2feabe91feba42214891dbfd04cde4970c200e27c65d7e0b682e70c7e9d007f7

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 18:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fabvision.com.au/cp_errordocument.html
Size 10KB
Sample260813-wxbbracf86
SHA256 2feabe91feba42214891dbfd04cde4970c200e27c65d7e0b682e70c7e9d007f7
MD5 c98a0329551354fbef1e6202681d570d
SHA1 574599da747937e3015316c0073732a626d2cd63
SHA512 9877ff50956b470fb426ae75dabdd502c7d3f283f39e3eff9cd7fc6d6a8b2e05488a02c4d00064e0c282c5d54ba7068f3b1760c70db51d7e596c4253344544e4
SSDEEP 192:93lYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93A:vVGaRF8I8UB3
TLSH
T18222735737E3001F744361B567BE2601BA29A943D22FCD603E4EF2A5DF869818D9374E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3380	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311194646640807"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{0D7A96ED-5C46-46C0-84BB-70C695122B40}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3860 wrote to memory of 4092	3860	msedge.exe	89
PID 3860 wrote to memory of 3380	3860	msedge.exe	90
PID 3860 wrote to memory of 4632	3860	msedge.exe	91
PID 3860 wrote to memory of 4632	3860	msedge.exe	91
PID 3860 wrote to memory of 4632	3860	msedge.exe	91
PID 3860 wrote to memory of 5940	3860	msedge.exe	92
PID 3860 wrote to memory of 5940	3860	msedge.exe	92
PID 3860 wrote to memory of 1412	3860	msedge.exe	94
PID 3860 wrote to memory of 1412	3860	msedge.exe	94
PID 3860 wrote to memory of 1412	3860	msedge.exe	94
PID 3860 wrote to memory of 5224	3860	msedge.exe	95
PID 3860 wrote to memory of 5224	3860	msedge.exe	95
PID 3860 wrote to memory of 5224	3860	msedge.exe	95
PID 3860 wrote to memory of 5604	3860	msedge.exe	96
PID 3860 wrote to memory of 5604	3860	msedge.exe	96
PID 3860 wrote to memory of 5604	3860	msedge.exe	96
PID 3860 wrote to memory of 3012	3860	msedge.exe	97
PID 3860 wrote to memory of 3012	3860	msedge.exe	97
PID 3860 wrote to memory of 3012	3860	msedge.exe	97
PID 3860 wrote to memory of 2676	3860	msedge.exe	99
PID 3860 wrote to memory of 2676	3860	msedge.exe	99
PID 3860 wrote to memory of 2124	3860	msedge.exe	100
PID 3860 wrote to memory of 2124	3860	msedge.exe	100
PID 3860 wrote to memory of 4988	3860	msedge.exe	102
PID 3860 wrote to memory of 3464	3860	msedge.exe	106
PID 3860 wrote to memory of 5036	3860	msedge.exe	107
PID 3860 wrote to memory of 5080	3860	msedge.exe	108
PID 3860 wrote to memory of 5112	3860	msedge.exe	109
PID 3860 wrote to memory of 5112	3860	msedge.exe	109
PID 3860 wrote to memory of 3524	3860	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fabvision.com.au\cp_errordocument.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x274,0x7ff8be49c188,0x7ff8be49c194,0x7ff8be49c1a0
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,4972602511877289199,4972786263521779613,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,17847619757500087905,14017655305980082439,262144 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,6588103613825225145,14895027949894108512,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:13
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,13684486600434656056,17888043029790149926,2097152 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,13672906680446444151,4335876592728398858,2097152 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,9317755548052704802,4911436497748057180,2097152 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:9
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,2675994980442772254,11227473116706145070,2097152 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,8222228852156791005,10026597920072608041,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,15596032100415345775,5193707282123130011,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,8289456437370835373,16692747872116302680,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,8289456437370835373,16692747872116302680,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,13918786661757832803,11977873452170973017,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:14
