	5424	msedge.exe	98
PID 5424 wrote to memory of 6056	5424	msedge.exe	99
PID 5424 wrote to memory of 6056	5424	msedge.exe	99
PID 5424 wrote to memory of 1712	5424	msedge.exe	101
PID 5424 wrote to memory of 5248	5424	msedge.exe	105
PID 5424 wrote to memory of 4168	5424	msedge.exe	106
PID 5424 wrote to memory of 824	5424	msedge.exe	107
PID 5424 wrote to memory of 620	5424	msedge.exe	108
PID 5424 wrote to memory of 620	5424	msedge.exe	108
PID 5424 wrote to memory of 2060	5424	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\YouAreAnIdiot-UnFlash.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffa71adc188,0x7ffa71adc194,0x7ffa71adc1a0
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,9616451888552105175,4819457418787651675,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1395742318838944166,3476244693678657042,262144 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,14576786648942614131,8477265343705864944,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:13
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,16809483534794257651,1530867591860325972,2097152 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,18277030752127713947,7664493487762185393,2097152 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4456,i,9500853499684272450,16112388982495648193,2097152 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4468,i,5295281232198233186,3858887636749694491,2097152 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:9
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,7948690611223892141,16167816490807449345,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,3210516284051846262,16000124103256966218,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,6918227591203060764,12692631297593087276,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,6918227591203060764,12692631297593087276,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,2115286101683826100,7653806710170884330,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,6200662100533226483,4118539250657126797,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,14614427002844142099,7267493142000224095,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,15758911938603753715,8944243294095594125,524288 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4144,i,16118829315055225056,7330488595343129957,262144 --field-trial-handle=2496,i,3832760005806342696,1033854037465112249,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0f3b2380250a20a0c6dfe1a9f67a3e453c5721c5e60544c89c7f6627a6e6386c
MD5 93a0aec7c6c233d1ba37afdb9c2c5767
SHA1 daf7c42e3b4ae51a288cda69c3ecc8f590e3f02b
SHA512 e80e306fe299ab04480f46004debc6f43a0cf0114b5e728bb41cc28d0c1d85d81f5cf6353240c1ffccbf264e83e8312c4fb8acdafb039b0307eb8e574176eb4f
TLSH
T1D551735213610BD2EFA8CC71FBF2E05D36F5989D470F5F1098B65D395A82F0499E1823
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3f5c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3f5c.TMP
Size 2KB
SHA256 275e8512df0a140fb89c86bb5e77bb8741fb067dba3c8ba05385c03bf2ffe98a
MD5 e03966e8990327fdf5b893b88017da24
SHA1 cf58ba62b97ab52e9917caa4d26c87f6d10acc91
SHA512 a9b6ff2b14fcf6a3008b4a759bb8893615930d858bc955413366ca52b15d54c3925425f1c5dcec63a4b30626d5b86211754dd687438fd5e2deae4662f762ab15
TLSH
T17B51835213610BC2EFA8CC71FBF1E05D36F2989D070F5F0098B25D385A82F0499E1823
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8893d40c-5433-496f-843a-a9852702e6cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8893d40c-5433-496f-843a-a9852702e6cb.tmp
Size 2KB
SHA256 f4fb19b3c7cfb480149702a10d48d06d13ea14004a85d609c7db6b6b9fdf0cef
MD5 5ce71594bd6043b61cf003d06196834c
SHA1 13546162fbac1aad9d54c9e92e21f11a7da95c99
SHA512 131aa25475775856484f3bc42c032d609db524b53c23b5bf1e38ef5f48737125e5b1557c8df7c4091fd335b691dc7e6c2f7f179d6da777d9fc03de431edb9cf8
TLSH
T17D516DF783B4467E8A0156F0AA14AE1FCE6D0516432C7C6989F4AE1793E3471E14179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 efed77ec706eefaaa18b843500a078cf7c14bb5150c84a87186cc0eefffe4767
MD5 510f873ced83cf2045d86c42ae114e0b
SHA1 26e5b062e80d541b74a8aca9e300cb70918d6132
SHA512 e0e949dd3072ee643582540b192d7ec8e2153fce4734724bd52d6dc0c8c07f2265a3449d1094431c6a473e696bfee0dba24d12404a32ddbb755220a4eaa00c04
SSDEEP 192:sxRqR+bU/frs4f79W3At1zoA8p4L/g6+WNIYZFLK/VGzIgD1J:sxRqCU/frs4f79WP6/5ISfb
TLSH
T16E42C7166928A93B5CCBE21DBB65BF53D6FD5032A1902E58A7FC9A0C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a8f73dfa6db863c6a06421cbdde5300b5ae3a8fcbd8458fb288d269c39a876db
