1435de800916005f10c3a2e7ec8e6a6551dbf83dc8b42298aee45bfbcb9424ff

Resubmissions

25/08/2026, 16:31

260825-t1er8ssvct6

25/08/2026, 16:26

260825-txnwqsck616

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
obscuros-pixelmon.html
Size 22KB
Sample260825-txnwqsck61
SHA256 1435de800916005f10c3a2e7ec8e6a6551dbf83dc8b42298aee45bfbcb9424ff
MD5 0623b11ae64dc5842de033eae20118a7
SHA1 63517ae5814cfae23d8fcbbde5410e37c067556e
SHA512 6e7e941a35b02b4a85c12af4514849451d53c0e63d8650fee8243fdafa9501794897ed4b6c883a9ad295cf7f967d0332204025bba722a798dba8d404ec64279b
SSDEEP 384:2SxAzQ/U9DZgvKKzTKw53uyUS3H092WYjJdpy3gbFcLHq25ocMku:eqU9DZgvKYV5jjD03gbFcZ5ocM/
TLSH
T12FB2B77394F4B533029284C59972A79A6EC7900FC58798A572BC018C6FCBDE3ED57A8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
112	discord.com
113	discord.com
121	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2788	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321488023222805"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{53BFB74F-EA6F-4370-9D60-0CCB7F78914F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 4228	4316	msedge.exe	89
PID 4316 wrote to memory of 4504	4316	msedge.exe	91
PID 4316 wrote to memory of 2788	4316	msedge.exe	92
PID 4316 wrote to memory of 4504	4316	msedge.exe	91
PID 4316 wrote to memory of 4504	4316	msedge.exe	91
PID 4316 wrote to memory of 1908	4316	msedge.exe	93
PID 4316 wrote to memory of 1908	4316	msedge.exe	93
PID 4316 wrote to memory of 2460	4316	msedge.exe	94
PID 4316 wrote to memory of 3200	4316	msedge.exe	95
PID 4316 wrote to memory of 2460	4316	msedge.exe	94
PID 4316 wrote to memory of 2460	4316	msedge.exe	94
PID 4316 wrote to memory of 3200	4316	msedge.exe	95
PID 4316 wrote to memory of 3200	4316	msedge.exe	95
PID 4316 wrote to memory of 3572	4316	msedge.exe	96
PID 4316 wrote to memory of 3572	4316	msedge.exe	96
PID 4316 wrote to memory of 3572	4316	msedge.exe	96
PID 4316 wrote to memory of 5448	4316	msedge.exe	97
PID 4316 wrote to memory of 5448	4316	msedge.exe	97
PID 4316 wrote to memory of 5448	4316	msedge.exe	97
PID 4316 wrote to memory of 4688	4316	msedge.exe	99
PID 4316 wrote to memory of 4688	4316	msedge.exe	99
PID 4316 wrote to memory of 1516	4316	msedge.exe	100
PID 4316 wrote to memory of 1516	4316	msedge.exe	100
PID 4316 wrote to memory of 6060	4316	msedge.exe	102
PID 4316 wrote to memory of 2496	4316	msedge.exe	106
PID 4316 wrote to memory of 5968	4316	msedge.exe	107
PID 4316 wrote to memory of 5552	4316	msedge.exe	108
PID 4316 wrote to memory of 2148	4316	msedge.exe	109
PID 4316 wrote to memory of 2148	4316	msedge.exe	109
PID 4316 wrote to memory of 2596	4316	msedge.exe	111
PID 4316 wrote to memory of 2596	4316	msedge.exe	111
PID 4316 wrote to memory of 4344	4316	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\obscuros-pixelmon.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff96aedc188,0x7ff96aedc194,0x7ff96aedc1a0
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,12028286048569460643,2036551248471661325,262144 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:2
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,13406323725267106038,6780646450144670468,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,9721683425668197861,10143037155373295088,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=3204 /prefetch:13
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,4166013689478391000,12910052372551574136,2097152 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,7888439595536764783,12766125680432463911,2097152 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,4296946826358077673,4703914459559469696,2097152 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,3420266455818806396,2408288061594031275,2097152 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:9
