Analysis
- max time kernel
135s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 06:14
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
General
- Target sample.html
- Size 41KB
- Sample260824-gzjnkstdnd
- SHA256 14c1b158f2b8cc40437696e82b608482c76f2737d0e5026664e9015ad768ff2e
- MD5 a1ea628fdddc5dfb45d5960b5a569a4a
- SHA1 c003b84f048007c08b63ddef471b5651e591471f
- SHA512 dfaa4774310a333b5a1ede86f53db9842c1c00aece8d530b2af43d3ca60beed37af367e35d6b9af3fd7c1e1e87317dd2fab73903c5efe52df7b00036adeea72c
- SSDEEP 768:lqqZdypU6+KMNp0xlMzoDEEy07gFZak7oKTvGIYQvx+b0vLBlaR:lhyp5+KMNp0HMTEy00Pak7FvGIYQvJlY
- TLSH T1111308B2D08C1437364F63A99162B729F5BDA629CE019768B1FD616CDBC0EF611B320D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5700 msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320256895386106" msedge.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{C0F2F10B-EACD-472A-A295-8F26C0B81CC6} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4288 msedge.exe 4288 msedge.exe - Suspicious behavior: LoadsDriver 3 IoCs
pid 4 4 4 - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
pid Process 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe - Suspicious use of FindShellTrayWindow 33 IoCs
pid Process 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe 2396 msedge.exe - Suspicious use of WriteProcessMemory 30 IoCs
description pid Process procid_target PID 2396 wrote to memory of 5184 2396 msedge.exe 89 PID 2396 wrote to memory of 4480 2396 msedge.exe 90 PID 2396 wrote to memory of 5700 2396 msedge.exe 91 PID 2396 wrote to memory of 4480 2396 msedge.exe 90 PID 2396 wrote to memory of 4480 2396 msedge.exe 90 PID 2396 wrote to memory of 3464 2396 msedge.exe 92 PID 2396 wrote to memory of 3464 2396 msedge.exe 92 PID 2396 wrote to memory of 2068 2396 msedge.exe 93 PID 2396 wrote to memory of 2068 2396 msedge.exe 93 PID 2396 wrote to memory of 4164 2396 msedge.exe 94 PID 2396 wrote to memory of 2068 2396 msedge.exe 93 PID 2396 wrote to memory of 4164 2396 msedge.exe 94 PID 2396 wrote to memory of 4164 2396 msedge.exe 94 PID 2396 wrote to memory of 2096 2396 msedge.exe 96 PID 2396 wrote to memory of 4268 2396 msedge.exe 97 PID 2396 wrote to memory of 2096 2396 msedge.exe 96 PID 2396 wrote to memory of 2096 2396 msedge.exe 96 PID 2396 wrote to memory of 4268 2396 msedge.exe 97 PID 2396 wrote to memory of 4268 2396 msedge.exe 97 PID 2396 wrote to memory of 2076 2396 msedge.exe 99 PID 2396 wrote to memory of 5820 2396 msedge.exe 100 PID 2396 wrote to memory of 5820 2396 msedge.exe 100 PID 2396 wrote to memory of 2076 2396 msedge.exe 99 PID 2396 wrote to memory of 4284 2396 msedge.exe 102 PID 2396 wrote to memory of 2532 2396 msedge.exe 105 PID 2396 wrote to memory of 3584 2396 msedge.exe 106 PID 2396 wrote to memory of 5724 2396 msedge.exe 107 PID 2396 wrote to memory of 5288 2396 msedge.exe 109 PID 2396 wrote to memory of 5288 2396 msedge.exe 109 PID 2396 wrote to memory of 4288 2396 msedge.exe 111
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2396 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff9e4a2c188,0x7ff9e4a2c194,0x7ff9e4a2c1a02⤵PID:5184
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,16627481519922134428,12672988704735867474,262144 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:22⤵PID:4480
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,2428972702093412330,5923688126242755481,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:112⤵
- System Time Discovery
