2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 14:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 1005B
Sample260819-rr96nsfe97
SHA256 2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e
MD5 fd879317e803d0d934db5bcc5ff8fcc8
SHA1 21b7954728b3579bbccddde44255bd8173f96f64
SHA512 2b274bf9900fd88d8697f67fdd82db000d1c1c9447ef1d4fd6b0202ac74008142ada2e30beed8f3b3e6e5ea8931f35cb21d5f5294ac9721a366d0d675043731e
TLSH
T168110EE72204920E3F0091807043312CC9D79EE96FA58C41D9CB989A75D8E81C82B388
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3716	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316232205236471"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{C952B726-0B3A-4AAF-B72B-EADAECA37C47}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1088	msedge.exe
1088	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4000 wrote to memory of 4248	4000	msedge.exe	90
PID 4000 wrote to memory of 3716	4000	msedge.exe	92
PID 4000 wrote to memory of 4440	4000	msedge.exe	93
PID 4000 wrote to memory of 4440	4000	msedge.exe	93
PID 4000 wrote to memory of 4440	4000	msedge.exe	93
PID 4000 wrote to memory of 3616	4000	msedge.exe	94
PID 4000 wrote to memory of 3616	4000	msedge.exe	94
PID 4000 wrote to memory of 1844	4000	msedge.exe	95
PID 4000 wrote to memory of 1844	4000	msedge.exe	95
PID 4000 wrote to memory of 1844	4000	msedge.exe	95
PID 4000 wrote to memory of 2720	4000	msedge.exe	96
PID 4000 wrote to memory of 2720	4000	msedge.exe	96
PID 4000 wrote to memory of 2720	4000	msedge.exe	96
PID 4000 wrote to memory of 776	4000	msedge.exe	97
PID 4000 wrote to memory of 5520	4000	msedge.exe	98
PID 4000 wrote to memory of 776	4000	msedge.exe	97
PID 4000 wrote to memory of 776	4000	msedge.exe	97
PID 4000 wrote to memory of 5520	4000	msedge.exe	98
PID 4000 wrote to memory of 5520	4000	msedge.exe	98
PID 4000 wrote to memory of 3972	4000	msedge.exe	100
PID 4000 wrote to memory of 3212	4000	msedge.exe	101
PID 4000 wrote to memory of 3972	4000	msedge.exe	100
PID 4000 wrote to memory of 3212	4000	msedge.exe	101
PID 4000 wrote to memory of 1548	4000	msedge.exe	103
PID 4000 wrote to memory of 3940	4000	msedge.exe	107
PID 4000 wrote to memory of 5424	4000	msedge.exe	108
PID 4000 wrote to memory of 4628	4000	msedge.exe	109
PID 4000 wrote to memory of 1240	4000	msedge.exe	110
PID 4000 wrote to memory of 1240	4000	msedge.exe	110
PID 4000 wrote to memory of 1088	4000	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7fffadb6c188,0x7fffadb6c194,0x7fffadb6c1a0
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,692979484676260684,14627346699422151149,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,1836257949038408281,8144499596608539154,262144 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,15221594763049634789,16872993876371699311,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:13
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,2031899029082046090,4216661882006510949,2097152 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,6882317615290120166,1422265113535039168,2097152 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,3631290433312011885,17611511071508562239,2097152 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,4552076993502958554,7900812343993793287,2097152 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:9
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,18107293545005565638,4577928515287507556,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,14583836811095554752,10071972779865930787,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,8018087776387953971,16144517444344491482,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,8018087776387953971,16144517444344491482,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,2120425809299796122,9720109769239267974,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,16750875816187170225,14022527023258296317,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,16258387396248661071,3583085926841263389,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,6519294895514019428,13568187816088887385,524288 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:14
