fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 615B
Sample260919-wvlppsvanf
SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
MD5 7df3d7cf3358af3f470ac7229387ef94
SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
TLSH
T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5960	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134343152827917362"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{C9DD0D05-D05F-4716-8451-0B5B5A7ADEBE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1920	msedge.exe
1920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 792 wrote to memory of 4468	792	msedge.exe	89
PID 792 wrote to memory of 4168	792	msedge.exe	90
PID 792 wrote to memory of 5960	792	msedge.exe	91
PID 792 wrote to memory of 4168	792	msedge.exe	90
PID 792 wrote to memory of 4168	792	msedge.exe	90
PID 792 wrote to memory of 1364	792	msedge.exe	92
PID 792 wrote to memory of 1364	792	msedge.exe	92
PID 792 wrote to memory of 1140	792	msedge.exe	93
PID 792 wrote to memory of 4152	792	msedge.exe	94
PID 792 wrote to memory of 1140	792	msedge.exe	93
PID 792 wrote to memory of 1140	792	msedge.exe	93
PID 792 wrote to memory of 4152	792	msedge.exe	94
PID 792 wrote to memory of 4152	792	msedge.exe	94
PID 792 wrote to memory of 6112	792	msedge.exe	96
PID 792 wrote to memory of 6112	792	msedge.exe	96
PID 792 wrote to memory of 6112	792	msedge.exe	96
PID 792 wrote to memory of 4720	792	msedge.exe	97
PID 792 wrote to memory of 4720	792	msedge.exe	97
PID 792 wrote to memory of 4720	792	msedge.exe	97
PID 792 wrote to memory of 5068	792	msedge.exe	99
PID 792 wrote to memory of 1256	792	msedge.exe	100
PID 792 wrote to memory of 5068	792	msedge.exe	99
PID 792 wrote to memory of 1256	792	msedge.exe	100
PID 792 wrote to memory of 3056	792	msedge.exe	102
PID 792 wrote to memory of 1412	792	msedge.exe	106
PID 792 wrote to memory of 2612	792	msedge.exe	107
PID 792 wrote to memory of 2180	792	msedge.exe	108
PID 792 wrote to memory of 2052	792	msedge.exe	109
PID 792 wrote to memory of 2052	792	msedge.exe	109
PID 792 wrote to memory of 1920	792	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff8873dc188,0x7ff8873dc194,0x7ff8873dc1a0
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,8311932648853071691,16361045947358435001,262144 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:2
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,12840493301544665120,17690269757858407824,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,7053712423742863916,14020728110716124824,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,13237202802726149333,1339901352364279173,2097152 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,9594544946287969778,10874423344336429747,2097152 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,2049114843866800960,12856625956869946412,2097152 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,1098525367049971062,8334167434508144068,2097152 