dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260930-psklasybmg
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{3663B87A-8F1C-4F9D-B00D-728AB698E044}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe
4344	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4344 wrote to memory of 1264	4344	msedge.exe	89
PID 4344 wrote to memory of 3060	4344	msedge.exe	90
PID 4344 wrote to memory of 5436	4344	msedge.exe	91
PID 4344 wrote to memory of 5436	4344	msedge.exe	91
PID 4344 wrote to memory of 5436	4344	msedge.exe	91
PID 4344 wrote to memory of 1984	4344	msedge.exe	92
PID 4344 wrote to memory of 1984	4344	msedge.exe	92
PID 4344 wrote to memory of 5100	4344	msedge.exe	94
PID 4344 wrote to memory of 5100	4344	msedge.exe	94
PID 4344 wrote to memory of 5100	4344	msedge.exe	94
PID 4344 wrote to memory of 5788	4344	msedge.exe	93
PID 4344 wrote to memory of 5788	4344	msedge.exe	93
PID 4344 wrote to memory of 5788	4344	msedge.exe	93
PID 4344 wrote to memory of 4624	4344	msedge.exe	98
PID 4344 wrote to memory of 4624	4344	msedge.exe	98
PID 4344 wrote to memory of 5200	4344	msedge.exe	99
PID 4344 wrote to memory of 5200	4344	msedge.exe	99
PID 4344 wrote to memory of 5552	4344	msedge.exe	101
PID 4344 wrote to memory of 736	4344	msedge.exe	118
PID 4344 wrote to memory of 4768	4344	msedge.exe	119
PID 4344 wrote to memory of 5160	4344	msedge.exe	120
PID 4344 wrote to memory of 4964	4344	msedge.exe	123
PID 4344 wrote to memory of 4964	4344	msedge.exe	123
PID 4344 wrote to memory of 1556	4344	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff957a5c188,0x7ff957a5c194,0x7ff957a5c1a0
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,12373927840475032806,18341672745943622481,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,15318091944172851722,17057420909924078947,262144 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,5031846160265551598,3527180813833930913,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,13536101743212805999,1648109731920307540,2097152 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,16540655095921373353,2457222283390106133,2097152 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,17854333475852015154,12831741491844261394,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,1941519171472479884,6857897898338241248,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,12822381081780838105,8329548011040807494,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,12822381081780838105,8329548011040807494,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4171274533706526920,3930194426217291852,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,9534375848656645369,4998406121254440975,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,5800281503975010187,13590153952822803198,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,4245086697179365112,5275445117659513262,524288 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6044,i,12664326600623147697,727909879022454994,262144 --field-trial-handle=2284,i,4876508293738350495,7984348560448050161,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 48ebc75200050092d0eef11a2238a71ed2b192962b67886a4e2c622bbd0638cd
MD5 02b08f9bd51c513dd053f03116e22856
SHA1 cd725fdc164b5ead0ca00c529826a8df4890c3ec
SHA512 fe64c5e383b0e509b2dcaf30fd2841b26331af86faaf7cdbcfca1aecc66b82e1188e29969adbc596319e6fd13a1bca29f6d2f3643a48664deed7a96d45246f37
TLSH
T17BF0F4A6C921FC3B08FD1B2960940B46F750236B2A41D88B3B3D810D8FB463B4685C6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f5644501d0ba0c0de0b1f1f1334cc9b77f4e52719a0f4a03193faa47d8bba514
MD5 265a2b50a5f7ea5b4485fa15bed84ee2
SHA1 95cd9094e59ac23ba28e21524a2b0edab646d7ac
SHA512 962580912d7cd216b3f7694d0f59f712d14374e758b61b3588f8806489059bc11349e5e729b1f9be7ce64bc8fc2e0ff844f0fe7d4facc403fc1644687047d23b
TLSH
T1BF31C0F7C3E4C66E890056F0A618AE2FDE2D0555432C3D9AC9E4AF2B93E34B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4a555ba919c736811656164f5ecd87a93e87f62a7f7a0da85b1b8080539f6481
MD5 5dd267a92c893fe3eabb786019f23ef0
SHA1 e276ad92c2a9e17f7562d9cc8560ccf0e25de931
SHA512 1eb681deef1f4bb9d801cb5e0f9715cacb2398ea49cc4ff0c3e90194df9dd74d7c7acf5e1b8d2b20595db4d2181e1302e6e283eaa1bb9c0e9789743939452890
