af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 05:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-y7mu7r.html
Size 214KB
Sample260930-ghmnxax18l
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
996	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2251218687-1689653882-3767565116-1000\{84413A2F-A277-421A-B740-3987E4C06548}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe
5320	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5320 wrote to memory of 5604	5320	msedge.exe	89
PID 5320 wrote to memory of 5276	5320	msedge.exe	91
PID 5320 wrote to memory of 996	5320	msedge.exe	92
PID 5320 wrote to memory of 5276	5320	msedge.exe	91
PID 5320 wrote to memory of 5276	5320	msedge.exe	91
PID 5320 wrote to memory of 3684	5320	msedge.exe	93
PID 5320 wrote to memory of 3684	5320	msedge.exe	93
PID 5320 wrote to memory of 1352	5320	msedge.exe	95
PID 5320 wrote to memory of 1352	5320	msedge.exe	95
PID 5320 wrote to memory of 1352	5320	msedge.exe	95
PID 5320 wrote to memory of 4432	5320	msedge.exe	94
PID 5320 wrote to memory of 4432	5320	msedge.exe	94
PID 5320 wrote to memory of 4432	5320	msedge.exe	94
PID 5320 wrote to memory of 3908	5320	msedge.exe	96
PID 5320 wrote to memory of 1172	5320	msedge.exe	97
PID 5320 wrote to memory of 3908	5320	msedge.exe	96
PID 5320 wrote to memory of 3908	5320	msedge.exe	96
PID 5320 wrote to memory of 1172	5320	msedge.exe	97
PID 5320 wrote to memory of 1172	5320	msedge.exe	97
PID 5320 wrote to memory of 6000	5320	msedge.exe	99
PID 5320 wrote to memory of 5196	5320	msedge.exe	100
PID 5320 wrote to memory of 6000	5320	msedge.exe	99
PID 5320 wrote to memory of 5196	5320	msedge.exe	100
PID 5320 wrote to memory of 1884	5320	msedge.exe	102
PID 5320 wrote to memory of 3296	5320	msedge.exe	106
PID 5320 wrote to memory of 3028	5320	msedge.exe	107
PID 5320 wrote to memory of 2960	5320	msedge.exe	108
PID 5320 wrote to memory of 4048	5320	msedge.exe	109
PID 5320 wrote to memory of 4048	5320	msedge.exe	109
PID 5320 wrote to memory of 4804	5320	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-y7mu7r.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff8cef6c188,0x7ff8cef6c194,0x7ff8cef6c1a0
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,12384823014532582661,9473535228727789531,262144 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1712,i,900264771685650274,10846426697419844928,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:11
  2⤵
  - System Time Discovery
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,1257102693640915776,4382019110097947561,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:13
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,6772215251143496391,7509556970094379029,2097152 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,13494356037943343609,6557369667149151567,2097152 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,5776961243511437684,15344386428392668989,2097152 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,17235243515160083473,869317070639698872,2097152 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:9
