7ee1b37d497bc9c39684d84ecd19b7b566033304c7b8210928f1feb9327ecff2

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/07/2026, 22:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_674c8009-c120-4ba9-967a-35b113bb675b.html
Size 226KB
Sample260704-2pdd2aaw2n
SHA256 7ee1b37d497bc9c39684d84ecd19b7b566033304c7b8210928f1feb9327ecff2
MD5 a4501aa7229580df62739b32ae42bc7e
SHA1 bfac4998a787b4a38fbe009b13d734d36876b58c
SHA512 e4a93d45ac5166e97f4fa39e20af8a46b2f62b4a65f75b5f586a34740132685c2436db7c2118001512db577f681130d3798c08142369b9ed495bd53dc27115d3
SSDEEP 6144:FlPVQFHFzAj1vIfUoRBoTQx9RQkOMrq5UW/+KYF2UQc9+Sj6lbtdx5CQ:F8XzAj1vIfUoQTQx9RQkOMrq5UW/+KYY
TLSH
T1F534F1378811CF0118698C7D8375FFAAE915C7BED8A2450CA29EDB8C515ACB3ABD0D71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6596	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276787139035410"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2900715619-172032027-1873877232-1000\{88E5C764-F951-428C-BDF6-0759061BDC9C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6408	msedge.exe
6408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe
6320	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6320 wrote to memory of 552	6320	msedge.exe	89
PID 6320 wrote to memory of 5144	6320	msedge.exe	91
PID 6320 wrote to memory of 6596	6320	msedge.exe	92
PID 6320 wrote to memory of 5144	6320	msedge.exe	91
PID 6320 wrote to memory of 5144	6320	msedge.exe	91
PID 6320 wrote to memory of 5588	6320	msedge.exe	93
PID 6320 wrote to memory of 5588	6320	msedge.exe	93
PID 6320 wrote to memory of 6668	6320	msedge.exe	94
PID 6320 wrote to memory of 6668	6320	msedge.exe	94
PID 6320 wrote to memory of 6668	6320	msedge.exe	94
PID 6320 wrote to memory of 6524	6320	msedge.exe	95
PID 6320 wrote to memory of 6524	6320	msedge.exe	95
PID 6320 wrote to memory of 6524	6320	msedge.exe	95
PID 6320 wrote to memory of 5740	6320	msedge.exe	96
PID 6320 wrote to memory of 5740	6320	msedge.exe	96
PID 6320 wrote to memory of 1160	6320	msedge.exe	97
PID 6320 wrote to memory of 1160	6320	msedge.exe	97
PID 6320 wrote to memory of 3548	6320	msedge.exe	99
PID 6320 wrote to memory of 4276	6320	msedge.exe	103
PID 6320 wrote to memory of 4040	6320	msedge.exe	104
PID 6320 wrote to memory of 4052	6320	msedge.exe	105
PID 6320 wrote to memory of 2752	6320	msedge.exe	106
PID 6320 wrote to memory of 2752	6320	msedge.exe	106
PID 6320 wrote to memory of 6408	6320	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_674c8009-c120-4ba9-967a-35b113bb675b.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffef6c4c188,0x7ffef6c4c194,0x7ffef6c4c1a0
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,7866362936679438410,1182757415949578652,262144 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,11637704071372110052,4272279712446162494,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,4204271815711885021,650608018062081901,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:13
