ace1baea808c9da44ca37a4e23855ed62619cd594266f175d52301df9ded3054

Resubmissions

25/06/2026, 01:05

260625-bfmcgagx2t4

25/06/2026, 01:02

25/06/2026, 01:02

25/06/2026, 00:33

25/06/2026, 00:27

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 00:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 14KB
Sample260625-awk9nsgw51
SHA256 ace1baea808c9da44ca37a4e23855ed62619cd594266f175d52301df9ded3054
MD5 c516a983ab025d7f6678ddcaab54e233
SHA1 8c0e27945572bb2a36f8588fd959b7af1a50de54
SHA512 8fbdee5ea74518ad582e583a652e7a6754eccc7fd2da0753bd9a5cec5e10e20142956ca59363051510e3172308f735acfe92cd55e95ba1415e4c941963bbf19f
SSDEEP 192:pJdO8blxv8bPr38b15W7I7LXM9MyI8bSzggbYMbQKkMbV1rM:pRblGb4b1I7TaSb8ggbXbQKLbV1rM
TLSH
T18B52C77640B4012E530062D4B526F65D7E53824BB3A54B88F3AE14A2BFD1DEB84F7BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3932	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134268212477486929"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3839916939-1319118069-2256772647-1000\{875567F3-35FB-4C15-9115-81BB02E63334}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5868	msedge.exe
5868	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe
1556	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 3252	1556	msedge.exe	89
PID 1556 wrote to memory of 4152	1556	msedge.exe	90
PID 1556 wrote to memory of 3932	1556	msedge.exe	91
PID 1556 wrote to memory of 4152	1556	msedge.exe	90
PID 1556 wrote to memory of 4152	1556	msedge.exe	90
PID 1556 wrote to memory of 5856	1556	msedge.exe	92
PID 1556 wrote to memory of 5856	1556	msedge.exe	92
PID 1556 wrote to memory of 4252	1556	msedge.exe	93
PID 1556 wrote to memory of 4252	1556	msedge.exe	93
PID 1556 wrote to memory of 1328	1556	msedge.exe	94
PID 1556 wrote to memory of 4252	1556	msedge.exe	93
PID 1556 wrote to memory of 1328	1556	msedge.exe	94
PID 1556 wrote to memory of 1328	1556	msedge.exe	94
PID 1556 wrote to memory of 2596	1556	msedge.exe	96
PID 1556 wrote to memory of 2596	1556	msedge.exe	96
PID 1556 wrote to memory of 2596	1556	msedge.exe	96
PID 1556 wrote to memory of 3496	1556	msedge.exe	97
PID 1556 wrote to memory of 2896	1556	msedge.exe	98
PID 1556 wrote to memory of 3496	1556	msedge.exe	97
PID 1556 wrote to memory of 2896	1556	msedge.exe	98
PID 1556 wrote to memory of 2840	1556	msedge.exe	100
PID 1556 wrote to memory of 2344	1556	msedge.exe	104
PID 1556 wrote to memory of 5632	1556	msedge.exe	105
PID 1556 wrote to memory of 2932	1556	msedge.exe	106
PID 1556 wrote to memory of 240	1556	msedge.exe	107
PID 1556 wrote to memory of 240	1556	msedge.exe	107
PID 1556 wrote to memory of 5868	1556	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffcb2f2c188,0x7ffcb2f2c194,0x7ffcb2f2c1a0
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,5801763904911912952,6096172324927690075,262144 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,8665565116891962752,2458502323263057428,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,8599836902394804957,8376140443426804506,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:13
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,5605187463743379445,14176197948741088401,2097152 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,13332555563063510123,13042297377479639026,2097152 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5084,i,11109475091367957752,5845801457887114556,2097152 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16091229477691630222,18146169050757308018,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,14991761925652146330,12738948264350618358,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,15063360558086266381,5549787626378950264,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,15063360558086266381,5549787626378950264,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,14363266189909419764,9447304108086034148,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,8093173688802971353,5081364660454888259,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,11893174958326040022,9063720473994311865,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,9128348403773394501,18194725172429706457,524288 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6440,i,10856842247191805206,14030383690228615003,262144 --field-trial-handle=2272,i,10082984803046989934,6538278742491711300,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5868