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6508,i,9365641502952461554,1740889083214329311,262144 --field-trial-handle=2504,i,1366350102162047808,17569646974301450813,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1088

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 719f844e62c5a3916fba05dc2f32d02dadec54c424efb41ba161d1fca59227ae
MD5 e633a9ff8da83df3b4dca0ad6f30e5d9
SHA1 610df135117504b2857ee3cc03a5ac9797b10333
SHA512 56404607616c88e3d1268893aa0c748db1db04fe698a8f5d214c6a2a533823ff606c3f2a3f007d08bc16bd8838597597f9fdcfe0f631495c1928104ff11d002f
TLSH
T16BD0C0303948E188C9832172DCA033117310007020B147054031F42CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a70d465330072fb9f0be411152bef695ebfcc52bd4fc3231ef594a32d52cfb6e
MD5 50c83998ad18001ac5801c581a99f5fe
SHA1 890361dcbcd526d8a29b50a05eff640b26629518
SHA512 8ed51561d125f5c613c42ddb091e5908d369cc0eaba9dc564885e74098da1aaa5aeb60a4b8d053d00e407e057b847a29e2d6e7313daba84522e2792740efb43d
TLSH
T1245182A4CB37FEEECF24CEFE52C0445BB6F5A8334A07DA5705592E38849A3141301957
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ba1f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ba1f.TMP
Size 2KB
SHA256 6aa82c56271f7a9d95b063948ab7e1d4a836ff6dedd6442de6e1fc295d41a77a
MD5 52e5c83890ab267bc4c13f03d2ae74f8
SHA1 c5cc40824a2f639ca0c780a7f951be755daeddba
SHA512 5cc0aa12cbfac447d898e18756ed80df878b8e839411d503a81c66a45ccabc16a28f5acc564dc3a0aaf99254e2639e8594abfd4f2e4de1eb0f76498d708e7488
TLSH
T19A51A2A8CB37FEADCF24CEFE52D0444BB6F9A8374A03DA5705092E38848A314130195B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 42a6160bb8359ec29603fe67c067410759b4f2b7b3967347375fd5997c9892e1
MD5 3879f3255a614673293c5e3d9c306d43
SHA1 27732849f9a335ceae4143192a923743799658db
SHA512 43b0d7c320ec35b0fd0639c8dfdf63b777c50761e6dfaaa2dcb513f3401af323b716540865ee0223b171a5177ff3a657b7785018127f842702ab488d5cd440e7
TLSH
T10941BEF783F4867E9A0196F0AA156E1BCE6C0516432C7C66C9E4AE2B93F3471E10175F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c645a48d2cad90e1ca69620e57a3a6d0a460700af0170cc02b52f0ffdea03103
MD5 b0859172361a820b5cb0ce95adbc2dac
SHA1 91d2641269bd90dc805d577fbb950fc45639c819
SHA512 a3832e37da3085d0d3e890db6e0f55dd31e4fc130962dffaa43e43a8c380416a1cddc3c1ecf913bdcd9df0641e4e8b265880f5fd8ae4246bb6636a8c0ec7e6e3
SSDEEP 192:sxRbRKtb5/f0sd15q/12zoA8p4f/g6+WNIYZ7PxCsJGtIgDqJ:sxRba5/f0sd1wNra/5Iiqi
TLSH
T17542C6156D28A93B9CC7E24DFB56BF53E2F95072A0D01E48ABFC861C04E76DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cf967358a6188cdbb5721fc7b916d312a9fbc503040e68b2e8400651d80c487e
MD5 ab8e34d5312a8f49490f31ba8693fd45
SHA1 e4db73b4cdc4679f28cd6c52c81b687330429f3c
SHA512 ceec796627034f296f66e99445a56135fab9cdebbf34fe0c87af83878ecfbb1a70480cc014c09c0709d6999e2d07d328ab6586a6e17daa8cae5c3723bcfec6ad
SSDEEP 192:sxR8RKtb5/f0sH1jq/12zoA8p4f/g6+WNIYZ7PqmsJGtIgIJ:sxR8a5/f0sH1uNra/5Idqs
TLSH
T12832B7156D68A93B8CC7E24DFB65BF53E2F95032A1D01E48ABFC861C04E76DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 53f02a45c0a82a5aedb82468ff1fc2b034773aa9f5cc9540415976816c9c493e
MD5 05c44e7c312e9d953de04de9b51ff63a
SHA1 44c527cad6f6056b9b22df8633e01c601a97678b
SHA512 d0f72788facabc8626e1a9712f6832c85bed80ea87f9f47fee06c91225a5c942b2e85679efafb3993add325669131b2d1cc011b9ee090872313c8c0c411ea787
SSDEEP 192:sxRbRKtb5/f0sd1jq/12zoA8p4f/g6+WNIYZ7PqmsJGtIgDYJ:sxRba5/f0sd1uNra/5Idqo
TLSH
T18732B7156D78A93B8CC7E24DFB55BF53E2F95072A1D01E48AAFC861C04E76DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e1b147a6695525527ec34cae31f9a021f6e3535d2ffc297073fe7844040fa186
MD5 f7798b910dc947f67642947ab9af09b4
SHA1 d89e7bb78e24d2a49fd28f067d80a3f3e1ff185d
SHA512 df0bd7244a126b1645640cd5bbcadb0e3f4a2d67d2e2562d7f6e88da187f6bd65847b7e94346d9f01b580e8bd1673d5545be55e2c02ded6dea07ee7c4f1c55a2