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,3364966474016317559,16206805450604750065,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,7248217356420578558,6446089969477120415,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,13649859905471908650,1354675782616101852,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,13649859905471908650,1354675782616101852,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,7324352469463710115,8212381047786743164,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,8646928077989741766,3627511529555485590,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,17788906698018432830,15254293682940010416,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2772,i,218866268855383986,8706102190852998995,524288 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,5293162452385087322,16956774646969713989,262144 --field-trial-handle=2348,i,4193606130356050654,15755538121726227988,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ae4519203ea4a71f8bb5a86dffca3b288f02f1bf4cb8d6f78e8a591b676414b1
MD5 1293a304484c7d4be275f1eb20c69a28
SHA1 b568174debe43e00bc9d8880e0c5166dc6720312
SHA512 ffd84ca0277d7fb25239662676bdc1988ee3267dfd6a7a17da4c4ab32edd7fa146f36c8d8b2c5f1b06efedf5cf636eaa55943e5f89902c62e6a914ebbc3ae1b7
TLSH
T143D02BB1E0DD8473C0503078000581815215F842BEC555801F25D07C091014C234B10C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a23025f4d05b749cd64019222483e40f71e2bd4380052e2b64a234eb0323dd12
MD5 f2999f57642ce17248d9900b8034961f
SHA1 5a92b97bdc3c0e5222e917e766218a9ee7568f1f
SHA512 001c4dde433f6d4b3121bd2e5736ab1443818c9c8ef22f8298c411039f23f15532e8510ef806e0f54b26c4ef31db9b77ed6c750a42b27167e98f8b691edafe8f
TLSH
T1F4D02BB1E0ED8473C050307C000681815205F8426AC555801F25D07C091014C234B108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 40b1d341359389e903d73b725f80fc1c1aefcd4d379297e4a062b078b93dcd4d
MD5 3bea2053c8cfaa4515aaeef881b61815
SHA1 b401be1e209f663b4bb15e569a9c63dc8c5fe845
SHA512 8db3a41db4a52e68b48d304ebafad04a0e7b6fec61f5570d0f5d17314bd59378f1f53b443a3c01cf66c0cdd5bc99076b6b25f76d94400bfbb519ce7e0cc8d2b8
TLSH
T13061A8B3754DC077F7BC8B3C95D9588F7BB8A9D05A831DD2049BEBB454063274289718
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4dc7953f2f3af6167141d8adf498feb7bbe80fa2654ab7b7d81497ad2664b996
MD5 68e8badb0e169ed591b872a9949c3937
SHA1 2879f6019d7d79a44b74c14859a990c2b776fd4e
SHA512 2a550237e52917ac55c466eff3cf681c19d24896dfe7b4710752d2d2374d45bb16697bbc3ff903c3e1ed9a0d839baef004bf1dbf6577cd039e7ef3f4eef266a3
TLSH
T16261A6B3754DC037F7BC8B3C85C9588F7BB8A5D06A831ED2049BEBB864063274289718
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8d4a47d0ca591b19e646c368a9472c7043b3703253974716a7fa307c5fafb0d3
MD5 9defd256e8ba9aa19ae071c1a005dbb5
SHA1 b6d1e0cce69435110e92dca2a512bd5465827677
SHA512 0638c785687436600fe429b46477bc1dad721734c086f867e895bafa6f35b076cc944e7dbf241789cbdb4591076e17d32431ea036ba7bd6b5c59a774ca74a96a
TLSH
T13A4170F7C3E8867E8D0156F0AA14AE1BCE2D0915431C7D5AC9E4AF1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

dbdd0957-0f01-4608-87f8-642012101bb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dbdd0957-0f01-4608-87f8-642012101bb7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4b90972bf80612b44b59e39a583753fb00f17f65e6ca936aa5ce401c5b97741b
MD5 153cd505c637d8bc86b7c6ea82e52b1a
SHA1 47d02f800709cd18b2e6e10de79289cb576e140a
SHA512 5af4a06c7ac6a4123970a18f8fd44c97c6996384ea75d8279407dd98d60f21f8e5df213503a2c45f5b0557a874e014d83562e639fc3900e9db5641fd3d5ab33b
SSDEEP 192:sxRNRib0/ftsbQ7R7HDzoA8p4u/g6+WNIYlac+iGuIgIJ:sxRNG0/ftsby7Hyn/5Ies
TLSH
T1D032B8156E68A97B8CC7E21DBB657F53D6F91033A1941E48B6FC9A1C04E7ADD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a30eef1407f8af90ae21e2ab7b49466ce8bd1ee2a6d0d7a2cbdb7d5b4084c220
MD5 f67453e81f65d26b4d7edb53a62bc8c2
SHA1 8d1187ffa8346bc850bac0834c95f92c4a774d70