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3336,i,13331064331508510719,5882045277685228370,2097152 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=2840,i,13129892609404524090,2010725033022784893,2097152 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,9381706906986539739,13523914409224251386,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,3739829122303303700,408858513787398098,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8184547400753012421,7582347722121591064,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8184547400753012421,7582347722121591064,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,6334116421564838742,14979987909827899994,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,2046325903358236,12326307094752344214,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,9322212344559198124,13514611570049129033,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,2274954979875777129,7959015876481112274,524288 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:14
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,15402743988908379696,2977417884258456116,262144 --field-trial-handle=2204,i,4932215238186668564,17988493687444371248,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b363f693690aa479b03b10f13d837c7277e1cd8d6c10d7150235a6d4eee0f34
MD5 ddf8b13fdf9db751ce6cc3328e266fa7
SHA1 1cd0cf7ab6698157c24338d81d076859d18cfba7
SHA512 e7b35b46a0f47d516568817a1f6db4f2445e353959197912eea8a7ab8f6a257b9bc5ba855ad99faa8b859e7ac8c3141a43c223c051fe9bd656f75b6384e18fc8
TLSH
T1E8D08CF0BB297982D26534B2B5229711B2B140AA3A2BD6D1A4A0C50C8C3B8D9A786183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da3763f60ede3fa709aa0345487a9c5f026859c06ed1a1549de777571c438d2d
MD5 2ebd0330bb082497ebc47348c4ecee38
SHA1 f164cfe0a87fae91d8a0b0b31f0178ebf3aadd02
SHA512 294595e3213375937c97fffd24323394a2b90fd0b46d24771fcf9359e2edbe425b26aefe714432eaccd7516ab0d793eaa33eb35fa55b9df13c535af5d9da8f67
TLSH
T1FFD080F0B7197582D5653471B521971171B1409D391BD5D19090850C4C778D55745187
MD5 SHA1 SHA512 TLSH

Submit Download

6c70d7d6-d092-4925-9b62-2361763a243e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c70d7d6-d092-4925-9b62-2361763a243e.tmp
Size 27KB
SHA256 65366099ca5bde31d5d38e8a6349c5bf13b50c80d446dcbb2f821bfa85d22262
MD5 915fe7955187dcae598aeb8650f5e972
SHA1 235dabdffde979d9dbae78e1d3da7bbeba0548c5
SHA512 8c8a50a2704340d21b5529f8d2938dd09e7711e0b09b6ffda7a6c306abf71dddee2b94e846887dc964eb3243e916a111bb3b934bcf70d693a8114f162f30cdb7
SSDEEP 768:RGqOArWgzvfiX8F1+UoAYDCx9Tuqh0VfUC9xbog/OV5z9wQroPwdw:RGqOArWgzvfiXu1jaEpw7Pwdw
TLSH
T1DFC21B2B640CC77E4F804EADAC25AE976D9802CB9B984D5447EF884C03C77FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3838e0c9b97b740997025cc20f9894a4fb2fc1d09513fd3de779b19d7f969df9
MD5 339ab2331fb3aae4a95fd88c7e816532
SHA1 6574ff6ed98e60945fa77f8a7d8ad1edb5290a0d
SHA512 5703e993048ce770ae38db5cd87e9d20ad636253535d52856c3755705dc6df3c453a6d3e0d99cf03becd2767b8b650787c5242fb56cd30f29d5089d3da98f0d9
TLSH
T14DE02BEAC961EC3B08FC0F2C74924749EB50132B2B41494F3B3C920C4FB5276819187C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6fce67e9b0484156604b58665e7fd13e0bc914bbecf5b71310daee83336a7c41
MD5 4c21a6bab628522eabb5c61b068e02e1
SHA1 8b0614a5c6efeb3cab0723b5f555d132384c9934
SHA512 3bc428cee64b008796d5af17aa7ae175fd0a43e4d4ac65d6452672c7d74a779d2e6b4751e4b6fce35e8ef3a5025a004845bd896928c50e6cad2b05fee7a4587f
TLSH
T1C051AEF783E4867E991195F0AA14BE2BCE1C0515432C3C56C9F4AF5B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1fe618847397f6c1234ec1c4126db1c21612c6ed98d6b8769deb4378136430ea
MD5 25978ddd907aa8b36218c04d28210f6f
SHA1 5c972f532802d1a00487aa1c325eea7e0f08759b
SHA512 ce4fbaa9c6953bfccb847de920bed4398b38efb201167a83b82c7841591dd841646fc150e37c98e41f6f02f6ba68094813653fd514ef726d74a5b359c0258d77