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,16770249751914041606,8543976629173714937,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,15124113823271903111,16404816859544698708,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:14
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,11798098705100303704,1732547455197650536,524288 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5864,i,13895452590223851766,16594004094457503865,262144 --field-trial-handle=2692,i,8629485870864098074,11189259741296281552,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3524

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 36890de904fffa833b7c41c4c98c621e5ce468f0abe43662253218e8389cfd7e
MD5 1ef0dda7997d3355a7c0e3f93fa53463
SHA1 090523ebe7e77191343fafbe735b6557b41e3300
SHA512 27551afb8591e0df5b7068b6e3b94aba9f1d422256b0f4155cd90dcecbb94a3690f38e28f3b5774e0faa8866d4f9344c5990ae13bd411f779524c23d0b4f16b3
TLSH
T1A9613C18B31AD9F3FB25C9BA68E0D0D97BF064D4058B1A21F4703FB82816F6410E07A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b05b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b05b.TMP
Size 3KB
SHA256 f0cdb12a8fa26877223ee45ee468fa87436e4dbdf8afbd4ac576d7f716c6b3f7
MD5 d0b700715ac9f959da63ce68128bcfb4
SHA1 64c39295756a8e17d9e9378c2e5d3acdce208dd9
SHA512 de97b0156d88bf27f5dc40a918a740a58f01bafc272f20e2aeab6a54742febb6df5ac9da5751a29e8e4f75a4cbf91aa0744d32dc178da537c9d3a17e18c87c98
TLSH
T1BE613C18B31AD9F3FB25C9BA68E0D0D97BF064D5018B1A21F4743FB86816F6410E07A7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5310829d09268f19e3dbf3bc9cbb0a02ec80c2609c699e96da7349a26cc27650
MD5 0258fc612fb3f5b9afce66b4bb89c5e2
SHA1 7ba4c7c786836f04d55cb08de87049c4a4147c71
SHA512 9da9a4bb3285a292822713730e8122e8eec6496808a4735317a335cb9f9b284c3aa052fae503fd40a2afca5bd87f83c4eaaff66fcb0f9802abc4edc27c15d171
TLSH
T188319EF783F4956E8A0196F0AA14AE2FCE2C0511431C7C6AC9E0AE2793E3462E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 76b4a4fad1a0bbc6e24e08482bf0ecedb49b08945e3a1f8ffd02282847d623ed
MD5 63d9321cd8531d831d251af41f879941
SHA1 9c36f1480392613b3cddafc0cf93792320f5addd
SHA512 e32090ed745019145a5f9c52beb9361c42337ef31938e93016db2b8b67e36d7089751a94ed5a1444c060a344614904885685a5db2916f5aaf065c69470e3d490
SSDEEP 192:sxR4RuNbU/fbs9kHHm2Sm7aZ8zoD8p45/g6+WNIY3B2yYGdIgIJ:sxR4s1U/fbs9kH2wg/5IATs
TLSH
T11532A8156E28AD7B8CCBE219BB657F53D6F9503261D12E48BBFC960C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4d1192e63ee7e07c04e9f7f96e047c151ccfd506d331be4412425154d8086ae6
MD5 b4eed86af3f7503968cbccb6eda98060
SHA1 88c3516b4b7f5762d8a91f9f8d488dda13ffc941
SHA512 def7a1bd64235eb03b729b799d66cd887b9c5da75470d2d3e00e4331a71bad24146851c395efdb813ec2216cadc0cc5af686a459175db74995010d69cb3b5951
SSDEEP 192:sxRTRuNbU/fbschkHHm2Sm7aZ8zoD8p45/g6+WNIY3B2yYGdIgDPJ:sxRTs1U/fbschkH2wg/5IATF
TLSH
T13832C8156E28AD7B8CCBE219FB657F53E6F9503261D11E48ABFC960C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f545ff45e440576be536edec80557d525ae6fa58388f6e8da653de2d34941a43
MD5 25e46aea3270f420ace3f5d0978d3b17
SHA1 0cddb670f6c79f8fef9581f0ca819eea46e8a69a
SHA512 f42ae2d172b5f6546a242ddf8681069c0ae2f088bd3138eda6bc7b969d185bab96d0c2fdaddb7087c361c8ba8896babcba2893f3be648e491660482e13c3c38b
SSDEEP 192:sxRTRuNbU/fbschCJHHm2Sm7aZ8zoD8p45/g6+WNIY328YGdIgDxJ:sxRTs1U/fbschCJH2wg/5Ie/
TLSH
T18E42C8156D28AD7B8CCBE219FB657F53E3F9507260D12E48ABFC960C05EA6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f01648563e6170ade2ca2c496dad9b4f2a5a8a72fc5cde86b54431b0571e37b0