PID:5700
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,16774792022016884787,3232989245946338998,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:132⤵PID:3464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,7102872442795647451,689755990769990046,2097152 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:12⤵PID:2068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,3367369975070220043,3012143970941563115,2097152 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:12⤵PID:4164
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,1716981380603571871,994798794399178381,2097152 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:92⤵PID:2096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,18213528887250905268,10485420408752079111,2097152 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:12⤵PID:4268
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,11315547076712462667,6344280576634451856,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:142⤵PID:2076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,6368008294618666259,6611517386380195278,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:142⤵PID:5820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15559847633473077839,2558326734596388514,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:142⤵PID:3424
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15559847633473077839,2558326734596388514,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:142⤵PID:4284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,17744040175146560710,11139672033793074684,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:142⤵PID:2532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,2647434858131235302,10238210265492244176,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:142⤵PID:3584
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,14702723501857315068,5415105263155708050,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:142⤵PID:5724
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,1165995684882007857,12266090143108199788,524288 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:142⤵PID:5288
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4940,i,16970257603157612258,10517378312042174910,262144 --field-trial-handle=2604,i,15658385993657514477,3423097749376879166,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:4288
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:1120
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵PID:4332
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
- MD5 590eca05f11ec72644a09f205b548fbc
- SHA1 c6521700bee3b500259ee3a70292b90201f20597
- SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
- TLSH T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
- MD5 c3584e6bc22b3ad2f168ede48d20a993
- SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
- SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
- TLSH T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b
- Size 34KB
- SHA256 00ac21afbf0717b4406a5be832456e7a7cd12436306b7bd36da294715718f31a
- MD5 c0daca89e9aae196582ddfb462599c13
- SHA1 a08b252e2ddde06e8f41d47cdfa83e94dd1371d7
- SHA512 849ff0cf6f5039629cb71568106b71b9b99725742eb1224c22d157e11725c1653fa0fe0a51f9e536392e508f4ecfeeda981a66ac34c0c38002bd3ce5d54fc1da
- SSDEEP 768:K+/ZHuieGNwLKwEm6mJlr/ETjqm2pxRlq1wLLDrSG8KDc8z1z+m:KShpeGyLKBm6mJJ/EvsRlOSWpKDZ1Sm
- TLSH T129F202F96EABA3811C827759290333A0EB2490EA8DD30775F6BCE6BD5B210D141262CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c
