7d8f83795ebe601ec2fd843b1f3555c2af6a0e8ec26b88b5d015fd8ac57e5df0

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 13:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PusatCs/2/lima.html
Size 7KB
Sample260910-qcf4lscp2t
SHA256 7d8f83795ebe601ec2fd843b1f3555c2af6a0e8ec26b88b5d015fd8ac57e5df0
MD5 c1c18008230578ad4a9da9d52f90313b
SHA1 2dde31612a0d0f68249a209c3af05c2cc061ed1a
SHA512 18bfa111f1a873a7b9959cbc5cd794d2df1f9310c0ec96fdbc972d1716be8594332c76d7d0f144fa3b67293b6834fcf75e6b45487a03f2517e9a033e92f92c6c
SSDEEP 192:qF92l4aaxfJx34YXAxNpR3dZ45JPprKyJuR:g92l4aY0
TLSH
T195E1338715E314963907A0A4ABFB6B4736559403C60ADD6A7FCC639CCFC66D888A338C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1848	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335192203808684"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{BDF39753-ED17-4458-80AD-DF1E03E48661}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe
892	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 892 wrote to memory of 3836	892	msedge.exe	90
PID 892 wrote to memory of 4924	892	msedge.exe	92
PID 892 wrote to memory of 1848	892	msedge.exe	93
PID 892 wrote to memory of 4924	892	msedge.exe	92
PID 892 wrote to memory of 4924	892	msedge.exe	92
PID 892 wrote to memory of 4416	892	msedge.exe	94
PID 892 wrote to memory of 4932	892	msedge.exe	96
PID 892 wrote to memory of 3692	892	msedge.exe	95
PID 892 wrote to memory of 4416	892	msedge.exe	94
PID 892 wrote to memory of 4932	892	msedge.exe	96
PID 892 wrote to memory of 4932	892	msedge.exe	96
PID 892 wrote to memory of 3692	892	msedge.exe	95
PID 892 wrote to memory of 3692	892	msedge.exe	95
PID 892 wrote to memory of 3888	892	msedge.exe	97
PID 892 wrote to memory of 3888	892	msedge.exe	97
PID 892 wrote to memory of 3888	892	msedge.exe	97
PID 892 wrote to memory of 1800	892	msedge.exe	98
PID 892 wrote to memory of 1800	892	msedge.exe	98
PID 892 wrote to memory of 1800	892	msedge.exe	98
PID 892 wrote to memory of 3236	892	msedge.exe	100
PID 892 wrote to memory of 3236	892	msedge.exe	100
PID 892 wrote to memory of 4552	892	msedge.exe	101
PID 892 wrote to memory of 4552	892	msedge.exe	101
PID 892 wrote to memory of 2964	892	msedge.exe	103
PID 892 wrote to memory of 2540	892	msedge.exe	107
PID 892 wrote to memory of 1456	892	msedge.exe	108
PID 892 wrote to memory of 2944	892	msedge.exe	109
PID 892 wrote to memory of 5928	892	msedge.exe	110
PID 892 wrote to memory of 5928	892	msedge.exe	110
PID 892 wrote to memory of 4768	892	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\PusatCs\2\lima.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffef970c188,0x7ffef970c194,0x7ffef970c1a0
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,1210769881479966877,1352524683641220769,262144 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:2
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,11968528270926610337,11060241761208887720,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,5882008132479516706,17887873323573495750,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:13
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,15513856764890814157,10378350712751657296,2097152 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3348,i,2753433556995503581,358403112451366067,2097152 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,18290843070211400424,15311124935903865383,2097152 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,9173935710674002850,427326688830975730,2097152 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:9