MD5 e8e9d9daad7c7e736a0df630b509593d
SHA1 36ee274ed9460613f05ef306f8788b9d2514b11c
SHA512 fd3ce317a5518d9b3b1ec7b128c058e6d49e692ba84712bcafc571eeb433bf4610497e99d7c09963f3f6d48c9ea41251b449247844268b45a5395131dee46ab4
SSDEEP 192:sxRqR+bU/frs4f79N3At1zoA8p4L/g6+WNIYZFLvvbVGzIgD7J:sxRqCU/frs4f79NP6/5IS0J
TLSH
T13642B7166928993B9CCBE21DBB65BF53E2F95032A1901F58A7FCDA1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 276e6d81ee4698cfccd2be9bdabe2de80ca20a9e51d2fd91ed68c718d36a11ac
MD5 b75e4c2dc3022aadfc3679a2e96b9a06
SHA1 52698b2f9828d7dddbdc109ee958e25f0544c80d
SHA512 a448b12a33ff6293136ff975d072b777273e7656c12e4291c93ef33801ce2de35b9faa43817effad5691e9f3ff1c68914ade6597b8037f95347690ecc6b7cc00
SSDEEP 192:sxRVR+bU/frs279W3At1zoA8p4L/g6+WNIYZFLKmVGzIgIJ:sxRVCU/frs279WP6/5ISas
TLSH
T1B132C7166928A93B5CCBE31DBB65BF53D6F95032A1902E58A6FC9A0C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8d82e6edd2f3f05ff570a530b232b83679a64e7d275b45129262686ec24912f9
MD5 42c101b81c209437a04fa431d3c2dd06
SHA1 4c6ed67d7eb0fbebe1cdd76308d86abfd7e196dd
SHA512 0bed01815b586db08002c92edffab47b0da94d98912ef16f59f252621515dbec2f67536a5ef72e4c870274b8f3968f199dfb7e849a9d39635b91697878f2c801
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGIrocmQ:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VO
TLSH
T1AEB2CA3B640DCB7E5F800A9DAC196FD77DA802C796588D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0990ba44f84297ab6d2addcadb9389f33b87185bbf04a65671d2453f78e70924
MD5 e4e1ff6c4113ad04f35d7043ed79f358
SHA1 e8c291418adf31292dfb6d46238921c6d289ca33
SHA512 df7793437c3793949d047add3e5a91997e231b9fe1d2960916a9808bb4708031b8c8cd1245d7bc9a671fc79f2760c0d98c5834562ea9454859b167be192896dd
SSDEEP 768:7Q3+kus+LeSFOUpJZNX4fouOToPvB2thtA9VAghojKgqmUA:7Q3+zdsnnwthttMfgRUA
TLSH
T12FF2C07198A49973DDE9E3C8720E32536FF08123E5D01FD46AED6B1D0647A9E470BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 07977c0aabefe9e13f8dd498174781d3c240e4ec25ac627cbd30a65949abccc6
MD5 7c835f9d6da632e3128ad9bbd87be9ff
SHA1 33d3d543d3fc2b7056bce9a54025a87b88fbe580
SHA512 4f4e079fca695458dc8ad5558545d8e24376da9ec6c767d8519e5ad2b8381602d0527ddbba8d52d3db44d87286dd114772318660d32daf1241dd8d14f383b60a
SSDEEP 768:sH3DkAs+LeSFOUpJZ6X4fouOToPvB2thtA9VAghojKgqmUA:sH3D7AsnnwthttMfgRUA
TLSH
T14CF2C07198A59973CCE5E3D8720A32536FF08123E5D01FD4AAED6B1D0647A9E470FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c5ff75f0a47ce4b85d53c983f3750efced8d131462e5f148bbd3595b16664622
MD5 4065848554d1744030e374f5fdefabd8
SHA1 115b6ead0bac592e447813e27622cd29185d33e3
SHA512 9614f4dda4b91d17592a873e1f81aaea838491155a75a384bb0efcb974b9841e43bc3ec745fe60519f144b6ac4c6a3bce9aeaf8e9b6ebd9f94b037b06218c7a5
SSDEEP 768:PQ3akAs+LeSFOUpJZCX4fouOToPvB2thtA9VAghojKgqmUA:PQ3a7osnnwthttMfgRUA
TLSH
T1CBF2C07198A49973DDE5E3D8320A32536FF08123E5D01FD4AAED6B1D0647A9E470FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 55de84737f21292bc19d874810d622501180775d3c938cf0ad10b62cb8c7b13f
MD5 a3b45ac226b7d4d91f85fef6d6299725
SHA1 ad6787de6b5f3025feadda3b811b9d122b30544d
SHA512 21b23e85bf6a220ce5746da6983b5289c9dca2c7ce9e6baf7a4e1de53973d8fb73c01097c9bc052da8067e898b12c1eed93f0c42fe3ec54b69ea7b130170f484
SSDEEP 768:dQ3DkAs+LeSFOUpJZCX4fouOToPvB2thtA9VAghojKgqmUA:dQ3D7osnnwthttMfgRUA
TLSH
T12BF2C07198A49973CDE5E3D8320A32536FF08123E5D01FD4AAED6B1D0647A9E470FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c7d1c6fce5153228342335f3ba1ff80cfb961171e6323ffdc2e1a42bea0e5549
MD5 e60178ce225691a868732f9f6e013641
SHA1 c1fbe6853af7303a14706405c5a706d3d046b6f1
SHA512 63f799c9901a830e3386fddaad2305e472977064be4adcc753f89e3fa0e81bf0694431d7997d052580a14f420b2e39a1f03865f3df6c99559790ab58096cc4d5
SSDEEP 768:orv+4UNbdH3y6+LeSFOUpJZlX4fouOToPvB2thtA9VABheVH1SlX:obsbh3iVsnnwthtt3EH1Y
TLSH
T1F403BE32A4A88933DDE6D398710B72536FF4816396C00FD49ADD2B4D069B9DE470FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b169580cce024d4b004cb2f50358f6f4cc991cfd694e6b516d4b7a3ba7b48878
MD5 18ad6781dbbbc162768c023147e6d7ed
SHA1 d82818a658dcfa2e23759f0629e24a62e60aea75
SHA512 8f57f0f71b6daa9929548abdbee89b987e37645df7096029a5940eb30a9a0a421d04fc2a91a84ff5ef3bbf8a2202caa8605232490e72d9967221e3f8369ea4a8
SSDEEP 768:grv+4UNbdH3md+LeSFOUp4X4fouOToPvB2thtA9VAwheVH1SlX:gbsbh3+snnwthttMEH1Y
TLSH
T10003CF32A8A88933DDE6D388720B72573FF4816396D00FC499DD1B4D069B9DE470BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download