- Size 29KB
- SHA256 2403e1a1abbaa8f911da32a55052a95352a23250d3caf33cfd9246e4084fcac2
- MD5 fc3a54126b60aabb257a03ee7368bccc
- SHA1 2a52d4a13d6025b116c7e2670d8f15b00731100c
- SHA512 9ad6ed709ca7da4609e33758d4fcfeede77b7a56f5f8fa2919073695baf49211fabf6905be9ef778e0a060cd11260d0e6eadf4fc0f056dedcda23140640a6622
- SSDEEP 768:v8oH3TFQ/RFGRvWIjStaNFCQ063vrSecl8Ba5n:v8oDF6RFGg/QX3Dlclt
- TLSH T19AD2F17215819C2128FA6EA095602547C17CC539C78A7AAC837DA452FABF92E0339E72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003d
- Size 63KB
- SHA256 2fbe9f79c4dbf5b2eccbc41a979ecc8b2bc104fa76d001d15a38e36df2f516f6
- MD5 335ae7646a69be7bf9eff5922615f89b
- SHA1 b4c66f60d89b3c9c38c35f6b7b82c796f4a72cfd
- SHA512 2c41e3dfb8d27c0b74b07493474430997bb76d065b518f29f16739ca0899883761875bc44811e64f4c494b1ea2d1b38752ebadea0825b8641f5fc067ed68da1d
- SSDEEP 1536:z2PdUh17aZ20vW/3prSJ0rOetW3maS/7FqvId7nDA:z2lUr06pi0KEIvI9nM
- TLSH T126531211DBD3FB80C4D55B2DA9A44ADC0D671B382688D242E3DFC1B60EB5E4452EED1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e
- Size 254KB
- SHA256 41b8a4f54af93134d8b4b49d239631c8195a720edffaec43c0e817cb9d1300a4
- MD5 83af79a15653e6b2f335e889063af512
- SHA1 c2f17966ae57bace596fa9c60d14d299f261ec38
- SHA512 b7c7d42e6e725fd8b886e7b4631c03a225e9ae49d57ac3bbb3b73410c51b0f9d9ad56be81b3bad706e77c6aa5272973eb0b3529c8c5f44a01bcd7e42811b3486
- SSDEEP 6144:Fhp1iM9EKWKkq1YH+4eWTIPcJiw4rJmbrqRbvR:FJ98DH+47dmcnqRbJ
- TLSH T1DC441225CCF57F23A29157865EAA1134E25F178515FA466CD3272A6BC8A3C7322CFCE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
- Size 118KB
- SHA256 13b17858dc02130403064bae0d228f332006f02357fa477e1e3a6c9e0c998e5a
- MD5 cfec67e6db623f0c8233164b641a7cb8
- SHA1 4b0bc77085d9314f134156c51508ffa6900b3e9a
- SHA512 e08ede4bb018406232271bf2a35e71bf0f6bb91df98564e425240135a3e425501ffe35d5c1dcba5b4c6528efbf4ff203470337eafa3d4eb64387bb7aae848931
- SSDEEP 3072:hjRdrHJS6up6HppSLJ6xJ/Y5ITQLwhJYrOocIVHbN/P:hj/rHM6up6HpwErOISwhJYio55bFP
- TLSH T1B3C312E0F40E6E40560063E79B01821FB91BCCBED79D7289A7D053606CABE958E5BCD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 4d20e3f24665cd988f5feca0a78f269186839e149f38603c2e52acc34f90bf27
- MD5 5851338ed5321abb3841c8ae14dcb28b
- SHA1 2568aa4468575372e66447da4e609f4461e51d5b
- SHA512 d4944878a247a3e7d38bd0cd41e8fabba654b6ef8021d92ea62dcde5d63dd6fb212fcc27768a47a3976e3d5d3e4e8640788076bf92db7e78f331a3a7d0db1876
- TLSH T1C93182A04B2B0EE1D3DA45F1A0D9ED8D33F7A4E8054B7E72864862B4AC0D3114BC9E00
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59dedd.TMP
- Size 1KB
- SHA256 6908256f1a820e4025b6f24b8ddff5cbb246fcea73fac0a9d435491ae780be11
- MD5 33d04122f7caf8baaf91c6cd8a7b1bff
- SHA1 88fcda6d129df91f416259d161f0425e6d468b24
- SHA512 be607537d663f5c6a5aa6facf2a53fc017f17535bab6dfeba4abc4006498e6cf91ecb709a5dd508b5de3ac56e4dc6cd196fdda9ce9df1e279ebe84f9aec3e9fb
- TLSH T1C93182A04B2B0EE1D3DA41F1A0D9ED8D33F7A4E8094B7F72864862B4AC0D3125BC9E00
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 447e4707740fbde4c553cc0b68006c70e839860d9d3941862287aa547f557449
- MD5 4aa056633ec9996b7e4a702757aaf4c5
- SHA1 148545455be2c8f2b185bd4129c18d030f0fa4e6
- SHA512 28ee5951ec4d7122473ce41d3e7df9bf751701b36211da6ff40c9da89292f4aaf1048881c9e1f95e08cd1ea21393cbd697ea645d7be032b858ac9ce32b2f76b8
- TLSH T12531CDF3C6E8563D890142F87A143E2BCE2D0854832C3D5AC8D4AF5FA3E1871D28094E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 68ed5810165dedf34da6e5c0316bc9825d6bbe89999d7d50137933408bb91901