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,12617445476141324383,1428293790514800406,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4072,i,10917845132745700703,13355995420981263220,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,14131725755552756429,15257227902535282716,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,14131725755552756429,15257227902535282716,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4020,i,702589369218176913,3653431451565267779,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:14
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,12335657770239061106,2152402765262432565,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,9908401684472839148,1104374777833218632,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,4293093577989539216,3440782343817291919,524288 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6088,i,4108340673257001973,7537282562583615047,262144 --field-trial-handle=2460,i,8760769095270769807,13593012871096242121,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4ac248a97a71cd6fe4e2d228643d1e6475959a7d16b4da7cd288d47c34f5db9f
MD5 a4644f38ecd1121dbcbbef02e2cf3c83
SHA1 e8beb3ec69cb9205c8f9710c7cc824b8d24249f9
SHA512 bf979a25077de1134fd864473dbb5dd551e1815b778f45c48e2d59b989c5d5ad3fdbcd02f46553d26662ea164433429e9a5e5a1cd57ec1dadd07de2ca711e4f8
TLSH
T1895178A223FF04F1D7B845B961D856543F788E5B79336F52A04523BFE957B0C141B810
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59df69.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59df69.TMP
Size 2KB
SHA256 d6906906b8f14b794f9992f4a9f3a00a6e7e480a655a7dcdc1db4e4eca036b95
MD5 99023dd8c2c2f62d4edd3f19453d725c
SHA1 951aad244cd94eae4f95ef9ef5213f3d7623acb5
SHA512 dd5bbb8fc9b36f0e54a8ed0e83325aa6d024e3df7b988852a21186a32c188532a4d968a56600e6fe22bd70d4ee4a78d760de04517dc4ea111033aaa1a7deae54
TLSH
T13151A8A623FF04F1D7B841BA61E856543F788E5B79336F52A00523BFEA07B0C241B820
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 fa635ad767c0948630f998dc106664133a093c650c6f96207e45e76eeac1d85b
MD5 2f75abe4bed318767e659329890f300e
SHA1 68720dcb65a87e0515ab6f57400343037295d8a7
SHA512 a0a24e1b32c555e15fa28562c4c58a57918e26031aa0b876e773447b077b86904f80681a711e02ed937f9ef77d227075568ac0f8939ed77f0ff571868889c06e
TLSH
T14C61AEF7C3E8837E891196F0AA157E2BCD1D0516432C3C6A89E4AE1BA3E24B1D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1a96c8a68391f5bc6bc80f3c79b5da3f5221036a4c9cd7a62a4985e5b6b28cb5
MD5 281f9fcbaf5e42f0053049242b6d711d
SHA1 8b1377bf66f75230075098d9c1497bd71448dcd0
SHA512 c922f05bd432f7e42eb9f6296e21d1c308f12554df3da5ad496ca5896f7e80fde982f336c858548f022b3a41334c636954f86c62d652cedf1b83ae76901803a7
SSDEEP 192:sxRTMRIbk/fwsALKrjD3zoA8p4B/g6+WNIYE/+iK0GCIgDIJ:sxRTMYk/fwsAL1I/5ITlI
TLSH
T1BC32B716AD28A97B8CC7D21DBB65BF93D2F9503261D02E48A6FC961C04EB6DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 657abc1581d3aac92f93e47ff2430128cfa2bff3fdc5b08f6ea77e6c809fb8c9
MD5 026491ad4e46d3f259e4ff5fc63ec324
SHA1 712d8d6915d81283b5fa8df8eaaf3061958bdf12
SHA512 b95d078c9d75b2271242512852e1b3420f0b3b56106b2139c51df50cb807e9c4c33341a3576df03eca6d01f9ab35fc433275416d3c8f8bb731c40041a9f88401
SSDEEP 192:sxRoMRIbk/fwsxLKrjD3zoA8p4B/g6+WNIYE/+iK0GCIgIJ:sxRoMYk/fwsxL1I/5ITls
TLSH
T12832B7166D28A93B8CC7D21DBB65BF93D2F9503261D05E48B6FC861C04E7ADD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8be8b19999b941b349781ccd06f34744c56ebbb65cf73c728a4af32fb3cefcb0
MD5 fa7d659f0a9bea9c028a4b164a9c4d09
SHA1 70456af035fdd23d75d4f1a3d1fb17c03928977f