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,8655106060717392473,16866031299031457588,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,16527994192915141430,14396084357990252016,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,15415987614876243742,8461392898975538244,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,15415987614876243742,8461392898975538244,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,8630470328537086630,10963843068717322647,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,12416874354483605466,14403428820372008564,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,15296717183743098939,8211734446528761369,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,346567190699952775,13876100200840501005,524288 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3496,i,7469624102889127836,8521536656668499987,262144 --field-trial-handle=2380,i,17256277781428516915,2250090691351642339,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e5a6e17e27cee5bd078be7b656d05678c41296234529654e40107577062d434f
MD5 a5113dc35580ad95944d1e2f6f0fb3be
SHA1 a7d0dabe0893f3bb552c6ab12b13a838851ba56c
SHA512 8d619819620bc55467b0e7b36515c842f7b7bc95eb1fe204d86f2c2e8fa300415f20e2b3fd891bc363146e340281af61ef3115212b215b2994c9ec72b7824a17
TLSH
T16241FA8452F0D19DF79885F059C49ED73A3C9A81A78F1FC8A654CCFC6A0036D466B4CA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4415870927fdb451c043860fb9b79b61ecc11e0ac9d6cb69dc8c92304817c9ad
MD5 69d3d2e51c880d852e24fe217f8325e7
SHA1 5c46d4c5181067165a8390fa45cae2c77fae96f9
SHA512 0877aca7e67e49ed3f98e8126a506d3ef20965f177860a8b3490771d04dcf0773a5556eac12a90c2f2b18d538b52ca0c56348613383a6046bbf0ab82bc5cabf3
TLSH
T1B331A0F3C3E8867D8A0155F4AB182E1BCE1D0915932C3D56C5E49E1B93F34B1D14099F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 927322db6cff9c2a2427c07ef43f62af32fc2c6fd3709b4f7559b3478b2744d1
MD5 f178854dcfe6db9c195d5e03577efec4
SHA1 534c4f70e58cfd5f1200bcebc7cacf3c5b5f30f2
SHA512 8431eeaeb4d3e397dfbc324e891414fa4409cdd2bc4600ff2fb87461a027a7940c867f54cb3ce7bbe223edbd0b5a6193f6a6e90f473eb3c7b3f9ff958fc620e3
SSDEEP 192:sxRBrbE/fCsTKnzoA8p4F/g6+WNIYuBiDGDIgDIJ:sxRBPE/fCsGOk/5IB4
TLSH
T17C32B716AE68A93B8CCBE20DBB55BF53D6F9503261951F48B7FC862C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 62ebd4f9a7fb6c2861970b677fb488ecc062cefc55070fdb680504c57ed26ef1
MD5 3d5a8d977b103b5fd398dd4c034a3b4c
SHA1 5bdabc73e29c7e95f28915a677cca74708140636
SHA512 207e59ed2fd735839f4a9221ccf98acbb5840875a59b5e09ce9e4c7e934d1039e60068df4cbb62bb30c9cb9534df3a8d7baa11a897ac5c019cda501f06491829
SSDEEP 192:sxRirbE/fCsBGnzoA8p4F/g6+WNIYueiDGDIgIJ:sxRiPE/fCskOk/5I4s
TLSH
T14022B7166E68A93B8CCBE20DFB55BF53D6F95032A1951E48B6FC862C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 990db6899f3c6b4c763d6066cd40966093c2006566b476ee50a7d4f31aa70e68
MD5 bb1d429ae6c549351642735709b0c534
SHA1 f2d51ef20674408f83e93fdd141470348c15ef4f
SHA512 665c54caaea12f3ad159620041a5bd7e7a17461cafa80c910b64008375f2dc5e0760a066cd9cf118ea570527df4455c5ecb14b1f622cd276885fe022c0bd41d4
SSDEEP 192:sxRBrbE/fCsTGnzoA8p4F/g6+WNIYueiDGDIgDSJ:sxRBPE/fCsaOk/5I46
TLSH
T14832C816AE68A93B8CCBD20DFB55BF53D6F9503261951E48B6FC862C04E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7509468ec9410b3c5690ca4a061086c1a74cf48d23a0de93aeba7a925bbda5f4
MD5 2cb9df8b60f629cb8152470299eaf809
SHA1 2a25d9d8ed99feadb6f8d13bf74341b59b911b55
SHA512 40847c9effd12e7be5123142eefaf3bbbcf29f7c9d1b96db93b9e16f04ed4749448f04f863c7636133ec8ee64f1c4fa317e1dc9cc2771e12cffb2ab314a95cf1
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6drocbB:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0V3