SSDEEP 192:sxZxR4ka/f/XsDaQZLr8UzodpH1HW6+WNGYoWmSr9IgjteJ:sxZxBa/fvsGOcnVHbGbSNjtq
TLSH
T1F842D7556D28A97F8CCBD219FA557F53E3F9503290810F48AAFC8A1C15EBADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 936a304095c5f0517ec9f2e553e96e6cf3d4e90bacf8cec84f4cbe942f5ac75d
MD5 5f9c4b8b92ed45d40402efb3dbbede8e
SHA1 fa853204f2271515ab7ff3940b090f34214a159a
SHA512 75f35893ffa83c0b859fd0876d2226ccc9242b0d797dcdba564023852840e2079d0d00630cfdf3f18f51510270384d06ba7bd87d962602acfa9f549755868d5d
SSDEEP 192:sxZxR4ka/f/XsyQZLr8UzodpH1HW6+WNGYoCmSr9Ig59teJ:sxZxBa/fvsyOcnVHbG7SNztq
TLSH
T12142C7556D28A97B8CCBD219FA557F53E2F9503290811F48AAFC8A1C14EBADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 af410befd5bdf33bb190546ded2e6aa130d01e52bfcacc9839583b736b87fd5b
MD5 18610014cd9f7854ea7c2c1de557c233
SHA1 9a256c04ee8159af202c7f8a8235e15a8fe88803
SHA512 830babf33de412cbdddb9b848c7f4193fcfb2d01b076e584c574adb7b0df2189d6aaf1daeaf4b0e17dcc2c54c4e24cfd199583e278ccfcf2777713feaf6033f4
SSDEEP 192:sxZxR4ka/f/XsvaQZLr8UzodpH1HW6+WNGYoWmSr9Ig59teJ:sxZxBa/fvsCOcnVHbGbSNztq
TLSH
T16D42C7556D28A97F8CCBD219FA557F53E3F9503290811E48AAFC8A1C14EBADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 38a06589b4596e71876f570d826fce28bb29feeef0d016d2071d9ba014655ece
MD5 ff1cd00d39e49531615de963ccc7e21b
SHA1 c30f2c2113473d47f17698672fde6d4275c65495
SHA512 436d29f6dd3fe351ac1b368b3c33006d60cd97f98ace0a9d6304c66a3c25bbfc56c22f206298911aaf84a6d1ac7e14ce4da3d481dc9c457bd375fd28972c94f2
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgB:ST/2dXOJhJlpfnpp3tNXVrN3mFDA
TLSH
T171B2305571BB421039FE291891B6872E168231B33119E66B7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 871a41e5c1d836d8be0a15d9fcca3c1ef3c7d284987c9066527378217555006c
MD5 1484fe2ac9c6018550ee73b3bccac268
SHA1 b53200a14f28c36fb75d9d082049d49a3df39924
SHA512 acb9c50cf1200c6348f107789d84db22360068c7a0cba40cafee37a480f5a80daf2585a4ead9be07164a03645694c557b9f97496561fbf04460ffea2ab5da99d
SSDEEP 384:nsiFiZcIy3sNL8TUNTUlI4eaKMOFRwzWfLBCUz5o+RYoFuOifHtgOIwZOyrLSgLq:XFQy3OwgaqkEBCUy+RYoFhi/XsImf
TLSH
T10AC24A32E8A8DABBEDEA4ED9B74A7603DEE44163D58C9AD4D9D81D1C009B4DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c7b3258409ef98fe160567272e4d161ff49986f601698c070b2b1b6ce8219f75
MD5 934e30414bc81488d0cbca2f4f04ea7a
SHA1 dac4913b8b48c4a7ecd187d233b5b33cb3f448bd
SHA512 fcf0237a9fe54731819cf5711c7b5d80f09971291a58f8f55714312636defafba0a155d854b3a7f554685c1b3db4d3b3ae982ab216f7dea65eeee51bd1bb7fed
SSDEEP 384:nWiFiZcI63sNB8TUNTUlIm2aKMiX4wzWfLBCUz5o+RY9FDsa+VY68gL/7IzVoA:9FQ63AwgcuHEBCUy+RY9FDhgGP
TLSH
T195C24A36EC98D9ABECFA4FD9AB4A7603DEF40163959C9AC4CAD85D1C008759D0307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 842e65728b6f3b4cbb92b8b15ffcec3e17de97608c808b12572b974a26fb2ea7
MD5 ab2a57f4683d207e1dfbd0fdac5c74fe
SHA1 501fbc5f70e23f96608c5e7ca1a6a697858fc7de
SHA512 da6e03a0da312eeaccd9e98135dc60f135e04fcba00e738cedd534a37a02cdec88eba0951afadeef1808e711d82868343ffd039e0e245afaa4bc24591abcb579
SSDEEP 384:ndiFiZcIy3sNL8TUNTUlI4naKMiFRwzWfLBCUz5o+RYoFuOifHtgOIwZOyrLSgLK:UFQy3OwgpakEBCUy+RYoFhi/XsISf
TLSH
T1C8C24A32ECA8DABBECEA4ED5B74A7603DEE44163D98C9AD4D9D81D1C009749D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c0f9e9b3b339f36f84d5cdda0c463c319496b8bbfa5e3a360c5cf993ae5537fb
MD5 6e6c3b2236ec790470de70869f8bd96e
SHA1 e5cc1d445da66f980cd6fe40e0c7f5906dcd49f2
SHA512 08740a1b958167e17b0ba0649d6c37ab4e4bcf6b6154c3942d3029a37cce0ae47ffe281ba2ce4bf5643f3e4ae96ee3bee7cfa1ee77075003a43ff1564f739515
SSDEEP 384:n9iFiZcIbqE3sNL8TUNTUlI4eaKMOFRwzWfLBCUz5o+RYoFuemfHtgOIwZOyrLS9:0FQX3OwgaqkEBCUy+RYoF3m/XsImf
TLSH
T10EC24A32E8A8DABBEDEA4ED5B74A7603DEE44163C58C9AD4D9D81D1C009B4DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 71da857fe633f408a0db5d23c2a72cadf119dbb918f07957f16c0f536c9a4a94
MD5 5df1bc1c502a1ce09c212d15a956066a
SHA1 77b73d1d979166bc858d8b5bead1a4c09c29f809
SHA512 839eff364d4e0b2a0b0b39cc09c2ad03dd63ff2f514a19e784ed459563ad6173ad2395707d9b85a210526ed40fb284675d3779560146df7d24db6f92faaec6d3
TLSH
T12541E498B6E9110CB3B77F1A9BF6A86D487FBD632E06D55D00120D4E0A33A40D9B1737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5552-186-0x000002790CFF0000-0x000002790DFF0000-memory.dmp

Download