8550b29084d5d146c021bf1a6374a368a3ea4ef318e20ae4c72affaf9d46eaee

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 18:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Y186_1_Reading_2.html
Size 5KB
Sample260804-wvvmlseh79
SHA256 8550b29084d5d146c021bf1a6374a368a3ea4ef318e20ae4c72affaf9d46eaee
MD5 d1f688cb45b42d927cfc953b61bd81a7
SHA1 309d110ca7106c13ca5355145f628dc5c26fa280
SHA512 4385c8ab58f28709b6ea917f5d34e150e7e0f914c148b328fde820a71a4db4304e5cf55bc97fea81bd22cc2c7c90b3d959eebf4dc38235a30156afb1790aee68
SSDEEP 96:PNy8toXZzIEb0EaW87Mqvk76n7eaq7eolQtQfcqYJoNcgqT3jf0bknb3mYzueh8L:PNltkCBe7hmolfczJSAHzLyOw
TLSH
T138C13AF3EF7AC02583F99FD652BA73AC9251A305FB04419AE6A4CA4E55CDF4F8094098
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4320	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303409190373738"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{6DB5106C-CA6C-47B4-B23B-C79561700B90}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3476	msedge.exe
3476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1568 wrote to memory of 4256	1568	msedge.exe	88
PID 1568 wrote to memory of 1812	1568	msedge.exe	89
PID 1568 wrote to memory of 4320	1568	msedge.exe	90
PID 1568 wrote to memory of 1812	1568	msedge.exe	89
PID 1568 wrote to memory of 1812	1568	msedge.exe	89
PID 1568 wrote to memory of 4176	1568	msedge.exe	91
PID 1568 wrote to memory of 4176	1568	msedge.exe	91
PID 1568 wrote to memory of 5792	1568	msedge.exe	92
PID 1568 wrote to memory of 5792	1568	msedge.exe	92
PID 1568 wrote to memory of 4536	1568	msedge.exe	93
PID 1568 wrote to memory of 5792	1568	msedge.exe	92
PID 1568 wrote to memory of 4536	1568	msedge.exe	93
PID 1568 wrote to memory of 4536	1568	msedge.exe	93
PID 1568 wrote to memory of 4068	1568	msedge.exe	95
PID 1568 wrote to memory of 4068	1568	msedge.exe	95
PID 1568 wrote to memory of 4068	1568	msedge.exe	95
PID 1568 wrote to memory of 1444	1568	msedge.exe	96
PID 1568 wrote to memory of 1444	1568	msedge.exe	96
PID 1568 wrote to memory of 1444	1568	msedge.exe	96
PID 1568 wrote to memory of 6096	1568	msedge.exe	98
PID 1568 wrote to memory of 4688	1568	msedge.exe	99
PID 1568 wrote to memory of 6096	1568	msedge.exe	98
PID 1568 wrote to memory of 4688	1568	msedge.exe	99
PID 1568 wrote to memory of 4548	1568	msedge.exe	101
PID 1568 wrote to memory of 5040	1568	msedge.exe	105
PID 1568 wrote to memory of 3028	1568	msedge.exe	106
PID 1568 wrote to memory of 956	1568	msedge.exe	107
PID 1568 wrote to memory of 848	1568	msedge.exe	108
PID 1568 wrote to memory of 848	1568	msedge.exe	108
PID 1568 wrote to memory of 3476	1568	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Y186_1_Reading_2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x258,0x25c,0x260,0x254,0x288,0x7ffa31a2c188,0x7ffa31a2c194,0x7ffa31a2c1a0
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12489253303069549523,12827147286916604122,262144 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,6143511100529858861,16236948903572182847,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,11561049427844735719,113327000785671872,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:13
