54bdfd36803d6e04eb95010935e52096810520c12075051329c049a6859a8d1a

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 195KB
Sample260718-pd6j8aes7y
SHA256 54bdfd36803d6e04eb95010935e52096810520c12075051329c049a6859a8d1a
MD5 41fcb31f0056bd75dc9857ebe0367de2
SHA1 03a452a3f87aa8f1e4f01c4be9eb34f239b94f82
SHA512 0900394be719b0674c6ee30664ed34b4a1ce6f6b740431426f0828d86f7f4c166a16c7a2348023cccd65b5e40496244a8b55a0d107584fbd6bfce40e4edf8013
SSDEEP 1536:SnypfuDSppp18pQpiaRnbRZptnBp7sp/0pcnlVQKoxnAoxFoxToxTpunupTsph5H:Sy4OaOnINgAcQB8H8tWloRLxf
TLSH
T12F14C4B242F094B2A3662FC6A1E03B4F3E99610FEE8A7544F7AC27CC8FA5C554543C95
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3196	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288504403960493"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{84522DA2-23A8-4834-97E1-AE8FF4487281}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
928	msedge.exe
928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe
240	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 240 wrote to memory of 400	240	msedge.exe	88
PID 240 wrote to memory of 4344	240	msedge.exe	90
PID 240 wrote to memory of 3196	240	msedge.exe	92
PID 240 wrote to memory of 4344	240	msedge.exe	90
PID 240 wrote to memory of 4344	240	msedge.exe	90
PID 240 wrote to memory of 3388	240	msedge.exe	93
PID 240 wrote to memory of 3388	240	msedge.exe	93
PID 240 wrote to memory of 2640	240	msedge.exe	94
PID 240 wrote to memory of 2640	240	msedge.exe	94
PID 240 wrote to memory of 5076	240	msedge.exe	95
PID 240 wrote to memory of 2640	240	msedge.exe	94
PID 240 wrote to memory of 5076	240	msedge.exe	95
PID 240 wrote to memory of 5076	240	msedge.exe	95
PID 240 wrote to memory of 4936	240	msedge.exe	96
PID 240 wrote to memory of 4936	240	msedge.exe	96
PID 240 wrote to memory of 4936	240	msedge.exe	96
PID 240 wrote to memory of 5884	240	msedge.exe	97
PID 240 wrote to memory of 5884	240	msedge.exe	97
PID 240 wrote to memory of 5884	240	msedge.exe	97
PID 240 wrote to memory of 1748	240	msedge.exe	99
PID 240 wrote to memory of 1748	240	msedge.exe	99
PID 240 wrote to memory of 3712	240	msedge.exe	100
PID 240 wrote to memory of 3712	240	msedge.exe	100
PID 240 wrote to memory of 5412	240	msedge.exe	102
PID 240 wrote to memory of 4032	240	msedge.exe	106
PID 240 wrote to memory of 2536	240	msedge.exe	107
PID 240 wrote to memory of 3488	240	msedge.exe	108
PID 240 wrote to memory of 2096	240	msedge.exe	109
PID 240 wrote to memory of 2096	240	msedge.exe	109
PID 240 wrote to memory of 928	240	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffd0940c188,0x7ffd0940c194,0x7ffd0940c1a0
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,2574148026918328544,3012496157385408532,262144 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1732,i,7221139302971765097,5189343308191945667,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,5309399757784249811,1802680060548747835,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,9417634036319283922,18098883737159344522,2097152 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,1160232873756443231,5705314245337262886,2097152 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,7871824875271397150,18301871230392883157,2097152 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,665270713074324850,17602016723024327358,2097152 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,13445653117036188154,11699615789260395778,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,1204901955653371639,1466680902345823512,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,2485798401774735594,5319136627789613927,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,2485798401774735594,5319136627789613927,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,5173412515022293332,11250234725995361632,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,5031965408740470932,13616993814974675113,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:14
