c027140abc9c35586b8edd0519fa483aebd253f17e44f5c40128f4d9afb86e08

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Custom & Personalized Physical Visa Gift Cards _ PerfectGift.com.html
Size 426KB
Sample260825-1zd8msba63
SHA256 c027140abc9c35586b8edd0519fa483aebd253f17e44f5c40128f4d9afb86e08
MD5 fba70456a3d095b088af59579c3221bb
SHA1 c3f328fba20258d9b424fa5ed86b357d3bb5dcd5
SHA512 f341c4318ef44ff99388c60eabe7221514b7ab213c0b30241744edf12fb9bcd4012f70a51a011a5c8bc07573ac47c7055dd34fe87268c63d363e9624a6b0be2f
SSDEEP 3072:YlC/ui9UaX1owjCTqTjwXCxMNKTTdaU209Sno0BpuiHw18I9EF0DzpGg:YlCHx1o+TxMNKTTdaU2098lw8YYs
TLSH
T11A9419379704687E93135BE625BA3F4DE03B901AEAD296C4FFA5C318538AF91103619F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2420	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321691282789539"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{6C1C2679-1A2B-4974-82DB-3F24AC27C97A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6448	msedge.exe
6448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1240 wrote to memory of 4976	1240	msedge.exe	90
PID 1240 wrote to memory of 4336	1240	msedge.exe	91
PID 1240 wrote to memory of 2420	1240	msedge.exe	92
PID 1240 wrote to memory of 4336	1240	msedge.exe	91
PID 1240 wrote to memory of 4336	1240	msedge.exe	91
PID 1240 wrote to memory of 5544	1240	msedge.exe	93
PID 1240 wrote to memory of 5544	1240	msedge.exe	93
PID 1240 wrote to memory of 6724	1240	msedge.exe	95
PID 1240 wrote to memory of 6512	1240	msedge.exe	96
PID 1240 wrote to memory of 6724	1240	msedge.exe	95
PID 1240 wrote to memory of 6724	1240	msedge.exe	95
PID 1240 wrote to memory of 6512	1240	msedge.exe	96
PID 1240 wrote to memory of 6512	1240	msedge.exe	96
PID 1240 wrote to memory of 3876	1240	msedge.exe	98
PID 1240 wrote to memory of 1448	1240	msedge.exe	97
PID 1240 wrote to memory of 3876	1240	msedge.exe	98
PID 1240 wrote to memory of 1448	1240	msedge.exe	97
PID 1240 wrote to memory of 6748	1240	msedge.exe	100
PID 1240 wrote to memory of 6616	1240	msedge.exe	104
PID 1240 wrote to memory of 6580	1240	msedge.exe	105
PID 1240 wrote to memory of 5352	1240	msedge.exe	106
PID 1240 wrote to memory of 4188	1240	msedge.exe	107
PID 1240 wrote to memory of 4188	1240	msedge.exe	107
PID 1240 wrote to memory of 6448	1240	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Custom & Personalized Physical Visa Gift Cards _ PerfectGift.com.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffd3ecdc188,0x7ffd3ecdc194,0x7ffd3ecdc1a0
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,5872365227280944614,831981873477023081,262144 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,15620591200997115283,9939823296859751097,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,2254104361747512190,13539374376357062139,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:13