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR6NroOpX:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0VR
TLSH
T1A2B2DB2B604DCB7F9F801A9DAC196FDA7D9802C797588D4047FED90C03C77EA912A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 889dfdeb2790c1a76bd5bf77a0988ef5827889a3f4b7e49731324ef6a9300133
MD5 260b9489b3b8a1f731cbc9b937f55045
SHA1 9d58eb953efed6e52bb4306c43eeb79556e437dd
SHA512 799d5ff91f1164df33b62df8298ad78f49786168b6abcbd50cb026099440f99a37d62706219955248768d74e0f11789869a2b720213c3a1e6c9fb3906c81ac7f
SSDEEP 24:KSiQGEiQuiQPiQbPiQISiQJiQFiQE1iQJiQIDiQvI4iQjiQEKXiQnhPiQliQE1RO:KM2IHKL6kXyUfIFKoMgzydTIdKEsga
TLSH
T10C913D51757B02053CBF2A1C8A7EC626C6863077300DA57B7BA940B25B6AE060DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ae03a35f26a87497c42d820347ed978a84aab3e4cb13ddfc29a7ded6910b4abe
MD5 019dedd17af653b02e7aebcf1d462bf8
SHA1 c92ef1d09f9bc3332fc66dd6a94e212ae1261df4
SHA512 17489eda89af98bcfdfa104a2bdb88bfdc2881331276c9858377bcbc6025877bce0a0413cb4ea253cfb802a2abb9bf3549a00cc07889f526274605cab2d66983
SSDEEP 768:Orv+4UNbdq3zJqeG0Aam6aQMGdjWca4GhfwGPeU/:Obsbc3XGWmaME6p9H
TLSH
T116F2AE31A868D9739CB796D5F21B7647BEB451A389C80E90C9DD6B0D039B0CE230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 456e6e519f06bf6622c3792fd0f10230d4d91ae892de6b4a1f3fc75abbf4c679
MD5 4adf755a28e58fac6febd4a42333f499
SHA1 22e1077a1acc735d70a8ee0e04375f15cec78549
SHA512 77073403af74ef7ebbe952a96794ddae375b1f6662f904a1a4aff01f96fbbb12048438d5548f30424a87cc215b293c675935767bbc5240e8975bdb95da5fbc83
SSDEEP 768:Erv+4UNbdM3cgDqeGBAam6aQMGdjWca4Ghf9Gdv:EbsbW3bGDmaME6pG9
TLSH
T101F2AD31A86899779CB7A6D5F21B3653BEB451A385C80E94D8CC6B0D039B4DE230BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 e521b278e53807eb14d3e7a802120f7ded0728d87aaecfd664d86dfe8650c7bb
MD5 fb4e0904959d881ac5e3ec087f81cbed
SHA1 e617680dd2ff18446d21b010aa05d8c471aa6f56
SHA512 d54b7c4c1c36565179b3af64a579768e895f20c641a8238796034048dc8fc78806bf98e25e16208e547a3c5963a974950e2107afc4103a3dfcf79dcc23be0812
SSDEEP 384:BZcIr38NW5xPmivBNIBd+dfYbKxCzuecWmkA1QiZh6vPqQMQYeJfjWca4G2KCQ9u:Jr335DqeGBAam6aQMGdjWca4Ghf9Grv
TLSH
T1EAE29E31ACB499378CA6A6D6F61B3643BEF041A385D84E4498DCAB0D039759E230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 0b04c0e5b98c8721a3c9f3ed411139597f630a91056492789ad4c18abbef4367
MD5 eb458a4cb84affd7ed5220c02e2bf1fd
SHA1 2816183fa678de50e76cc0fddba9a87dc7a3d916
SHA512 d7ad3167f79ceb440387baf5acb750f08a15e6f75c892ec33456143fa32799b3a0c93dda015b9f011048b9d704fec98227c39425098faab3b33df2c66f059c11
SSDEEP 384:mZcIr38NWCxPmivBNIBd+dfYbKxCzuecWmkA1QiZh6vPqQMQYeJfjWca4G2KCQ9u:0r3c5DqeGBAam6aQMGdjWca4Ghf9Grv
TLSH
T192E2AE316CB499378CB7A6D5F61B3643FEF041A385D84E4498DCAB0D039759E230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 65c72bebe6d5c0bdd06711494015aef4d86557fce848444323ed7708a26634a5
MD5 c3937d12126b0dd57978cc52cf724ef3
SHA1 7ca96a58b23d295a9294d02539419a5b8729a13e
SHA512 ce9cd1011b3e14349b0e09e8cc56f4ce0a4882a99fe8e0552bba9a18a54352b021443e0ac2862002ab6da0b5dc47678ed538454133a678ce38ea68c104b5b4b5
SSDEEP 384:6LZcI538NW5xPmivBNIBd+dfYbKxCzuqWmkA1QiZh6vPqQMQYeJfjWca4G2KCQ9u:6T5335Dqe7Aam6aQMGdjWca4Ghf9Grv
TLSH
T1B4E29E31ACB499778CA7A6D6F61B3643FEF041A385D84E4498DCAB0D039759E230BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0567dd1e5597d6382fa6b3c9a0d470897c6663260876ef2e1a48df581ede2a22
MD5 231a51c5327adc6a6b5665d62af27234
SHA1 ccf32f2664bf66192adec734f245fcc54906f06c
SHA512 a192132c616c8f5a8658d09a12b0aaab6299a652519180eb2aaf8b0b5fbdd7070b5e2cd8917fe0eb691a0cb450c7931f5e48672a51585f3b381736eaeb84fbde
SSDEEP 768:/rv+4UNbdq3iQqeMAAam6aQMGdjWca4GhfBiPeU/:/bsbc3/MKmaME6p6H
TLSH
T1DDF2AE31A8689973DDB79A99F21B7B87BFB021A384D40E80D9D95B0D43970CE2307D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00602615-c0a1-41be-b9e5-6e1dec260132.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\00602615-c0a1-41be-b9e5-6e1dec260132.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download