SHA512 6f14b2a4873f40c36fce9633c073dbf99fc502a1c39eb685cc848265b7939289b567b231e18ad88be6a3ede3d9cb5350687d1a3368e0dfccc5b13ce9e9d4d584
SSDEEP 192:sxRiRib0/ftsWQ7R7HDzoA8p4u/g6+WNIYlacaiGuIgDDJ:sxRiG0/ftsWy7Hyn/5Ii5
TLSH
T13D32D959AD68A97B8CC7E21DBB657F53D6F91033A0941E48B6FC9A1C04E7ADD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1e6d364c12c77df93461e89210835f169cdba9ebff2f94822bb58875e48d0b7c
MD5 9054c1a949b2670cc41ea06ab419e607
SHA1 6400b01a3ad692309d80969beaf0a032223914c6
SHA512 626aa358b60a345dd0ea9bdde70c86d0a01f3a6fbbed0242da21cba49a15b58a95cdf8a26fa7f5f411a9d8b4597da1138366519af216cde464b28eaf80f7ad5f
SSDEEP 192:sxRiRib0/ftsQQ7R7HDzoA8p4u/g6+WNIYlac+iGuIgDtJ:sxRiG0/ftsQy7Hyn/5IeL
TLSH
T1FB32C915AE68A97B8CC7D21DBB657F53D6F91033A0941E48B6FC9A1C04E7ADD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0a157dbe105b0200c4aa09cd0dc92e41fe4ab4ab976ae0cc00d6c5c92a0a37f4
MD5 2ca441f39275d975373a70432c9a4ca8
SHA1 82b1a769d22c08d341aa2dd24b53be5a07a31a57
SHA512 a33f7aab44587f5ab652685d2e30d2a6975ba33aac2e98ef1a8c7f82e4ad5336ba4fd20976936d83c7b7ce759c202b40d68562593fc8e7c5a1819a4eae54498b
SSDEEP 384:kWdRdcVfCtgSQFffTKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV4A9+mRfCroe2R:ksRdcJWgSwffT8F1+UoAYDCx9Tuqh0Vu
TLSH
T1A9B2E93B640CCB7E8F814AED9C196F976E9C02C796588D8047FE984C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

27a49d5a-8759-4d6c-be31-321dfc5f0b90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\27a49d5a-8759-4d6c-be31-321dfc5f0b90.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 32b2db2e76a3618f1eed87c96fb19bfe481ce658efe5deb6f81b21d91946aef4
MD5 d4e84093c28bc4a2bbf6704aa7c1bb81
SHA1 5af975b97fae4644e3b5940bd649f29ad85a5c84
SHA512 07129a46a83c1b65c607a881154aaceab11232d9625a6faec9ab48b87165e6dd95844e614da52ab5b914a7a5cd778e76cf44e230077c6f8073593e81faf651df
SSDEEP 768:E93CtK4X0SeSFajLktUnqMwQi5BgK5/CwYcZT2s4W7:E93CtRGHTVmBg8/dp2sH7
TLSH
T1A3F2BE31ECF18EBB5CFA9244B6867702AFF48157D998099498EE5B0D02D7DED130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 12f87f0bfecc332cccfaa53108337c3709e9bc4ddde7c4011734f5302d114da3
MD5 75fff5fe8c4e4b215330d052042e5500
SHA1 77d50f64abf9144ddd0a431e1a99fdbdc9ab9992
SHA512 ff28a3455e412eb21dc0fdf4254d04c75bc81b554909ced7b47fcb76021efd97944d2afb96f3c5681fda48511ef8883e8290767166af17fba773a9bd3be71082
SSDEEP 768:g93btK4XmSeSFajLktZnqMwQi5BgK5/CwYcZT2s4W7:g93btRYHgVmBg8/dp2sH7
TLSH
T10CF2BE31ECF18ABB5CFA9244F6867706AFF48157D998099498EE5B0E02D7DED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 95b3d2b205196c75481197bfe50aefc6d20f5ad6ead5a1ed7d5fcd818bd22651
MD5 1b3b8da4babd679a08dc3a8c52afae69
SHA1 5c92af3388055374648f111bdfe9a3a9d17662b9
SHA512 44582b279e85de148d385bf56723c993f99999f7473515600a72b52bfc50f0f30c1b3bbca36b49e8e01ff47ddb75662009dfb29450f0260eb7bec1797211d735
SSDEEP 768:OFQB3Nwg4tK4X0SeSFajLktwnqMwQi5BgK5/CwYcZT2s4W7:lB3EtRGHTVmBg8/dp2sH7
TLSH
T1EFF2BF32DCF0CABFADFA9B44F6867302AFF041A7C999459496DD5A0D01979ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d54aa71f6075766f84c31f2b6934bd08389736338336d55556f8c6bbc6fa74b4
MD5 850e10d12937c9426e306bbfa4b31d75
SHA1 5326f480fd2fb743bf6a7fc41c030a4b38dcf414
SHA512 7d6cb4b0abdc935903f8a5c4636df4b8bef58d52586c690412bb2a7e417eecc1522027264f26fa735e85d3a278c63a22a5fcede6d25c32ea084bb027db380478
SSDEEP 768:O/UxvxjgC+Ft36GLESFajLTnqMwQi5BgK5/CwYclcA8Dea:DZj3+Ft36fHTVmBg8/d2A8Sa
TLSH
T1EB03D036ECB59D778CF69240764A638BEFF441A3C584099849ED1E0E06D7AEC5307C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download