aadadd99909a3e414bfb2227477a014a0d3c4396e6686a37eedeed541a78c700

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
loose.html
Size 5KB
Sample260626-petbaaa12y
SHA256 aadadd99909a3e414bfb2227477a014a0d3c4396e6686a37eedeed541a78c700
MD5 7168ffc908d772a09ba50c50791b12ff
SHA1 03fc1bd6a9a3dd812a9bb0ad2037e742ffbeecde
SHA512 d28ce8d49129e32684c6cf3f23211ff93b58883926fa5acd7f068975e37a6defe55a70884c4be3b4061e8b7b7cb12bf4317620b3bff971702af6baff02fd094a
SSDEEP 96:PNyRtoXZzIEb0EaW87bDJjIph7dq64ty6c2rC1JO9+mmMUkaLvk1vYzueh8mvmw:PNgtkCBfJ8phdL72rGJO9+2Gc1AyMuw
TLSH
T193C15DF3A637812797B47F9424B1B36CA2257285BB059189E171D32D66DDF0B809C058
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269497045449252"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{1514E770-8FA4-47A7-948B-FD5922E3862C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2608 wrote to memory of 4308	2608	msedge.exe	89
PID 2608 wrote to memory of 2236	2608	msedge.exe	90
PID 2608 wrote to memory of 2252	2608	msedge.exe	91
PID 2608 wrote to memory of 2236	2608	msedge.exe	90
PID 2608 wrote to memory of 2236	2608	msedge.exe	90
PID 2608 wrote to memory of 5892	2608	msedge.exe	92
PID 2608 wrote to memory of 5892	2608	msedge.exe	92
PID 2608 wrote to memory of 4696	2608	msedge.exe	93
PID 2608 wrote to memory of 4696	2608	msedge.exe	93
PID 2608 wrote to memory of 4696	2608	msedge.exe	93
PID 2608 wrote to memory of 5776	2608	msedge.exe	94
PID 2608 wrote to memory of 5776	2608	msedge.exe	94
PID 2608 wrote to memory of 5776	2608	msedge.exe	94
PID 2608 wrote to memory of 756	2608	msedge.exe	95
PID 2608 wrote to memory of 4884	2608	msedge.exe	96
PID 2608 wrote to memory of 756	2608	msedge.exe	95
PID 2608 wrote to memory of 756	2608	msedge.exe	95
PID 2608 wrote to memory of 4884	2608	msedge.exe	96
PID 2608 wrote to memory of 4884	2608	msedge.exe	96
PID 2608 wrote to memory of 5600	2608	msedge.exe	99
PID 2608 wrote to memory of 4752	2608	msedge.exe	100
PID 2608 wrote to memory of 5600	2608	msedge.exe	99
PID 2608 wrote to memory of 4752	2608	msedge.exe	100
PID 2608 wrote to memory of 1340	2608	msedge.exe	102
PID 2608 wrote to memory of 1280	2608	msedge.exe	106
PID 2608 wrote to memory of 1616	2608	msedge.exe	107
PID 2608 wrote to memory of 1900	2608	msedge.exe	108
PID 2608 wrote to memory of 5932	2608	msedge.exe	109
PID 2608 wrote to memory of 5932	2608	msedge.exe	109
PID 2608 wrote to memory of 4396	2608	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\loose.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x288,0x7ffd221dc188,0x7ffd221dc194,0x7ffd221dc1a0
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,6098795881726655900,16061095752387863456,262144 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:2
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,15229213691849080257,2372379808990817174,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,16887788843406630921,17572021067148611358,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,18001100932528690083,6653177520113299759,2097152 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,6647382655245343720,3523931465350063393,2097152 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,7946395228154341752,3585947718969909537,2097152 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,7220645716418065721,9495111335068036013,2097152 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:9