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,16468949823238574734,438240818633304894,2097152 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,10471950175477387581,11478609939063035175,2097152 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,16283822050061211425,12357406056330028131,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,15697586346299141498,1078376203854015749,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,10230731030769367302,5237930151089384239,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,10230731030769367302,5237930151089384239,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:6748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,6345275776310128996,2837333493471154875,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:6616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,14602042656298065443,341763125406965728,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:6580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,16543196010321757658,10099531380434795584,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,14213409523599327266,7800768465503554998,524288 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,9625485623865036938,6421527036602686771,262144 --field-trial-handle=2672,i,14742331392582170558,1723655741259515819,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6448

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

2e175e3c-d659-4d08-97c7-bebdea01e3cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e175e3c-d659-4d08-97c7-bebdea01e3cc.tmp
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8809df11a7a96d9c9962cfb019437ff76e7281e691bba557edfb3c324ff538a7
MD5 db1c61b56526c11f457a4138bb460b3d
SHA1 8b6344f50939b7ac764c63b46b0f9baca9e48d3c
SHA512 9fe7fde84c4a73ebd357e9c10275c8d990eea8a228ba685ed7d3cf11e2c46a35bb209bd03fc7dc2d5c673fc1599149e5726a8eefc856db216e176fd309035418
TLSH
T150E0E595C824A83759FD1B18A1584687EB41131B3A41890B3B3C822C4FB063B5A8BC5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 c208f1714606bcf392f1e890386da17b2845e9d10f345abebf81074e723c05cc
MD5 5c96ff87f5cc19e3e94af787d17f370a
SHA1 ceaa0fb0f4427e0b88c1c89f93d1cddbbd064ae1
SHA512 b8023854b30802129604aebf340e2364b035c46280f29065ab18c2f130f3458d39348c29ba2f2a5a1e0ab657589b5000b111d764cb9aacd49d26fbf4971f11f5
SSDEEP 192:D1MDUpxlllyBeWaVZaij6V5ZvqMvlbZ+o9IM/uWyBRxdk4t0HaT:D1MDUpxlllyBeWaVZaiGV5ZvqMvlbZ+1
TLSH
T13EE19BBB82E4476E991192F09B257E1BCD2D155B432C3C5A8DF4AF1B63E24B0E10279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 cb5f9ad439922e08509c6f1e8fdc227dd98bcc2ecaab01055d54f21115a0ec5e
MD5 c8814f3921ec91fa6a4703fb02918038
SHA1 ef3b8ee696c0f4e24934970647395dde3f452f40
SHA512 5f149cda06dfec6df4df3b4172ff01305b5147a56df17dd80385fc827d13a8030949adb93af3acbf65d98491e6cf94eecc7694dedf8ea62e8a394db25e2d42c8
SSDEEP 192:sxRiR6yMqZjK1Ml8wbd/fOsPAFNRZpvzoD8pei/g6+WNIYcC4xdtsGQ8GMIgjRJ:sxRi7ld/fOsPAFN/p/V/5IW4hsGQYjb
TLSH
T1B362E9156A349D3BCCDBD209FA557F93D2F91133A1905E48AAFC8A0C04E6BEC611782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 8427ab596ee7e28e0e5b18419ef552ef80af987a8bb2cfdd7d426255a34dbd25
MD5 5deda06ebb4f9eb4a749b430964577e8
SHA1 a2f8f4ffd9bc2b520f66fa7e6bfef4211690fb99
SHA512 950c6314cd73b26e2e025f18f4e7e8d32471d92f0f78432a589c2fe1c58766922e9206e3b50d4c071a219e56c6f2497f9b4c700780db7288bc873690684d0e48
SSDEEP 192:sxRiR6yMqZjK1Ml8UQcbd/fOsqAKNRZpvzoD8pei/g6+WNIYcC4xdTsGQ8GMIgDS:sxRi7qKd/fOsqAKN/p/V/5IW4PsGQYYb
TLSH
T1A472D81599349D3BDCDBD209FA957F93D2F91133A1905E48AAFC8A0C04E7AEC611782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\e185c5ec-733d-4354-b42a-12919873c1db\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 586B
SHA256 0a9773008a2ed890ecd6fe7511c6fdc63d610c300e90d765ec79703d890a2e2b