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 83748c5f59c12f467f96b0d21c3c9653419dfd0271c8efbdeebbd6ba4bd7548e
MD5 96bfca4318642edfa521d002be0f096d
SHA1 447f1b34ddedc860a8f0bd0c6dc12c229624acab
SHA512 b49889400d8441bd0f61eebe0a2489d48e83671a4d77bfdef519545878aebce5aa04d5e498b1e16dc02fc2a5990edce5232840f2805bd3cf047ef33c92fa70f4
TLSH
T112D080277919E851C0561171583DC779561941473EE6C20F79D5F04ED8D645073D7543
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 14064fa4c619e556a9645ca0c338f8b63e4b02e7b9b90cbd48f270130ba8e354
MD5 1f9a8c86e1e1f102231a8764b6b01ca7
SHA1 ceaf2d1974fd1233f93e1404fb9e3e924dfdd271
SHA512 1dbecc849733748cadb584a24e7554311dfed001a65d59ed7d1cc3ba8159e7afe987bf0e435e78e54021e46d575adcb6feaa95eb43150710a350211c0aadd974
TLSH
T162E02B9AC961983708FC072868615747EF5513673740994F3A3E87098FB1F3A4286C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ecfda1bdd4b399b6d5a67d528d643e33dd7d2bde5d817104f1c6fa15de69e92a
MD5 da838b25e7a2a7e9b7312fc2d9d992cf
SHA1 c014959cecdca86857daed347e6e98c564b3f72d
SHA512 1433c46d6552103563e84ca8e49f2c6ce4c168620815ac99da5f5f8ff31eae96ab983b8b92573f16ade588d3a21dd37a3667a49b77d50b5cec68b1a10f7d2706
TLSH
T139716FD7C4A20930EF354AFD60E4E4993BF0579B06177F0D2C80A478BF06B9659E20AC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 e332f6138dd6d8e7cf432370a674a55088ba8aff642cf6d480668df924e58aec
MD5 156f44343131adf50ac12cd45774816c
SHA1 c6c9f85253bdfbe748be6e0a7d0f6b8232d11365
SHA512 af1a601a53f7eca9029abdeaa8d1599ea1424f1613ea64e6a7b70c3df336783d69aeb7f56221993c67479fc800f9bc5dda212bf42c8a79478d85534ef380b9ef
SSDEEP 96:DbS1vO7VwtUFEeq2dpaij6CrzhzEwrjXExrzupx:D+1Gxwtjeq2dpaij6CrVzEwrj0xrzgx
TLSH
T18FA19AB7C2D8827E881156F0AA247E2BDD1D055A82283C5689E9EF4FA3F1471D24265F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fbf3cb33eb69c9a602f6fecbcc32719e32782228b330ba2856522086e5c41f66
MD5 ca86f5b8d120ed3bb3d3d1949f95de6f
SHA1 a6eda4c01f87a9528fd27bcb50782f19586fbc10
SHA512 e79d1a1f3ebb84ae4efb6bb791841896e00267d8ca7207237f3bef80a7e0347f2449736be9ee3f18f8eb82b0c9a0eb44a76bfae6d1ff38aca49db42d1aa26555
SSDEEP 192:sxRLR2yMqZjK1Ml8wF4/fZsIS1PZbTqzoA8peu/g6+WNIYzlU+gDFGWIgjBJ:sxRLnb4/fZsIS1RbjV/5In5DljL
TLSH
T12D62C8155A38997BCCDBD219FA857F53D6F81573B2405E44AAFC8A0C04EAADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 aad2b01a6d50cc70ab375c0b535711b43ad7ed4e7d4c9e0e951d47a61e136085
MD5 5dfe530449d6959fda4780030e57485d
SHA1 d9f80bd70587cfa5322cc4c6c0bfd874321c3724
SHA512 a1b9b71d0bd4606370a6a281ced256163308bce2c14b207231425290e285e38850a6f606abef92fc6450168107a38e515de44ad38ab65f0b963a3eedace344aa
SSDEEP 192:sxRLR2yMqZjK1Ml8UQzF4/fZsI7SVPZbTqzoA8peu/g6+WNIYzbU+gDFGWIgDnBJ:sxRLnqp4/fZsI7SVRbjV/5I15DlDL
TLSH
T11962D9155A38997BCCDBD219F681BF53D6F81573B2415E44AAFC8A0C04EBADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 33dd98e0921bbac29f21fbbea3f71f7d7f82ef0537394a8e7f53d047e4746360
MD5 b7fcd0cc168bd1a48eb467e8f8226400
SHA1 1a93e64b5d5c89fb0011e93dcd71c98f92724945
SHA512 b6db22b17a36eb3c19e57f72e7c5cc11238e5bf84ed80c285ee741befff42d0c85c4ea2830c6ab2d34be4eb0a7fd71364a32476da31d1d10ba31f695aff67469
SSDEEP 768:BawEOlWgfDfEN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJLfaDro68Inrw8kJPK:BawEOlWgfDfENu1ja8baw68Is8kJPK