- MD5 b760fe5d631d92c133f48c991f74b6aa
- SHA1 c9ec3b5b6de7d2a95cca41822d3dbe44384a77ef
- SHA512 ed4f13e5024ca63c66a1da642ba0763cbd7b0bce1d05f13352a94640574fc2d3e965a42b3b4a9d574d91955b5c666d5e5bcae65231cf0534134df44246be5aa8
- TLSH T15241C1F783B4957E8A0196F0EA146E2FDE2D0515432C7C6985E0AE27D3F3472E041A5F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 6a37095c2c87b6253ec34fbb6b95cdf334fe91b5ef6dbb50355b577d7559de0a
- MD5 644f1365f5ac31aa07e0d0cffe8e6546
- SHA1 db7b077a9e3c9e64d7a35fdd723cffc1a79ef9bb
- SHA512 452c83a21dcf68a06b56483e811f1b90f3799f5fb26584fddcdb0998bedb7250d5441c4fa8d8b9e693e59048d21c5e265d8c1157c471890483d149bfb4c3a575
- TLSH T14A31BEF3C6E8567D894146F87B143E2BCE2D0955832C7D5AC8D4AF5FA3E1871D28094E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
- Size 40B
- SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
- MD5 20d4b8fa017a12a108c87f540836e250
- SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
- SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 11KB
- SHA256 9d5a21f3125320e959e2ec4e8ecb52cdd99fd6e46d09bb0e5b30a1f10f26efa6
- MD5 d7baa6e57181fb044faa01be39c5b062
- SHA1 0455a3dfeaba87dcffbf1632a3abfc7fb4080670
- SHA512 aa09c8f6eaa1f448bdf62f04c634bf0236fafed1f1a71dc67f61c452c9634feafe9dfb954d60aa393f8b67e3b96d11824700bf56969721f4acd3d5f1e0a6671a
- SSDEEP 192:sxR5+R7bv/fYsT0AX63AtCzoA8p4x/g6+WNIYZFLKdOGXIgIJ:sxR5+5v/fYsT0AX6YI/5ISss
- TLSH T1F632A7156968A93B8CCBD21DFB197F53E7F95032A1902E48B6FC861C14E76DD120780F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 11KB
- SHA256 4ae8c03364d4e45caa1b5a49748e529ff44a18b61c3e26c0e0207e2992906d65
- MD5 37b1d363f4b07a283bf38db7bd61e67a
- SHA1 68345296d6746ca18cda73af29e9e8e951eb17b2
- SHA512 5373adeedc2ec3b386df0c7c297c78d62600aace568c451475cffdbd9a550919890bdc473a1d219944e2e03898747e6467a79dad3be92bcbd57494783bf4c2ff
- SSDEEP 192:sxR5ZR7bv/fYsE0AXX3AtCzoA8p4u4/g6+WNIYZFLwtOGXIgDMJ:sxR5Z5v/fYsE0AXXYN4/5ISY8
- TLSH T13F42B7156968A93B9CCBD20DFB597F53E3F95032A1941E48B6FC861C14E7ADD120B80F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 11KB
- SHA256 9e966f9807e006160707e9c24ab2bdd19345c929fbc254149ddeed809c3c3a59
- MD5 9ebad4dc1159ecc83c01456af5f2ffc2
- SHA1 4a67c562e74370b902120159af595bec9c9cf1e7
- SHA512 d5a110e3c38fb40438daa19ba8e2e85803ad8c5a0630d95bc50539b2533634e0edae2dae4c444c9c94154c62bc27045f5fa17ee12f7399d7ded7ae6dbefbaf5d
- SSDEEP 192:sxR5ZR7bv/fYsE0AX63AtCzoA8p4x/g6+WNIYZFLKdOGXIgD2J:sxR5Z5v/fYsE0AX6YI/5ISs+
- TLSH T1F242B7156968A93B8CCBD21DFB597F53E7F95032A1902E48B6FC861C14EB6DD120B40F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 23KB
- SHA256 c1bae60de3cc7509b3f00a2b8b2fb088bff2c542a9d31f2fe90f4354455fa773
- MD5 93408f66013a1048949f3d7e073b2766
- SHA1 05ba2009d3dc2197c46397e699f1273f883d081e
- SHA512 2af3df09795be3a84bf84b0e2e199f089ea8ecac5c90ca6e8ca01e584893e5939fc8c975324e1d75cdbc1ced029cc5b399d11a04bbf7149c181f7fa27b899030
- SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGYrocmC:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vs
- TLSH T100B2C93B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 d8d811e3e5a9c71489afa5e1e9b17ac9c311beb5e04f083747b7a5dbbffe66cd
- MD5 28b48bd9d71afd43848077d9bd0ced02
- SHA1 2fe6a85ff267901f1dfd25cbb4605961558aaacb
- SHA512 67864723b8242e9abf494e23c9fe4c004253014c301abcf7bc70cdfe39e9189e2b1cbc71c0d89cbf0699f9edf13c113ac61b9c62cee0e6644e4e55a8dacf49e4
- SSDEEP 96:KR3gFB31lpWRekgJpK4ggHpcvHG5F8HtaTHd3LfWTI2gPfK4Ogxfc1NAj+0QKR2F:C3gFB31lERe1JDggH2vHG5F8HtaTHd3a