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,1240438315325741981,16513103707441742842,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,375642039244043321,6617300928453890155,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,10876719917802961621,14223371417632530126,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,10876719917802961621,14223371417632530126,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1700,i,14283896904125820456,13735531828696117,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,12927266938948165609,8117717051119292190,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,10156746009406704800,10518532428496559849,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,11865104401698090266,2948240601170562710,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,13343794308105077840,2143377103144287093,524288 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5872,i,4722874851964109336,17854621375231700739,262144 --field-trial-handle=2616,i,14584845564936067365,11449420552304620397,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 33KB
SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
MD5 f953f499c9824953791551bfef65fe61
SHA1 00fbf8d23d0e9549798383179c9b0eae5d653f9f
SHA512 07bf316d186ac8d6eb8cf860fd0dbce854ae74ae26276be3950bd32b06894c7b24268280d504bb490218c5ec0e85b4eeb7e858011dcf4de64bbb06e4eb296fca
SSDEEP 768:Pr8FwJ2kfmG7rCq0GJtSBVRF0UGuEuOZejwpiUCTVwiYz:PVJ3fd7rCqduSduOZnIVVwvz
TLSH
T1D0F2F185B0036A346E502FB459DBE6CE1FADF8041A5318EDCE9DC30BA394C7648792BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 3d9a7483b5fbfacbbaece8bf4ef1cb606533f23b17a5a0349871e10459fb268f
MD5 01f0e682535622ba29f5b6835f27a707
SHA1 0b401add3c5d785a7dff3d4fc4d2752b820ba10e
SHA512 5ee8df3dc078930c604599472297ada709bb2c3665ad5c4f790c2a589947fc6ccba63b515304272ab4cc18680f7ded5b7ff3de3f5b540e2c155f052408fe2067
TLSH
T1735162A08379EAD2C77586FC51E6CC4F71B098F6AF4B3E0E40629532D9B2F26310201B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590fe4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590fe4.TMP
Size 2KB
SHA256 209434e4d75d7d29bdcd93fa1efe57400b6594aa4e3d810b95ef2ae0a8e30d59
MD5 f20b95a2c7242a859a270908f683d17e
SHA1 074f4a5a34ff87ae2e65d9b2d08032c6d69f5281
SHA512 5b07c08aabc6e2df95b5c2b2f717666383f2b1e39633334c33c56bcaa3a915f1c5bdca25eae06e62491adbfdb61f470bcb1e644b293dbf2aacec9891d7143933
TLSH
T1D65163A08379EAD1C77546FC51E6CC4F71B098F69F0B3E0E40629532D9B2F26310201B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1698e2bb087525cf62447e104fbbda7942055d819057482e6830bda42777a072
MD5 5e78e020253e72e7cc8617ea20a79c3c
SHA1 97dec591fb3a181880252e7bf9053a996064878c
SHA512 bee1140a11d6d8502cafa3dacb050e96db9bcc6256273a63f12bde1e9e20134d48e69f39d490fdbb2c1b97e0a8a538f326d907609ba3473d6bbeb686a06f3014
TLSH
T18F819DB6C2D4877E891256F09B256A2BCD1D154B822C3C5689F5FF5F63F24B0D20229F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 472d5a15b4084e70693fddd5ebf452ac86ffdbda1bdcdb96bf2b6bda624e3bcb
MD5 03ffe32b2e116173ac747e35ca93546d
SHA1 abf0f768a645f15c3fc766a0df280a38d516ceb0
SHA512 e1be0b336f9f631b5d5ed01de46433aeaac02c36b5bf3042affbbc3a3c7229b3f77adc7f6bb0418c7cce3032ef1ca714372d184e594dbabe2aedcaff8c7b6003
SSDEEP 192:sxRn0REbP/fdsn1JsmZRzoA8p4p/g6+WNIYx/lMJxGCIgIJ:sxRn0gP/fdsn1JiM/5IH9s
TLSH
T17532C8165928A93B9CC7D21DFB66BF53E2F91032A1D12E58B6FC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 61f18bd5ad4997d05b98c59ac11d58813344dea6b553b9ff4cb87b731ed8ce03
MD5 cee3a194e6efc0e495ca79301a635c8e
SHA1 14daa7e0f78023b4780dd4dd39ab1c0832a421fc
SHA512 155fefaeb99f964878b6d7316f55e13103f430d5dbc3e591a081c371814e237369066a8253c6cd7925ca334382926d86deb8ce47c9544e9781e9adb051568a5b
SSDEEP 192:sxRnnREbP/fds31psmZRzoA8p4p/g6+WNIYxHlwJxGCIgDfdJ:sxRnngP/fds31piM/5Ib9r