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,5923822557075721400,14594040103105754261,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,15815705609915112327,6436556361062909453,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5249992125500519355,15696280715256226355,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5249992125500519355,15696280715256226355,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,9424681806733139084,2910114267277206322,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:14
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,2312699602360436933,6508312474443994296,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,8197512054189457002,13687848051449168306,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,6019115747117426934,12018728176040693755,524288 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5504,i,15906969157357726242,13919699076336140621,262144 --field-trial-handle=2504,i,8415583274286829019,14190286756192981443,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a161c2b02ac0e8507483705444d662ed6384151073fe4a8b3c0fab455e39288
MD5 f4053e2f8dc624226bfd3b3cb7b72b4c
SHA1 d67ec7790d0150e409ac909daaa604cc8e0ba113
SHA512 8d16ecb72dc858fae82f07f863be91cc5dc834c0c56c3946bf90dd0164ca1ee1eee1fd46095f0011a9c214350688819f3e7aba27ead10ae33543b3eb9bfbaa71
TLSH
T1CD613BD9E45CCEA2EB9731F583E122EE7BB4DC0B91132E1164DED07C9987B12620308A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3242148c4e3e9c2d1699e31c71e2626bff825cff7508dced3b0a1032865c5e3b
MD5 d64f7d90d4fec0c96ab449d48a1d7dc2
SHA1 c7f0e405baf0b2180e4bf1b76892ddca42462285
SHA512 7bff97ab77db54607b0d2e51dedb210925ab0e096d18e96369e9131ae4f63c5c2f3ed7631c13496b4405286c623bc45641eec1f310edb1ace0fab1cb50bce6c2
TLSH
T17F4177F3C3E8866EC91156F4BF146E2BCE2D0914832C3D5A89E4AF1B93E2875E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 dde1c2d0110c4c85309ba40279b51838c0528f73a1990e2e55ea273622a9f73e
MD5 a98902ded8b83dc087c56743a0212f5b
SHA1 13233d0baa7bb277f256dab4832863bea6e61772
SHA512 e40320c29dd12fc6586f3e3a5c47e2d976c472aa95f7a37fbd28af5b4943788cce05c0e5108c81c6702d4d62006394030cbb25621e5bca5b035c91d17eb480f9
SSDEEP 192:sxRDRmyM/jK1Ml8wF//foshoT+NkUDazoA8p4D/g6+WNIYZjKGNIgIJ:sxRD0b//fosY+7Ty/5IOs
TLSH
T1C652D815AA28597BCCDBD309FA557F53D6F81573B2941E44A9FCCA0C00EAAED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7e83a1337a477a4e66646eb7de7750af84565afeafa05714225f447292dca4b5
MD5 9878f66ed6c08f0ee89aa6b826caf315
SHA1 4c9c9ad1cb4f634ada02df1b09e18e5699281d62
SHA512 c8bae9426d9758272d8fe10fbc99582cbf2074a7d701d874d4d6f836e101d5da027cd8eb58cd481a247e80c802f230bad4d7b25e130630ce8ef7a1d5053247ad
SSDEEP 192:sxRwRmyM/jK1Ml8UQrF//fos/oTENkUDazoA8peD/g6+WNIYZpKGNIgDGJ:sxRw0qh//fosWE7TE/5Iq2
TLSH
T18162E916AA38597BCCDBD219F6517F53D6F91473B2940E44AAFCCA0C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 cae2d2faf910d7e697abc2ae53e65f087bc2b2c1f3a3b0dd0f77a96d3e7201b0