TLSH
T123B2DA2B644CCB7E9FC00AADDC196F976D9802C796A88D4047FE994C03C77EE911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 41e7963bb14b62b457bfbda60e8de6811cb7830f93f973453b0e8de301ab20c5
MD5 3b9a9c4171545aa66de11b9a5bd2b38c
SHA1 08c9795241d2f4305c153a45ff1280656777b057
SHA512 f2cb7c5fd1187459b487721a306e6faed819d01fb6e5ec683d0d076be3f368e12a17c74b3b7a1e39724c348b9edab3f0f8dc73abb5dc527c8589393538ce6eb9
SSDEEP 24:KWcLsgaIRKIhc1qSdaByXFSl6IgINKehc1eSP0HvErs3I7KrhS1qSqhLyXNuRB:KINIRK+cE7ytvINKIcgEII7KtSc7y2
TLSH
T1E3910365343B4240397D685C91F597AA899272A73024E93B3BEE40A39F67E044EBC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f1968be5-1704-4641-92ee-99d8f7d5a39d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f1968be5-1704-4641-92ee-99d8f7d5a39d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b10facea1bfd84e070d8ce0bb7ab94b530a01b05ebcaff0037c183cb86b9852c
MD5 beaf2ab12604829e9279f9506a550ac2
SHA1 4fbb06710960431439e8a41bcfb19a0b43c4dc19
SHA512 891e92e00aeae740caf3510edfbc9b4c564037534468e09f4b421fbce0cc9d3aaaf3994c605b7a14cfbd5545632262b842bc43822d8887d26ff48bdf66150a8e
SSDEEP 768:5D3nJSO5WeLT9rMIYNa8S5oYklnA+KcTRDM:5D3NDP9FTWRdAJcTRDM
TLSH
T1D3F2B032B9A099739CFA93C5B6067747AEF58253D18859D4C8DC2F1E06C7ABE1303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9ef2d278131b6c14161849a01ae8161d50d3e38602c4c6b86584f202adf221da
MD5 a0cbdcf5a736b7f4d5705d9c34a0af40
SHA1 415cf03863ed696070fd1b6e9dcaf1dee4417213
SHA512 4c2ef8f9e432962a0651c007643522ccfee786db43d5d52a8b0a69cba779296ba17bd1cef909a61c8ae1fb812e670ed9f2f84b48167faf125100ad0900a1f4de
SSDEEP 768:5tD30JSO5WeLT9rMIYNa8S5oYklnA+KcTRDM:7D3SDP9FTWRdAJcTRDM
TLSH
T1B7F2C032B9A0D9735CFA93C5E60A7747AEF58253D18859D4C8DC2F1E06C7ABE1303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 656241f486af23e23b1842484feddffc0d6bd401b3ef0ba682688d404b2ddebb
MD5 eae5748a9835d6d883f6ae9b1b28d3f0
SHA1 bcd9c464bf72d59c38020ecfa76a843904f8773c
SHA512 11a533f607057438ffb124a404043d981fccb615fa19878221719a69184be4fb1ca9bbf1dd1b624e358f6674160235f794ae7e0c5f8927dc57103a5feb4c89ae
SSDEEP 768:dB/UxvxjgC+u3rJSO5WeLT9rMIYNa8S5oYklnA+KSH8i7:WZj3+u3hDP9FTWRdAJSV7
TLSH
T17903C03AADA098738CF663C4B60AA387DEF55263D0C469E849DC2F5E06C77BD5303856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 9a82b73980a7d5aa527ece536a13832c8ec780b6d5de80ad88642bea09340ec7
MD5 34d9176505c4aaef41357ed1ae67837b
SHA1 b51e044da23ac0ae2b91891a179d46e7da213249
SHA512 cae8fb43175efe12a08ff68d03c2155842210f40ddff9c730f5f38e79c045143a37f84337d0d6c046d99aa38ff0750e85084d7ff3ccb29354317c0bac2c79faf
SSDEEP 768:xFQs3Awg+JSO5WeLTLDMIYNa8S5oYklnA+KcTRDM:As3nDPL9TWRdAJcTRDM
TLSH
T18D03BF33A9D0C977ACFA97C5E60A7346AEF54253D188A9D4D6CC6F1E01876EE0303C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 310ca29af9ed8093cf3fb49f14bee39780ddfd7a2f676cfcbdb9140b647f7191
MD5 f13a37090b3937df294209b369613108
SHA1 76a01041a1860a94738f52396460d4cc4d900590
SHA512 8356775e96ff3b9f85b637a0915f86f5f4c105f7d083ee8c787c6be70527a7cee70a0119935d8f244a7e1e2e1846ebd90c2150a845ebe63e56e7d0b093c77c43
SSDEEP 768:do/UxvxjgC+23vfLSO5WedJMIYNa8S5oYklnAasSH8L4:nZj3+23HTDdHTWRdAPS04
TLSH
T12C03C03AAD94A8738CF663C4B70A9357EEF55263D0C069F889EC1F0E16C76AD5303852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download