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,17435928923795630597,1440610539408225165,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,2615853135068732554,18226093933579229159,524288 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3788,i,13427692605907389216,3116982375962302758,262144 --field-trial-handle=2300,i,5785688280424682615,14459076293455263038,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 44d7c72ee4eabb82e27aa064e2be32025c3e009358f85b0563cab6ea02f3a844
MD5 47e98f4f515de1b0b24125874915aaa5
SHA1 538b98da914b2a5a713f25d889692dfd6375f4cf
SHA512 9e7524dd2d1e1067fa7a4bb763a3cd9f2ce10183ec3fcab840ba82c1f71e7b3d9e89b576a6af14051db815832aebe750eed7801ab7655e94769d9dcf0a4d8d2f
TLSH
T1C8316E708F342AFFDBAF45B657E24A9C3371885B37076E502364AEB48E89377201001E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ef45a1b-8b42-4228-b76f-93abb8d9a78b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2ef45a1b-8b42-4228-b76f-93abb8d9a78b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a857f5a791008205410d47200ed3ad294f47f5c6abb644a9a69fbde1285ce9d9
MD5 8bfea642920ed9e4f0fb260704183d00
SHA1 b797bd66c8c8fd133464874e0da76fd8a6cf5ecb
SHA512 7de21fe6d417ab3147c8ab76eebeac841be04e8824d15cb049a5d7c5190826ce91eb102e0cafe713ec2174c2f9377f113cc2d2c7bdec653a6bf3d3efebc571e1
TLSH
T11621CDF3C2E8567D894181F46B183F1BCE2D0814832C3E6AC4D4AB5F93F5871D24095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e08c6c2c54ef405389bcc69f9b3d5b366711e5e2262cd5b390210dbeb0a07cb3
MD5 005447503d6ad5a93440eff2f38aaa7b
SHA1 c273442039f435344512c54b9224334d5093eddc
SHA512 c257d563d9bf426e38956db352fd1084d3b33a15db779debe1fca58608113d862b5e9ceaa943cae70abe8ab2717677e9e9ccbb09c2db2d57206dc9dc02da6c01
TLSH
T17721ABF3C2E8567D894181F467182F1BCE2D0814832C3E6AC4D4AB5F93F5861D24095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 42778e377cc23e4573a4f1940f29aa8b9f13204b7d0a1b055a9ad141d9b056ad
MD5 cf4420e8c3af52c44f385098c0464c26
SHA1 ab211492912db1f5fd23f62ba4fde78cdf1f92ba
SHA512 1cfebecd9c12aca8377c5b20b7f2308c5648601d12d7fdc92c6d713d820f8a0aaeb208702a152cbe2fe08de7a96c4e4eada10059031e2d099d9007d5efba837e
TLSH
T10251ABF3C2E8866D890156F0AB186E1ACE1D0955832C3C5A89E4EF1B67E2871E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 66680922581442e5d1600d4c9e412d6aa51003be560ad1096a82f23317699b79
MD5 d0e8d1ab9e1bcaefe981eed4fbaeac44
SHA1 49bd96c8cd17c0628bfdcd8b570acc7e51479034
SHA512 ce8c9d2b43a02c48a74d7a5a56cdf85636f6bcc7e053d764b724a2ffc8a4edd1c7c695fc6e4e4d27c2205e2c803eacb1dc0a9bf6218e174a3075dd8279a5c90e
SSDEEP 192:sxR5RBb0/f2sqojwGxzoA8p4t/g6+WNIYoXCYeGLIgIJ:sxR5v0/f2sqojpsk/5IyOs
TLSH
T10D3286166D28993B9CC7E21DFA65BF93D2F95432A1D52A48A7FC870C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cbd6a028613a63bfe77ee1369d95bdbc7c07db7981b6ee8f01b3b6812ca52c39
MD5 ad2d420c0edd36f4cff06470f7361923
SHA1 5948bbb4ae727a4baf5de73c46a42406b35d49bb
SHA512 a14dbc8cfe687d009d95ee7fb7ca1ec11452e8d3f2e9a0c6e5b5925194eee6c5683779f5b760301e5ffd130b8f2f6f80f8a5afc4190068d0fc8c674cc5af2ff1
SSDEEP 192:sxRSRBb0/f2s/oewGxzoA8p4t/g6+WNIYolwCYeGLIgDqJ:sxRSv0/f2s/oepsk/5IlHOy
TLSH
T1083295166D28993B9CC6E21DFB65BF93E2F95432A1D52E48A7FC870C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7279b0a1f23be19e636f6141ff34ff343cf6ab5ab123f186028d4122f1e39341
MD5 10753325b6e6bf4c73526395243d7b7c
SHA1 79c59d31ce8e46720cab05883d8fa96d14a62f29
SHA512 caa2dde4f1af599e647cd22aa3e56726371e02eba93cd01cc9aea87f9eae4ea22d4e0fdc6f8982c37f5105f95e8b3ac1a57ed81b12b1050f5341e8a63ef8634c
SSDEEP 192:sxRSRBb0/f2s/ojwGxzoA8p4t/g6+WNIYoXCYeGLIgDYJ:sxRSv0/f2s/ojpsk/5IyO4
TLSH
T1373296166D28993B9CC6E21DFB65BF93D2F95432A1D42E48A7FC870C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0f667003c5d4bce368b20c09dbe5fce35fcfaf64c7757cd9cd7e868874c0f9e3