MD5 8153616bc9c2221dd75974b79ddd3bb9
SHA1 5d54959cc3a26cbf9540c01e4f2fb16a2f49bc9d
SHA512 3eda57ba6d4d578e279622491b69994c51a888223d8306fb9e31032fbb52bf6ab3ebbd8bd45af96c126d50f899d0b8914fd03c93b9e6ddc0834e73ffe6fae8be
TLSH
T19EF08B5167C34BA6B2BE9F12E1F4989B52567CC71C10DADC38A831195C31F10CA7C8F2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 749B
SHA256 e5945abd257f6fbf47f3524dc0139e159dada9c07b0db32968c5c12ac7caed52
MD5 1fcd8c041347c9b804722afa336f23d0
SHA1 1e624971fd1ac96ad4ceb9b101575b4cec15b804
SHA512 a80d4fa9f813e63adcffda991f59911e5d23fddd3fb9c047da1c142fbae5d11eb859cb93b4d0bcfb6fdccfb121918c97373431976438e388051643ad2c99b748
TLSH
T1A501C05073D34F59B2BE8F15A5F888579266BCD25D10D98C68B831195C70A44897D8F2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 243B
SHA256 1773e77c6334b7950d24282cf9d1653c8ab20692cf63302139fc592ba27b2fc2
MD5 ae2130ad8a404da7688966d2f1e09d9d
SHA1 cc52311eef5f1a233e04c96ad69020b3393e03c4
SHA512 ec4470f55e3b055c3ad378a2deaa8387053628b326b38063f5be76d0e149f0f602cd209bde5d8c75420092adaffe6b4ba7069b665813cb0b05b2f68ca3bca492
TLSH
T17DD0974263C30E24B62C0A0086B0A8469243BCC2AC00EBCCB0AC31043830920867C8B1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 384B
SHA256 051ffd431860cdd0fe6400adfca02973aafcd9bd8bbf951072edfeaed1e52caf
MD5 619e6958084dad941bd34358b66e63b0
SHA1 c83d2c60333a23842de2b88e7000e81f1348d971
SHA512 a17e957708bb7e8fe9e3f3ba2baad33b7c466d6e8e53051459ed19974fe36a05197325288ab1fa4cd53bb15ea60dde1ad340a3d091a6f9b3ceed3e1e95f7075e
TLSH
T16DE0224272D20B59756D0B0095F49897965A7CC26C00DBCC74A830086C30A018B788B1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 464B
SHA256 01ee4dbc42fb513328d2b9c9a3f25aecb6cc81f9245e8b5fd744c0a7af6c908f
MD5 ad6e43d0184ffa7c30804c167bb00184
SHA1 4c0b718ddeef2956c56cf9823efde11137dab2d2
SHA512 b88539f6974d6cef6b677621d4a35726aef4152bb83df717539eb42f1e1cca449b58722d582d1cd9a83c769707ddfd50d1feba016ec35ed1efe9d63e5d7046fc
TLSH
T10DF05C5177C24F59B2AD4B02D6F49857526A7CDA5C50DBDC78A831055C30F01C7B88F2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 654B
SHA256 764c437261d0400c7bed5652509d30619b6f3a740cd0656d8042114f1e653d7f
MD5 c7a84c2727355ff6c66e4846fa0e05ea
SHA1 1c258f02bcac94ef4969a2185fbe0e9998f369b7
SHA512 9837e0f6a81418755db859441770f355469ad95007eda8e80bb59c3f014e56d678da87f5a5f433cec30084a941b77dc1957b1bc928051638f57b60f80b4d5808
TLSH
T172F0DD5062C34B66B2BE9F12A2F488979256BCD61D10DA8C38A831195C70F00897C4F2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 742B
SHA256 63dfe5e8ecd1eefdee02abc58511672c49001e70bd220909150e5ebf3c4463a5
MD5 9c0346576e3ac352d299f9e57a3ef95f
SHA1 2495d2c5340f8fa5c79071d932a416ad7df80966
SHA512 1732eea7b5f504f9102de3f821d9f9ae199a5d3545fb201d89cae4cc9b882142a0063b33e3642941b0db8265b069a025567d4bc11d372c54da313d6a6c38afcf
TLSH
T17F01F45073D34F59B1FE8F15A5F888579266BCD35D10D98C38BC21195C60E448D7D8F2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe598b5e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe598b5e.TMP
Size 163B
SHA256 02126a67f84bdae8b33fc48cb68e71d313824f9c999e4f873404b5f4191329c2
MD5 61c7d9f35c879d15b91880976b7df8eb
SHA1 b0430acac3468c51f84c1af57ce71307dd45961f
SHA512 c85cef4dc8b131bb0073b8432cc9b5a40d59d923c854722c40081a31e834b1ccce74ad4db48437346eac6d0dee0417cf265cc169a3380b5cca94c1d50768fbf7