TLSH
T1C842C7166928A93B9CC7D61DFB56BF53E3F91032A1D12E48A6FCCA1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cd5e9aa5dca10c2a1a066fe38740b4b6557f66e43981f1b9a3750b6d990ea6a1
MD5 7c7f82f0513269f2e15b3a0995350319
SHA1 bf249c94b12bec8d3b1f5be6d4d7e3207c8f69c9
SHA512 4161b4eea175af01f8895dd6138ae1be62d8369c2630f29b22a6aef1e2d8a9caa890bcb4c0ed866447c93039430b595eef818c62d3ce4db6d6774f8cc1ed4ddb
SSDEEP 192:sxRnnREbP/fds31JsmZRzoA8p4p/g6+WNIYx/lMJxGCIgDfLJ:sxRnngP/fds31JiM/5IH9B
TLSH
T19A32C8166928A93B9CC7D21DFB56BF53E3F91032A1D12E48B6FC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 322886b99ebcb1923c51e52c9240eeff3ece00a1f263f26dad1cc04f67a2326a
MD5 90fd7236454db0a14d26ecb5add57ca3
SHA1 36b79b4eed64a65d887f4d043fa06685a96848d5
SHA512 a343caeafd1c60a30b1910d4428a1af067a237c3b576e32fd7a7084e8c369ee64a22b0756adedb8183717f49a0424ac87dd429d4990ec73f36fd2294f55f94d7
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3Rk6rorua:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0VP
TLSH
T1E1B2DB3B604CC77E9F800AADAC596FD77D9802C797988D4447FE990C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 095ef81bdc2867b9d618130acf685cc49916fe68ab02f992a5ae773432fd8a78
MD5 ab8f6ffb4d5af5ebf1f8507a74a9e192
SHA1 e9dfc235d0d010125e1b4ddeadbc04d0fe0fbf27
SHA512 8b15a28a1dc4f7ae9cf20974e206f63a65106adf1676d21ed00219454766f1266d258005e44d0b2f869ec82f2d32ad66b5e06b07b8d9291e05bba4425ab38b5e
SSDEEP 768:XI3EnkKL2blMjF669yrqUjWiIwwxMtyfpue5:XI33ujF66INWZTMwfpf5
TLSH
T165F2CFB0ACA45AB78CF6C785B3523387AFB08153D3D91E9885DCA70D059B9DD134B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 899c2625fb19b8089f79a8fac5163fdad380df649baa7a945287fdc644217581
MD5 c2dec890cee788a2f54c1bb5f238ee30
SHA1 a9b84e6943df762288cd633309c2a53e443ee3c2
SHA512 274129fc23650740878b60cd71a75adebf8c199eda0a90e3bec56d83502cecea9219d4bc99e93504b6582aaa8bd6ddace834f99d00f3d90fe03538dd855794e6
SSDEEP 768:trv+4UNbdl3nFkKL2blpjF669yrqUjWiIwwxMAyUiler:tbsbX3yXjF66INWZTMDUsQ
TLSH
T1A103CF30AC6855B7CEF2C686B2533783BF745193D2C50B98CADC620D469B4DD234BA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7d8e253e42a60b168b7f2a37f67867043d1572f0a4c523a2b66ad16d44a897f7
MD5 7c4d70e6067189afdb5c8bdbcca66be8
SHA1 e4f0a5c795f43d81bf439613a460108d5914565b
SHA512 ed97082a2a825b80d60f6e89ebcaabb741cfc065c8a1fc11b5a10652a903fc4c7e3fee5a69839a61990ea95950e375a3169d0f17525a324139855adcb4bb22bf
SSDEEP 768:NI3RnkKL2blMjF669yrqUjWiIwwxMtyfpue5:NI3eujF66INWZTMwfpf5
TLSH
T15DF2CFB0AC645AB78CF6CB85B3523387AFB08153D2D91E9885DCA70D059B9DD134B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 8b69a65d2a50c05a34594f1a2c0cfcb70318fb7059c5ab728e7ec1167b0ce1a5
MD5 6a4d5394e787bbdef3b603cf4892c8b8
SHA1 befc59ed48b9baa60ea26bcf06bb4e3fff1a5c3d
SHA512 76592b62b5ddd68b7df5291493bad961ee0ba93c6780165ae17f2490b744e5e75011a10bee50e3c7d693f1e0e5ce7eade866a7483e908e61f3f701b7f6af0385
SSDEEP 768:1FQb3GwgGnkKL2bl5nF669yrqUjWiIwwxMtyfpue5:Ub3sHnF66INWZTMwfpf5
TLSH
T17EF2BEB19C9486BBCDF6CF85F3523387DFB04163C6D9AA9496CCA60D019B4DD134B829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f18e99aff07c8ddf431132b32342d34cf3fe93d7c4de9de4818cbe3fad01445c
MD5 3de19b6ad105c681a61d291766a37c88
SHA1 c385e711c32858b92683221fc28f8e69907490c8
SHA512 6f8cfd8b40eb33462f85509376b036a218165e02aaa99df54970a1ea6e11a209b4db40f9f16c387fea344e7753ddcf963026ca29c7958d6539ba9ed7564b7130
SSDEEP 768:arv+4UNbdl3IPkKL2bCjF669yrqUjWiIwwxMR6oUiler:absbX3P2jF66INWZTMYoUsQ
TLSH
T1FE03CE34AC585AB7CDF2C68672433783BFB4519392C50B98CADC670D869B0DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d00a3322-25d1-4f93-a183-87f3f07d1eec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d00a3322-25d1-4f93-a183-87f3f07d1eec.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download