- TLSH T1C491351031BF52C03C7E794D9475D67B5683B0A23018F92B37A942A24FA6E124EFE9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f3c479e7-b217-4a41-b949-7b8049b18452.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 33KB
- SHA256 7c4692986d970b1cd775377ca9eff4003e691b3ac7f6de0bc0db0dd9e2ee7299
- MD5 6eac3686673d0f138c3a9abebc2a22d1
- SHA1 1ed97dd1cd4e5fffb3aecb4fc8f02c4c1e6066f7
- SHA512 e3f3446a4f73bf3d246dab108df8d50243fe05ae63b6fdcc2cdc3fcd77b44b1bf252729bb40b80080685041f657c14ac25bad64201484fd37dec92a3d14d4b29
- SSDEEP 768:k3Izho3Zl7f+LeSFOUAdX4fouOToPvB2thtA9VAgxJRYAN:k3I63ZlVsnnwthttEJOAN
- TLSH T1D6F2BE72A8A98D73DD99D3D0720E3283AFF0405395D41F849AED5F2E068B6DE474B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 39KB
- SHA256 805654276688ab1a35c06136f563a0580fc72be0bafdcb2a96ddec91069d3778
- MD5 4257ffd3172d93a0dfd28b3eba49747e
- SHA1 e5562493b6befed6af62ceff9141f5a8915c0b78
- SHA512 87db3c9e079c5d1a3d9e0532fe2b2b0aabdb1a8c92a5d5b89bdfa70bc1f7f67da317a32e31bfacbbc6e2a1ac3a8dd5d69a7cda81ae18ef03b0f784162b6f37db
- SSDEEP 768:Urv+4UNbdg3Aj7f+LeSFOUAdX4fouOToPvB2thtA9VAgxJRYAr:UbsbW3AjVsnnwthttEJOAr
- TLSH T1E803BE32A4A89973DDE6C2D4710F36836FF4409395C40BD4AEDC6B6D069BADE170B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 33KB
- SHA256 1aac1d21fbbf063aa23604b366136574e0a960a5ec00389f77f29677077c0b38
- MD5 69adc8cb523698e8848decc13efed6f4
- SHA1 603688a4633f47232fd7cbda8c299924ff65b3ff
- SHA512 ae206809ce1c3be2ec0a7a6715520af102fcaabc3e5d457e350799a6b840b1290a4753b7ecbb26e7ebc30ff56c6d3cd2664cc495aeaea0ba441d708358b2a313
- SSDEEP 768:53Izho3Ml7f+LeSFOUAdX4fouOToPvB2thtA9VAgxJRYAN:53I63MlVsnnwthttEJOAN
- TLSH T119F2BE72A8A98D73DD99D3D0720E3283AFF0405395D41FC49AED5F2E068B6DE474B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 39KB
- SHA256 e6bf2642467a399843866ae9341854d453d15a628845dd5ccefd86a3a87050a1
- MD5 0f732806bcf3d1cabb2356855cfa6cc0
- SHA1 1bb4b66a56784bf5833e0c08a3e1d58ba8e8cdb3
- SHA512 8d55f80956d6a65b7bca42546d7a47f90fc208ef1e7d041480436f921f68b1adcf723943d1228a3c4eab57b67f945124c59156f4276c4e622cd66348c180ae4f
- SSDEEP 768:Nrv+4UNbdH3YeJ+LeSFOUA+X4fouOToPvB2thtA9VABxeVH1SlX:Nbsbh3Y3snnwthttrEH1Y
- TLSH T1D103CF72A4AC9933EDE6C398710B71476FF4915396800FC49DDD1B5E069B99E430FC2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 36KB
- SHA256 c652ef2ba157e3d3fe3a728fceb1b670d349c0e4c4db24284bbc98888954b784
- MD5 e6abf634dcb72452dffe0376c8e7e9f0
- SHA1 1f4d9f4221bd3ce57e856442bb13210fb09d3da3
- SHA512 2f23671144e71acbb067fc321730ca3b9177262d69c8afd5ef60355cbf7de4cb7cdf89c28a49a2ed5016aee3e8b5c5ef9e0f388894398a562475fbb4054aa98d
- SSDEEP 768:QFZ3IzhB3Cwgkl7f+LeSFOUA4X4fouOToPvB2thtA9VAgxJRYAN:u3IX37lWsnnwthttEJOAN
- TLSH T16DF2AE72A8D88977EDA9C7D4B20E3283AFF00093D4956F90ABDD5E2D018B2DD034BC19
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 38KB
- SHA256 8d74e79bd03fd415caf9446a1757d74ffc5f837a9015e07d302c20f116b6ed54
- MD5 f75edfb8b6c0138105f0e65b729532c0
- SHA1 34c25022a2291be995eb2aba078d4e972e4ebd60
- SHA512 3ccdc752076d100118325107a6cb1345159d708b917a269eaf751aa73323644fa21f76751645dc6e5c4740880bff0f349957c63da39de600bf17c8b7198a88db
- SSDEEP 768:grv+4UNbdH38L+LeSFOUAReX4fouOToPvB2thtA9VAwNeVH1SlX:gbsbh3hsnnwthttAEH1Y
- TLSH T12B03CF32A8A88933DDE6D388320F72572FF4915396900FC499DD1B4D069B9DE470BD6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9b1d0d36-3b28-4bd4-82ab-91b48bd5de44.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512