MD5 5a277882eb9bcd5c396f8b37789c9b07
SHA1 f1a71489c4c5922f9a2cb1dd511a12a946385117
SHA512 60e415863b11556cd0b1c85d857a3877d31ab32e39a9dbb4ad909e34c599a87ec553c0f9fa6a254e320cd82f90198c4f334ad80de90dd7c57fb0045cd6fade58
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRX9ro98O:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vh
TLSH
T12BB2EC2B640DCBBE5F800A9DDC19AFDB6D9802C79B548D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e0316a494cde9f33735d45fa7ed84ca4ed614418ec99fa60de9738e10351fe23
MD5 4a41578325fca12cdd1c8d23ea5c1cd3
SHA1 dead891b0fb79250b73df1b0609f049ed507fd99
SHA512 6b49784193484325170444edad7c166287d0e9dcf692514164d743b4bd918d3338130d554bd932aad811b5c4017e879f06abd4d2d1d19c72a27cb3490dbc51c3
SSDEEP 96:KR2r6WwYY+Wo9lg2+K4Lgk+ce2VUGfHm7KmgIIOW4tVgGOK47g0OcOGlkWPHlyLu:C2r6WwYYZo9m22Lgkte2VUGfHm7KmgIQ
TLSH
T1D9910521733B13803C7EA54D91B9942BD2C171A23214752B3BA803A65F27E178DFF9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dbd455ff-c936-4f9f-9045-876d2f09151d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dbd455ff-c936-4f9f-9045-876d2f09151d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 56b3a033130df58d4c23612ba928f164b7e4b25945f57d67ace335184f54069b
MD5 48722546355c7f65b4880fc8a419e5b5
SHA1 e80d381a6d544e38ebd1ea3fdfed8ed16015d099
SHA512 260ad80e8132937d863a05236c4b77bf9ec23e78d3f1006ee81ac0d79fc01a0d0aeef2ad75cab3fd37a689308e9d430cace1aa8b6217f182997f1cfaa9a8fb40
SSDEEP 768:Jrv+4UNbdu3qMM/TBOW773njtaONXyer1IRCzni9Ai1:JbsbE3c2SIqnPi
TLSH
T1AE03AE32E4989E338CE2A3C6B10776837FB8106795C54790EEDA2F8D059B5AE130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f170c3c3c4ca2feb69ee2c56c69196821d8a40deb74f080855cec0a1a52d88f8
MD5 793de54f5daba14ae2fdd5a8d7fb28d1
SHA1 8c8861dfb0cd9a0da358a663d57d87d19dc16ad3
SHA512 ea439538c2d99ae9ae01ec7f6c98813755ab62b2d0139f3950639ee9b587dc2b37da20f6ce202924e600ebc00be67d5d555da7c6161748fb8c5507c979957df0
SSDEEP 768:8j+9o3gMM/TBOW773njtaONXyer1IRCzni9Ab9MZ:b9o3q2SIqnPb+Z
TLSH
T1ECF2BE36E8959E234CA293D6B2073797BFF41067D6C81B40AEEE6F4D06D796D030B41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 65bba97ababcd7ea730abc88eeb683b5b7281451aca663a6443f698c4315b501
MD5 1c6ffc08514dc243cc8920622f847a1a
SHA1 b249171f44ab001c2015dd6aa8ee80d415e96342
SHA512 faca52a16be2d15c47232720924438fc17e4e93ddaf572c1fa5e312936ca47d0b0bc5f8732c10ca36f5ef9198578d6cd31f7e927a27d047a4e7a6b25911661f0
SSDEEP 768:Sj+9o31MM/TBOW773njtaONXyer1IRCzni9Ab9MZ:h9o3L2SIqnPb+Z
TLSH
T128F2AE36E8959E234CA293D6B2073787BFF45067D6C81B40AEEE6F4D06D796D030B41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8721154a37ca305f95497ce73236ac454f1253aba1e8d4c0e19965f8ad1dcf75
MD5 0731cbb93bcd0407cfa8a080592ed296
SHA1 29d28c6cd93869733de7a8ad521edb0dda91299d
SHA512 48525c8341d4767db3fff56a5075f812bf50d2a1473ff76a1f568a15099b1f6022fb406f7d7d734d417f78f2d3342a657c8154fc86a620fa485596748589d268
SSDEEP 768:hrv+4UNbdz3Vs+/TBOW7734ONXyer1IRCzniBgeVH1SK7:hbsbV3hmSIqnPEH1l
TLSH
T12A03BF36E4A89E338DE2A3C5B14776437FB86057C6840790EDEE2F4E069B49D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 368991c16c0855ed3a6f7805bc1df6ec2ed1a0b14ab149cd47a45652bf41491c
MD5 1530e0bd943322b559b7b31ec69ff58d
SHA1 5449996f259cd0c48a1ca288c4f41e73bdd04a9c
SHA512 a17227464563a36c5547272b09f346dfacd1f990e5e72add8dde35d4f603f2ebd87dd4272308314c92b1c5d9e89b3222d93196d7a4c39493b8881bf80974914c
SSDEEP 768:wF1j+9I3MwgTMM/TBOW773njtZONXyer1IRCzni9Ab9MZ:d9I3kFSIqnPb+Z
TLSH
T10803AD369884CE378CA29BD6F60A3797AFF410B7C5856A90EBDD6F4D01D75AC030B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bdd3548-37d3-41fd-b9c3-0523da746616.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6bdd3548-37d3-41fd-b9c3-0523da746616.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download