MD5 1409d3e4edd8d53e469c88d512ba9205
SHA1 40e56a9f56a0d0caa25edf6ed8a29583c9b6ff89
SHA512 510acd0c4fc9abbb96d87d4217b3787cf548668f75b83a8aaaa6ebc575a3d75a1ae1f9e7a4a15302b85f3f413439a495ed8d55a956c253fd9f922a0e09719648
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTmroOLz:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0VN
TLSH
T147B2DA2B600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e0a5e647bef98ef48c1e4981fdce15281a2c7a6bf2c1d48986021b6c5f10a169
MD5 511bf26923f513865184bffc89a70ed2
SHA1 cc4bf55cb6d5c55aadd1c6a3f305009a76f00be9
SHA512 40c9bd8f121160a10609da6c2f8ecbba68a5bbb22f0327d9a74ce936eac647d0b44995bae3386e0b0241304d34a7b5bf65ea3a241ba4825521bd6d03e6544a69
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsH3gPr31lpWRekgJpK4ggHpcvHG5FaHzc53:C1i7PF/DWrwfX9mgpct1o7zsH3gPr31j
TLSH
T1EC914146313B02503C3DAD4CD6B9D85A92C2B8633059A52F3BE955A30F6AE039CFE5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a5c62132-7937-4d93-9121-e1dfb453e42d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a5c62132-7937-4d93-9121-e1dfb453e42d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 35f6f841e6314b1788fc2c50037d84966c93599f8f7134eeca8b01db518e444f
MD5 e6447f4ab6322eaa819f26c73f6e25e8
SHA1 c9bd9db6e91ced40fe72344f961770cc30808699
SHA512 be97614b719cd0cec89f4c650b8ef4fde7333049be881a9d9d3273d5cb3fa1bb98d0204638b6d53650cbcabf05bfbf799a2fe8d07d3088089286727c8e1ed6de
SSDEEP 768:IFQK3DwgcVc+wfZOOfffff8vShCQRanlv:rK3qwf9fnfkvSGnlv
TLSH
T182F2AE72DC649A779DE69788B74A3B12BEE55173C8C49B48DBCD9E0C018329E170BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 e336dbb9a6b0f390efad71e46b9dd6898e0934fc46c56bb92d0b0bacbb7de5ba
MD5 8117f54fdba6c31912b93130c8465a35
SHA1 894af3f41a8bc0c4cad5157e2fd281877fd83d55
SHA512 673a8f0b586be149fcd4548c1c3d1d7e810a5d86d36169ca9a7a4c0200a0b24a54e4f4a148c5f4e3c4b868819c76acb6d0db361d319b8ba3d947295688c2a4d6
SSDEEP 384:CZcI+38NYXvzz8Fh3wcHGfd+UJfRXOVyS5cffX8tgffXT+E9vShCiDBTayppFJlA:w+34Vc+wfZOOfffffvvShCQRanlv
TLSH
T13CE2AE71EC756D738DE6A248B7467B52BEA56133C8C84B48DEDD9B0C028379E170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 084b8d9f66a43f15a3f9bf30e42c38046badd8bc4a4a917b0e8179f792a1bbd9
MD5 e8863e261847f0439b413abf044f6cf3
SHA1 dcffbae7573729d7d27513a3fdf612cb65c3e21b
SHA512 4579afd1647e4b439072821060217f4730a45f5e8915d737d3c1e0b059c455701c8a2dfee41007f739ed74c31a050e528bd0134c7a539b61cebba0c871583cec
SSDEEP 768:drv+4UNbdV3LVc+wfZOOfffffpvShCQRanl3:dbsb73jwf9fnfRvSGnl3
TLSH
T1DF03BF71E878AD738DE29248B24A7B537EA86163C8C54B54DED95B0C02836DE270FC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 bb59805c9d111ba2af1ba7a42cd49dcd6eaa248617cfcf495a8f5f887b8962ef
MD5 ddda5e175e6fd6aac656a48463776c59
SHA1 84463053e54650434f0ebb39b1c88ed6c8007629
SHA512 b7431e0a61f8d8fecc5f35e7a33dc1e3162e2b21c08cce71b72f09bd41cfe90c9d9a16cdb01c2cce634e307910f6f6d726f95a6f3d1f859fedb6beafb908f074
SSDEEP 768:Jrv+4UNbd4377c+wfZOOffffflvShCQsan2bwWV:JbsbO3dwf9fnftvS/n0wO
TLSH
T1FC03CF71E878A9339DE39248764A7B537EB95173C8C54B44DACD4F0C028269F271BC6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 39f1e2cc15c6e019d6f374ef0f6b7261ef56ade4e65e0b392a8c91bd618d062c
MD5 743c9a0e6e0f6486f22526449dc3f909
SHA1 31c9846ac91e8976695734aa37ac34986eafdeea
SHA512 552fb0e8f17dae3b105ac5619ce9a7429e6808ee670be35d0554d69921c763de5482dcb4cf6ba8dc822ce0716f20050aa2857365c549149cff1d9521b65777e4
SSDEEP 768:Rrv+4UNbd43lkkc+wfZOOffgvShCQtr2bwWV:RbsbO3lpwf9fIvSn0wO
TLSH
T13103CF32E86899339DE79248764ABB637EB86173C8C54744DACD4B0D029369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c88863a-9929-4d22-8bba-3a2d3893ad45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1c88863a-9929-4d22-8bba-3a2d3893ad45.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download