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,8835602880186693282,1236223770775235428,2097152 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,1050098852564255826,3975464203851415908,2097152 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,10234719131518249482,14931335084632212365,2097152 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,3342745630360827102,9990969993580549544,2097152 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:9
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,13768707504463992738,6037542372348490290,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,2499804169468417814,5131135214109181640,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,9865635997951085209,15159606751953810758,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,9865635997951085209,15159606751953810758,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,4874487391659840786,10448822528274700444,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,10039143330731920802,18156443867463749251,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,4902840735278325091,128423424216020554,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7752806683541960281,17383824405292866196,524288 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6472,i,4740266235452551601,8335183252383893044,262144 --field-trial-handle=2164,i,15190957803935097382,8553032525533196242,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6c09eb1ab3f27cbedd576d0751f38225c38f6dc29364468cf5c3549f48762b0a
MD5 7907e25eec56b83dea64184bb1cca8df
SHA1 542a2da65ba98bd938e7a9f1443d428d628d6c2c
SHA512 28c11f7489b9ebe5810bc705a307451bf784c84ded6a3cba8b8f8084988c607cce4823abc65a76d4c6732492073156e4ba10db86cad6980a3f7d90cba1b6b6a3
TLSH
T1D5515F59DB2E06D1D33BE6FD93F48ED6B275A8FD0907AFBA01B4D078AAC77125100412
MD5 SHA1 SHA512 TLSH

Submit Download

918d140f-6bd1-4528-a350-c75d04b58528.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\918d140f-6bd1-4528-a350-c75d04b58528.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d40c2827f06bb8777fcdc6b39e70d742bcba91b9aa880c8db973e60d6e0d7ad1
MD5 5ce09a5e8cf2a8c47985dd6fbfcd9c37
SHA1 5fe30504b2143611ae914faa8ad8d3f6e97ef10f
SHA512 1253a505a5ec684646a1a7342ebd65251abce28ac5637dfa7d29a47fcfaca5b0539353c2c84f654288c2a5fd3a28553803ee101fb9bbe5859c390be0704849a1
TLSH
T18F117DF3C3D5856EC90116F05A28AE2BDE2D0605422C7D2995E4FF6BD3E3479E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2cb3d18bf2206a20fb53f7d6afdeafbacc789b23fb8b46359c5deccea477b5c5
MD5 2ceb8b3374ddba1d6550bb661c9e7136
SHA1 bb838049158c02aa8743dc70e637ce00339f72f6
SHA512 f1fefa19fac0b546c58cfae4ebf55519228bc8e1c52b372b16f94d5673adf1b9b2dc46bf4112ce6bd84f8b6ae0c7080ebcfd3c6e5b648636b172bda8484b9292
SSDEEP 192:sxRxRMbl/fsstpUsmZvzoA8p4k/g6+WNIYxqxJxGuIgDQJ:sxRxUl/fsstpUkd/5IF9Q
TLSH
T1BE32D8166928A93B9CCBD21DFB557F53E2F92032A0D11E54BBFC9A1C05E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c39f60c5899fabd7325fb116dedf708d8870566b59c87ae11b0712fdafd3639
MD5 ea142d45b29df9fcedf585d61e38122c
SHA1 adbeb04d9337714e059306754476e264f616ef07
SHA512 304dccaaf89a26ac0b4c3729e2f129f3b080de34362e17beda5f4d2310a2ee3a354cf7114765210ed98302a2e8c6c9cd5db88aaca846487a3d181a458e81b34b
SSDEEP 192:sxRGRMbl/fssgp4smZvzoA8p4k/g6+WNIYxzJxGuIgIJ:sxRGUl/fssgp4kd/5Iu9s
TLSH