TLSH
T1B9C2FC2B640CC77E4F845E5CEC3AAE976DE801CB9B984D5447EA490C03C7BEB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 304616bf73b691d1519599266d181c030876a478f5bafffeb9337b629f58419a
MD5 8b610556295d8326e5612392484f2ca7
SHA1 92e6710663a896f92af17eb0116c44941af114d3
SHA512 7065970b2980ea2dc0e43d8533c6f08efd671dda466a6fe2b21617f4d1b3c9031b6de71efaa7bea29649d187901e4c075e1ca6138c2653871167012f2ef58882
SSDEEP 384:cdYt3tEJdTHLGHaR1xBprW9d6T9bLzwJbBRrn+gI4XIj++OT48TWe7sePwDt:cdYt3tEJdTHLGHaR1xBprW9d6T9bLzwM
TLSH
T17CB21911393E234138FE2908D1A5966F674230B3305AA63F3BBD64E60E67E015EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5858d9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5858d9.TMP
Size 149B
SHA256 f48dad623ea3d9018195e7eb359be83ebd8c6f8c0d5da3cb954dde7b191ef2fb
MD5 7687dd1caa97996ea4980c9eb3e034a3
SHA1 8cb229ff42b814b5d31077a961264b58abcd0463
SHA512 8eed776aee393d28c7cf78ecdf604940ad265674cf6e72942165ac6001e4dcb4db20e4ae6f0a95a444fcf04b69baebf1fab2462007d2cd5e5a0df19fc9cb6c04
TLSH
T1E1C08C52413284466B21D5C86435A24CA00FCE586CC1D9F88452B082207C223C001511
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ab750d11f310607d7de9a40e3af790beb43945cd048a2ecfbf77402287ca7ddb
MD5 dbec5999440033ebdf084f52e86d03e7
SHA1 34c14e0a9f1ad9e040b2668a88de585a23c71da5
SHA512 31508d668140c24d38d7e0053ff2fa1613641badaaa77ef436aebe23f303d073e49ec328554ae3c2a943f45f03a7aa0a46ce4f30a8e3f63490f7fc8d781a6d04
SSDEEP 384:nJiF1tNn/s3n9S78Ne8TUNTUlIRFhESuT4FTCfxVGVN+qxWuptXoIvmn15wbAjEb:gF1j+9mvwgtEk+V3AWufYImn12bfI0
TLSH
T1EAD24A32D864CE67EDE28AC9B74A7647DEE44163C68C1AD8D9DC1E4D01DB2DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 74fd0e8badcfe6800d1ab80e25994d149822820598dc644aba9287bca5e51cde
MD5 f82b6b272912cf4fd1a481e9bb0afc53
SHA1 def0fc6114c4be2f01afacb9754ed88b669f4e5f
SHA512 7f108dd6f17c13e22594878e76537524dae0977a21ca8b9da35f9c400362cfd80515d9b135f3730912bde8b73dc06fe487698226d9ad23f8ecd2555044843a98
SSDEEP 384:n85iF1tNn/s3n9SC8Ne8TUNTUlIRFhESuo4FTCfxVGVN+qxWuptXkIvmn15wbAj6:8QF1j+93vwgtEV+V3AWufUImn12bfI0
TLSH
T187D24B32D864DE67EDE28AC9B74A7647DEE44163C68C1AD8D9DC1E4C01DB2DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ec756b29f819521a140819b895a58aeaf5991d53b36ac5923b15ca7a6593e15b
MD5 5e21bcc79bd743a4ca1124be86061bd2
SHA1 00abf8763929242e883979353391a9cac45d5b4a
SHA512 afeec3b48f93f81176f989f6204642e65cabe1ca3ffda8c582701c4737d1d56e1b5723177749bda8db13fabc93cab4b9fe2d766971bbb71eae724ca6aa9b2b30
SSDEEP 384:njiF1tNn/s3n9S78Ne8TUNTUlIRFhESuo4FTCfxVGVN+qxWuptXoIvmn15wbAjEb:OF1j+9mvwgtEV+V3AWufYImn12bfI0
TLSH
T147D24A32D864CE67EDE28AC9B74A7647DEE44163D68C1AD8DADC1E4C00DB2DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 376399cd88206e2fd6952f247770c7b9d53934b3f527f05181da2dfc0cf08076
MD5 7c6fa91da2e13ff57d09a16038539a99
SHA1 affbb657b581e93345703ba1ea79e2026c0c1b96
SHA512 ea64088d97db3b21efcd45bee890e86572f7071ee45db4828a723ccafa5d892aaa77e82fc88ac45304d966d9207bb8ed381a0ba67325d74132bf60a40930acf0
SSDEEP 384:nUiF1tNn/s3n9SM8NP8TUNTUlIREhESur/xTCfxVGVN+qxWup05ITGT0IMu68Lky:vF1j+9lCwgUEzqV3AWue5i+0oMve
TLSH
T10FC23932D8A4DA77EDF64FD9A70AB64BAEF0016785D85AC8DAD91D0C00D72DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download