SHA512 59667a2fc377f90bf4fc637d5b7ede42e86e73f34b91210434754a91ce789821ed03a464c149d3383fcc29e73ae514848d7c7f633483dc880e2734ba934bb3ff
SSDEEP 192:sxRTMRIbk/fwsAnKrjD3zoA8p4B/g6+WNIYESoiK0GCIgDaJ:sxRTMYk/fwsAn1I/5IYlC
TLSH
T1E632C716A928AD7B8CC7D21DBB65BF53D2F9503261D02E48A7FC861C04E7ACD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5ffca29ca104b703ba4d692aecfe8167b24f9430cec035927438b533ad1d0804
MD5 b352fc064f0a55095ccc881212c39939
SHA1 51b2d2d0bdd2faaff5a200e5e8eb1d03d764f36e
SHA512 54daa191a17b3881da968c54d193a29a8040a5ef0b2313545d0237cf7b65109aa5aee7ddd6c264ee5fafd359a29baf308540bd7be9fc7d3a0d346b299d75eaf8
SSDEEP 384:0OhQi3gfCtgHZFfeQKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwY9VHRAuroZCA:0UQi3aWgH7feQ8F1+UoAYDCx9Tuqh0VT
TLSH
T1CEB2FB2B600DCB7E5F804AADEC296FD76D9802C79A588D4047FE994C03C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 12474e2ffe97f4380df418adebdfa514c6fcfab11118e371fcf7ca6992dfaa3b
MD5 6ca24135754562746887dac14ae06483
SHA1 98a5831e4da340ae9b0923de95ff83ea96985b30
SHA512 fc4542d4c05143bed2811b856220f120e71d500ce53374570d9d54298a9f87581ce348a8b1b57d6a5256139013891345962718205c2f617068edcb1cab86619d
SSDEEP 768:DFQQ3HwgpfqGuIDHqRtnK48dHeByERRFzjK3YWMgls:mQ3PSGhHqe48dHSyw/gMgls
TLSH
T13DF2AFB15D948EBB9CFBD789BA477717AEF08113C5D8A66492DDAE0E40871DC0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 79f910ba46148f4eb4668ea77791dec984f35a682e9138e01adfddd2a96bb649
MD5 92a4ffc3572be467b7c46ac39a1a4adf
SHA1 5889ff304db04970f1b4a6a90a1fffca307568c8
SHA512 018d8021be098f6b1a8995cce795a3211ed5ec5377680c99123023515dab6b95ee855046b14cecd7bcbe8a9b32837fba680447133e67aa6dfdea28ed345a8e3c
SSDEEP 768:5N3+fqGWIDHqRtFK48dHeByERRFzjK3YWMgls:5N3+SG5HqI48dHSyw/gMgls
TLSH
T182F2BEB06DA45EB74CEBD3897A437B17AEF0821385D86A6485DDAA0E44C72DD0307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e201bc1f2d140d2bf4d2009ca3e3fae68d71a5481fb5450346721d898c7b31b8
MD5 5b8e0a790fd6305b47406ee1e021f941
SHA1 504518110f1275d8e7ec4744a655dba588f92f36
SHA512 2cd4158bcf695506d252e335ded1e03290b662358c59843cd3cbd16c0a014f4796835675041160994ef86ecbd75ea775eb6085b163633d734134b096403f6eb8
SSDEEP 768:2rv+4UNbdf39qGJyDHqRtXK48dHeByERRFzjK3JWeVH1SCj:2bsbJ3oGgHqu48dHSyw/7EH1Z
TLSH
T10603CFB198685E734CE792897583BA177FF4821385C41BA4C4DE6F4E85874DD130BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5e48aed0c80da81427f978d5e7df3e825ca580957bfbb49f2da7cfd4769a0e5c
MD5 42ff1bc7db9cee4d004e3d8c1eba3dce
SHA1 0de5cbecccfb453a7966ef676d2017d971b83f35
SHA512 6cff13bfffa87862e10989f738deeeb7508097ccf296e17f70e30a691cb0658fa45eb0d214f8112e0fa7995ebd965fe811d4a6cc11a04e476eec16a9546dc24f
SSDEEP 768:bN3BfqGuIDHqRtFK48dHeByERRFzjK3YWMgls:bN3BSGhHqI48dHSyw/gMgls
TLSH
T144F2BEB06D645EB74CEBD3897A437B17AEF0821385D86A6485DEAA0E44C72DD1307C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d4e9369d9d56c4b871203110a3300d29e59cdbeeb369973e743aa30df41fe282
MD5 81345710050a4c88ca11fcaa1552b095
SHA1 bfeb2e26c4c6448fd9a20224e8b412007041c99b
SHA512 87db8ada2b4f7234cd272409e78f002d69783c969ef1273835ed648f3be8ecab967c8c64c0f49f4fdcacb9b5d9e4feb9ba60b61b5cf6b12d42671611671b91c1
SSDEEP 768:Qrv+4UNbdf3eqGWvDHqBK48dHeByERRFzjK3Y2eVH1SCj:QbsbJ3nGCHqI48dHSyw/YEH1Z
TLSH
T13F03CF71A9A85E734CEB92897583B617BFF4411386C41BA4C4DD6F4E86874CD130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6330a5c-bf20-47b1-8311-472569e95a14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b6330a5c-bf20-47b1-8311-472569e95a14.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download