T18532C8166928A93B9CCBD21DFB557F53E2F92032A0D11E54BBFC961C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e2c952d48bf290b04e9866e101f6730acef60740f0e6e036cbac347df8f3393c
MD5 8b932b21475d3c52eca8ddf14215834d
SHA1 f55af47e95257928b2ed42a98de6dc7054fe4999
SHA512 9be67476942a2cfa5022dab3cb58ef12b637921d8d8f15597458eb87710675e5278cf5693fa8ec448aacd92bc197c9705c240a3710fd811aad69bc48a10ddd41
SSDEEP 192:sxRxRMbl/fsstp4smZvzoA8p4k/g6+WNIYxzJxGuIgDqJ:sxRxUl/fsstp4kd/5Iu9i
TLSH
T19F32C8166928A93B9CCBD21DFB557F53E2F92032A0D11E54BBFC9A1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 18319f25a469b4f6e23ff26964435f068ee71125341d15202d8d9b0a4b60667a
MD5 8fc67832e6ebccf051add5a973da3360
SHA1 e196125152be793cb363b3a352b53e0d01a4871b
SHA512 a355b73be881b134b974b687bab2e2123f25c6ab1d8e5c57efdd25bd5dd1113fc3e8b7d95094f9909b527c7f50c532aae53c4af3f93980a7bfc78cde0ac3305a
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3Rk7roruu:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0Vo
TLSH
T1A5B2DB3B604CCB7E9F800AADAC596FD77D9802C797988D4447FE990C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c9f7dfffb8ddcfc9c05ccea843019bd9aeef4143a7958a3d6abd924986cf8626
MD5 3738eb85aec56c4c563066539da52c10
SHA1 b70f2c6933620ab67906380b7dcec3ba8b53484d
SHA512 cbe43e76c2c048c5009000781f2e813f95e037445d8f3fbc7c00e17782730aaed3f7bcd363a61de7f4f1dc868fa7a3dfbd8e0b203754f991ee8d301c9842b8d8
SSDEEP 768:F53tX5kKL2XirIjF669yrqUjWiIwwxMtu1ojKgqmUzS:F53tW6rIjF66INWZTMafgRUO
TLSH
T162F2BE70BC64AAB3C9F5DBC5B2123782AFB04093D2C44FD885DCAA0D065B5DD270792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 11ba0a769c379cc7b9716e30201a3c2e2df2d5056c5d115b4b0c7dc89c0c1ae6
MD5 3f6ec8ce1570873b44cc85c345f87c9c
SHA1 eaa58a80d610b33e26f6146e3b0cf6879d64ea64
SHA512 76a346609779e37a41db6c4cf81d995163257afd4aee78c77548619f81120d2387c5c855e769931de6daf3c5dc3b11a569fe260b9fcb1898167d24de8135fdc1
SSDEEP 768:w533q5kKL2XirIjF669yrqUjWiIwwxMtu1ojKgqmUzS:w533H6rIjF66INWZTMafgRUO
TLSH
T1C2F2BE70BC64AAB7C9F5DBC5B2123782EFB04093D2C44FD885DCAA0D065B5DD274792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6c1e216d275d7f751ad191558effc916c5ee6d68a7cf583d9ce51963c3884160
MD5 a413e30893a71bbe222406103757c0c2
SHA1 91b43cb4a3c865bf966c7eb2fee9f3e5cbc83f62
SHA512 d397decc9455661ecddac223f4e683f65120d9df8b21794e558d3c8fb6b0701ad8cc3b446d9981d48ef148723eaf46ed8e0a9f47f3192675b19695712e19eb34
SSDEEP 768:X633q5kKL2XirFnF669yrqUjWiIwwxMtu1ojKgqmUzS:X633H6rFnF66INWZTMafgRUO
TLSH
T1F2F2BE70BC64AAB7C9F5EAC5B2123786EFB04093D2C44FD885DCAA0D06475DD270782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0ebccf3d2e8fe2d43b3b2f925511159b79339b2481606b46611511d0cc4eddde
MD5 6e49b815953591a43d9568de0f90a4b7
SHA1 bc69085d90dcbbddc7a56a2090c3b0bb6f10a9c6
SHA512 ae5eb8bb619ccc72cb028922bd6790a74be7580e5be426613471a0c67e9d2bd513ca604afd18bc122089e56b98f6b233acdb137a477d835a8b300451634630f2
SSDEEP 768:arv+4UNbdl3FPkKL2XQjF669yrqUjWiIwwxMRWUiler:absbX3iYjF66INWZTM0UsQ
TLSH
T11503BE30AC589AB7CDF2D68672437783BFB4109396C50B98CACD670D469B4CD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b062c294-4ded-4ba9-9868-0a70861ddcdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b062c294-4ded-4ba9-9868-0a70861ddcdf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download