SSDEEP 192:sxRARlyMqZjK1Ml8wFF/fXsj0XpZsGJlsfzoA8peg/g6+WNIYms2G4IgjYJ:sxRAqbF/fXsjWnsGrb3/5IZj8
TLSH
T17C62C8196634593B8CDBD219FA457BA3D6F81523E2905E44AAFC8A0C05E76EC211782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 608161f775d8c3b82b6ecd464f85457aa4e9e96d4232b5d3f264eb5e67c1c05e
MD5 e0e7d7ba1e97c7d39ee874bb85f0cac0
SHA1 4a39f9573a7d1235dbfe804656f97d1e6692fc1f
SHA512 79a1355f5599900d3fd7082ac1c1c254f9deba2736e4db8c2fabb6d15040312f04b9b448545ca1732cfa9e6fa9e71350de74ae838e74e1d00074b464abaeeb12
SSDEEP 192:sxRARlyMqZjK1Ml8UQCFF/fXsU04pZsGJlsfzoA8peg/g6+WNIYmH2G4IgDyYJ:sxRAqqIF/fXsUNnsGrb3/5IcO8
TLSH
T13B62D91A6A34593BCCD7D219FA857B93D6FD1533E1905E48AAFC8A0C01E76DC211782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 dfb915cbcc8a10ac8ffded2a7c4f4546f788158ccb7e5de28f8ee4d6c363cfcd
MD5 dcb5fbe57948ceb3d2b22dd28a0dbe3a
SHA1 d09ac46a28a4eea1fd54d3b53a9c2f5fc07b3c89
SHA512 2a76b59a34a88cb9235d875a2690cf1b9d2945b6b62762cb80ff63b18739a97586fb254282ebdfb25969bc537403c4bcd8810f9a9faaf7ba7a4ce77e6e58dd42
SSDEEP 384:9TqfDxl5UVY3bXp3ZUzD4BzSc7eCUG2XatW6AE3k18UFa20TWaseefCFeSo83Mtw:aR55IlHnOLRXxxindvm
TLSH
T159B2B05071BA2B00387D29099379D42F5A4630E230DEA87B7B6835E56F67E004FFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ba4de9ee8644f4172ae43d6a231dc1a564314a48ea7b9c9772718c0a135a6460
MD5 2839ad0d9e8ae24ba2d64ba64312266d
SHA1 3c843f889e207073b7932f04b6f41b2cc36dad43
SHA512 b5cfaed0d5f72863840097ff536676005b7f542f8b69f5d0e584676ff263d12e378ffafe870f8e6b65f163513f78a5e1ee09b23684dc725d9addb00035c4aefa
SSDEEP 384:nciF1tNn/s3n9Sl8Na8TUNTUlIRiznNDv1PX+fo1oLQSENWFr+gyIOObjI9G6w7n:HF1j+9U3wg6lopEEFrUI29Mn
TLSH
T14DD23936DC94CA77EDE64BD9B75A3A46EEE412A3C18C59C8DACC2E8C01D71AD4307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6028c8d1da04277ff9cdb5326ed301db1de53eeafe057752f83b19a383c83ef6
MD5 a84762dfe17dbd3c99dd5063df377749
SHA1 8a86808a0bcdbba6550dbdd7bf7d911f79993271
SHA512 26bf515a8bc9c6ff085b8fe631679201503ac5503380b1294b0a2e2d228f14dae8712aa32c72b65ca08086ecf82b0c26eea872976641bc5c47458de17e93d914
SSDEEP 384:nMiF1tNn/s3n9SI8Na8TUNTUlIRiznNDv1PX+fo1oLQSENWFr+gzIOObjI9G6w7n:3F1j+9p3wg6lopEEFrpI29Mn
TLSH
T10ED24936DC94CA77EDE64BD9B75A3A46EEE412A3C18C59C8DACC2E8C01D71AD4307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5bd14056af2b2834155cfce0fda0d94cdaf5df1a63a3f96498527d4623469aa4
MD5 a764f9c6d00f9a024d306f04532294d5
SHA1 171ae5a62578c1beded8b6e08856f9d1dcfec6b2
SHA512 fe878a212785f4b858fb5726d39bb30d32d0d0126fff25131065baea7b508efc716c208d1251aaeb95f0e02a5503501901b3f77029fd91e775465541fba2ff83
SSDEEP 384:nViF1tNn/s3n9Sl8Na8TUNTUlIRiznNb1PX+fo1oLQSENWFr+gyIOObjI9G6w7pd:cF1j+9U3wgGlopEEFrUI29Mn
TLSH
T1B6D23936DC94CA77EDE64BD9B74A3A46EEE412A3C18C59C4DAC82E8C01D71AD4347819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 026fc8f156b044570fa5e3401112d34ce26bf238fa1005ead8718a39ceafbdc8
MD5 d41794f76e94b879eb5756317816b8cf
SHA1 753ae0d538d4e5b725241c1f2bc437d5d48a6b95
SHA512 cb63621fdc3ef8a6c52bdde89569308a9109c02afb91a57fef8197987265fa7cece4317afcd70349ffce86ef60cb7271fc8475cfcdf80748a78e9df9663377d2
SSDEEP 384:nNiF1tNn/s3n9SsD8NJh8TUNTUlIRY0znNViHX+fo1oLQSENWFw+mn15wbAjEJva:EF1j+9RCwgstopEEFw+mn12bfJva
TLSH
T1C5C23836DC64CA7BEDE78FC9B7097646EEE412A3819859D4DAD80E8D01D329D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download