TLSH
T10BC08C6133D30BA8BB590B11D2F04893994AFCC2AC04AEDCB4A874007830D2286AC8F2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 64b0e5f62fcf57ee82e95bf56f3514689a322f4663c8cdbe53915fdf0ff5707b
MD5 cdb4e2c77c90783f842fd0d9b35583b4
SHA1 1b137e63d82055adb6c3048a2e028c150ba82d97
SHA512 d61ad7fa1456a1f2694aa51758e47d00ebe18f7c50fc0e112d8dcb1f50e10dd051131e3ddd9d4fafea281b56efd5c8fbd1e344ba40c53717b42bfce59afba214
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9ft/:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRc
TLSH
T1EBB25D11713F4680387EB90C91B8981F96C2B4637519E52F7BA802A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 90aee191a8e871f49d1f2e86e94a86bbbf61622b49c79ed743c4c986e1b97ce9
MD5 77e8d1b607e03f3be56c613be8b3f63a
SHA1 406596e04984bbfaec47ff97ce89ef63122fe558
SHA512 977644112290e990d3b0acb36865a9e22a87eb4bdb2bc1ee574a118c013107cb838bc74ac066ddebf6b4c4244f6ffe1aa98312b4e1772cc77ba31e7fde92aeab
SSDEEP 384:nviF1tNn/s3n9Sn8Ngj8TUNTUlIRiPvuTs7kuEqfbGGj6P57ClAcaTey2vpk/OOG:6F1j+9SXjwgUuoGGmLTeyD/29MW
TLSH
T172D25C32E855CEB7ECE64FD9B74A7A4AEEE04263858C5AD8D6D85D0C01CB1ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 14a407fd5e1c1c3ad48e2b8eb3e8ece860ed1060c43f611d04dcafb180c9dbbe
MD5 67eaa9b401443ad0d73fc3563da6f252
SHA1 c38f52c19be1b77a4353b7f6279de0825426ba58
SHA512 4bfb4a30ddfb019ad24ee5d34736600d6f62a3a5dcce91395e1de178ed5fd9cb7420f61206a720792f4e2cbe55e32e751eebeb8d215832f61c881b13b10db90e
SSDEEP 384:nIiFiZcIi8NLj8TUNTUlIRRPvuTOakuEqfbGGj6P57ClAcaTey2vp5/+HBbsEb89:TFQiQjwg/ubGGmLTeyY/gNiL
TLSH
T101C25B72ECA4C9B7ECE68E85A74A7647DEF44253958C9AD4D6C85E0D00CB1EE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7a5c24574a50bb4017ac347aafdfb1cacb745f15767c8a9c03f7d79d2b11e79e
MD5 34d65ff0d0b548224d3791fce3a18fec
SHA1 00c80ca7d8d0f7a6a009c6b3c9ddce7c3f53b557
SHA512 d2731ecb9bd8b7bda2352c72e9e0e563b3120f8ab925b93076c29cb4f14a985aa6723e8831f74e21aec33a4b1bdb091801e21cbb4d04004109ac77034f0d88f7
SSDEEP 384:ndiFiZcIi8NLj8TUNTUlIRRPvuTqakuEqfbGGj6P57ClAcaTey2vp5/+HBbsEb89:UFQiQjwg/uPGGmLTeyY/gNiL
TLSH
T187C25B72ECA4CDB7ECE68E85A74A7647DEF44253958C9AD4D6C85E0D00CB1EE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 281c020a087c85c8dcd5c51ba8a85eac6376230ca6181c452e9f286422c49855
MD5 9589e344d48db0a65c23f54237b64dc2
SHA1 1ea1293cd3ff0b7c01db5b1551b2f91f8e942e7b
SHA512 328fb7b808d5d1b2f6a1e39d4e8ddb3ad21363a38ae689a8aa5c994a374743329b5c5aee31abb4c2f371ab5bb9a2fd30d5b29a8f24189e76e9ff666ab0526987
SSDEEP 384:n7iF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTugREqfbGGj6P57ClAcaTZLMOObjI9GK:WF1j+9SXmwgUudqGmLT1M29MW
TLSH
T126C26B36EC69CEB7EDE74F99B74A3A4AEEE00267849C59D8D6D85E0C00872DC4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 14f393fa9f394b7950bb769d6d11caa5c67eec16b850bb696d04171471d04b09
MD5 7a3df89d3b25201da23d0b5a510d5135
SHA1 4e2d570d863491cca318d2630aa20a1105e5e5a8
SHA512 7079286a18d2434fed1f9f00ddc37678ad8d9d1856e09b575ee0d5e41d957c847c0ed0da0fea48e5fa9178d47a3ad1c125e608245027cc74e22c04705a93413a
SSDEEP 384:nXiFiZcIq8NLj8TUNTUlIRRPvuTOakuEqfbGGj6P57ClAcaTey2vY9/+HBbsEb89:SFQqQjwg/ubGGmLTey3/gNiL
TLSH
T11EC26B72ECA4C9B7FCE68E85A74A7647DEF44253958C99D8D6C85E0D00CB1EE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download