MD5 2b3b992a6ab1e1c85a03f0e450f206b8
SHA1 e483910b2bf2423bc95d8d3925ffe58e94375b4d
SHA512 616abc1e110b076fcde7fc4d3cf57b1db76a2af3f4d834fd4ffc7bec9a0738d05bd754c6cea5d849ae3215038a92ad7070af5dd013b906f6e260cf4efc25e2fa
SSDEEP 192:sxRwRmyM/jK1Ml8wF//fos/oT+NkUDazoA8p4D/g6+WNIYZjKGNIgDUJ:sxRw0b//fosW+7Ty/5IOM
TLSH
T10752D816AA38597B8CDBD309F6557F53D6F81473B2940E44A9FCCA0C00EAADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 438794a1b2811a791a5f517d560b01433e35179f73efddd7d8672ec83f30943d
MD5 714c06a55de667586720931d63b839f0
SHA1 ff484d8494b7ad8f8af053f372f609d9a360a76f
SHA512 9d5bf36270317c7bb379b23b3ac52b8c7592b6fe1e1dc0d2ad5ec08c07f82295af954fb2ff6ac32b235962fc34149a5274690299866d1a849ee1887a997418be
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQMro7ov8n3h:eOEt7IWgKgf16u1jaZ/QX883h
TLSH
T18CC20B2B240CC77E4F840E6CAD2A6E977DD801CB9B988D5447EA890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

6302aada-db52-4326-aef0-a7e1a977ab89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6302aada-db52-4326-aef0-a7e1a977ab89.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 8e1a13bb57c4188bf9b970855a6b9f637edb3c3f28cb531e456e7e180478f0e5
MD5 97c4adcec67f63bf8f4b480c51f3a50c
SHA1 09210cd526a2f43e3bf4dd13b07e9a22397298fc
SHA512 61032d6dc47d44aa7149ca0abfc47fc0d7d4958e0dcd8f7bec8139fcca97dc41b7d74d39ac33a10ffa78cba854bc393b9639a418e4f8cd81c0678715e9e4379e
SSDEEP 768:7jaeqD4MlshiLdMm530ZkSgPfcOTfBVDfBA9V5R4HTytYYqgHvPwKyjWtxUTL:7qcjhIdM+3+WfvfTfOWTwJ/yj22
TLSH
T18A13CF76ECB85CAB5DB296C0720336977EB84263C3C52A64D9DC5A0D019FADE130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7b8aa8a6964c8230ea9cada1a6eb27bc8f18c47c2616cad43545e443f8873a65
MD5 bbca71f9dc7adb643e4bba56afb674e1
SHA1 29eb244d15d141166d19d7a40e984f3ccfceb836
SHA512 8d3d24e2ca0484ad989c9681d5b1ea4ed12ba6d3733b20ff53a83d8d3675f39619a0541c64cd8fa41f934be5b00464867c18a979400389830c752892755a3a79
SSDEEP 768:wj+9T3JASgPfcOTfBVDfBA0V5R4HTytYYqgHvPwKzn12bfw:P9T3MfvfTfDWTwJ/Byw
TLSH
T1EAF2AE72EDA85D6B1DE2C6C57206364B7EE88263D3C42AA4C5DC4E0D05DBADE130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 80e21d376d6c565100442cf5aec339fbd27cf4e834b5dd0a1270b72ea3348945
MD5 c3097433558fc218ab01436941ed209c
SHA1 a2345222c8bf9b7c60d5f1c3cc60f9cc9702e64d
SHA512 8ebb69ec8301afaa8e85b041979742113868fc39b5c5495c1d4ea350e9c6cd3f25e13d883afc5847a5ff493e99701b475a92c55fdc91776ff0da0b5a8d45b5fe
SSDEEP 768:hF1j+9F3jwglASgPfcOTfBVDfBAPV5R4HTytYYqgHvPwKzn12bfw:g9F3OfvfTfOWTwJ/Byw
TLSH
T10E03AE73DDA88D6B6DE28BC5B6063247BEF44263D2C466A4D6DC4E0D01DBACD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c30783ce21ebef67c0c66c8fdeacc480eab043ea606eac9a552f15672f6517dd
MD5 d05a57f509347d7638e6dc15361593d8
SHA1 a33d13bccbbd8154af020d13715e9caf7ee65141
SHA512 8335911d8ce1937efc81039198f01fcfb15e27cb82251755a9a6bc4af10c8177866b5db4d47424299f094fc78dc5b8a1143059cb8025996587144c2507fe3d00
SSDEEP 768:EjaeqD4MlshiLdMma3LgPfcOTfBVYV5R4HTytYYqgHvPgtyjWtxjTo:EqcjhIdMh3wfvfmWTwJkyj2y
TLSH
T14003CF76ECB85CB74CB29685770277976EB842A3C3C62B64D9DC5A0D019BACF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download