8f5e01e77ab42a469bb965f7b470b270e0851202d7659b40e415ce3ff210d7a5

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
testimonial.html
Size 13KB
Sample260703-alezxagy7s
SHA256 8f5e01e77ab42a469bb965f7b470b270e0851202d7659b40e415ce3ff210d7a5
MD5 6ea724714c7a6761f32029b03791c15c
SHA1 d7c23734a5d8e9924ef58b32037bd314039c7e93
SHA512 59ada02b53b8256b966911cd402d80d08b6b85a0808765450b5ed865596dbfceabaa4c86bbf921a56fb90ac43215759f252f30368bb0b69d9c0fe7bf548bfc44
SSDEEP 192:W6Lz/7znjLy4edFDxIucZA9QwXZRfo2VN8ygvVVF+ZbzNup:3LDDAWBqDA+svV7+ZbzNup
TLSH
T1CB5283256CF2117B014790E43AB17B1BAEE3D807EA1B681871FC97C95FD3D42986399C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6164	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275115073094334"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2581000985-3042091657-4068028891-1000\{6E743C99-F818-4473-A042-51F2279537EB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5752	msedge.exe
5752	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6096 wrote to memory of 6460	6096	msedge.exe	89
PID 6096 wrote to memory of 3480	6096	msedge.exe	90
PID 6096 wrote to memory of 6164	6096	msedge.exe	92
PID 6096 wrote to memory of 3480	6096	msedge.exe	90
PID 6096 wrote to memory of 3480	6096	msedge.exe	90
PID 6096 wrote to memory of 4288	6096	msedge.exe	93
PID 6096 wrote to memory of 4288	6096	msedge.exe	93
PID 6096 wrote to memory of 5296	6096	msedge.exe	94
PID 6096 wrote to memory of 5296	6096	msedge.exe	94
PID 6096 wrote to memory of 5296	6096	msedge.exe	94
PID 6096 wrote to memory of 5816	6096	msedge.exe	95
PID 6096 wrote to memory of 5816	6096	msedge.exe	95
PID 6096 wrote to memory of 5816	6096	msedge.exe	95
PID 6096 wrote to memory of 2512	6096	msedge.exe	96
PID 6096 wrote to memory of 2512	6096	msedge.exe	96
PID 6096 wrote to memory of 2932	6096	msedge.exe	97
PID 6096 wrote to memory of 2932	6096	msedge.exe	97
PID 6096 wrote to memory of 2112	6096	msedge.exe	99
PID 6096 wrote to memory of 4204	6096	msedge.exe	103
PID 6096 wrote to memory of 1784	6096	msedge.exe	104
PID 6096 wrote to memory of 6396	6096	msedge.exe	105
PID 6096 wrote to memory of 856	6096	msedge.exe	106
PID 6096 wrote to memory of 856	6096	msedge.exe	106
PID 6096 wrote to memory of 5752	6096	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\testimonial.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ff88f21c188,0x7ff88f21c194,0x7ff88f21c1a0
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17884793336119361419,6464263181327713213,262144 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,1912213394112049795,6779623890671658397,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,11204091808343730146,7180705266005383830,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:13
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,14289986035212902673,8400895346162680744,2097152 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,869171212548890816,124219739998486835,2097152 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,11607023048571661,11934444536533811,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,9646013919582425335,3366736784292428185,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,494979588771086829,15932444945769970401,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,494979588771086829,15932444945769970401,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,9187521074487349143,13350177308309692488,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,16638132881462397052,8816767609554480244,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,12306135559626589700,3605889267182311842,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
  2⤵
  PID:6396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,17857445087522048032,6377125155313979948,524288 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,7715578394239426533,10193909546252526421,262144 --field-trial-handle=2240,i,17820829014756643652,5777944689459031890,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a068243c4584907cd5534c5544cd99e57be64a6790401ecb34e138b941be50d8
MD5 487201c9d5f8581b404c328a57b95064
SHA1 9118509fc3137d34e8bd3939f3883afe9e9beffe
SHA512 6e13ca057d8cd084911b83c51e96582deab6bc970f1d4d15642021e2d461c0a71257fc4e9734447735b2fbe584808ce6833fbe556372a5954dea7135d7b571e7
TLSH
T1E8D080747F18B841C5D53571553B8700BE964116355FC645F052D10C4C398E5FBD7297
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 55097ae3e8e09b80bce3e3812987755ecca81384247ee729ac4262e176ac5f09
MD5 c1487ee49f8ccdda3c17fbfc8fc5855d
SHA1 22e1d68df0a4913cac107ff5af4cb564d869972f
SHA512 cdb748df700c498fc821f44fbc432a65b818ee7361fa8899d196bb2c32c7c86bd90573282a6465e8a2d722cbc27ecdf3b960978409d4ad6fc7fe8483e801e91f
TLSH
T1FFD0C0703F08B841C5D4313045378700BE924116340FC200F052C10C4C398E4BBD7297
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4f96fa202e248938c451d9841717d45ceebff22f854d3a3a1d6b25703345131c
MD5 20ffe118b1a13513335ea72b1d3aedcf
SHA1 73bd82925d37d3b0f036a13713c9c6a138a3fe09
SHA512 ef5c305d0626e750d35480c7ac8a0ffd5c0d1097c20732935b22f43bff9bd02bb96284d1fe3220300dd82fefc526ce9c2132d7612e44b991e1941fbb0ba95b46
TLSH
T10CE022BAC821ED6B18F90F5961A4024AEB5613172A40496B7A3C810D8FF163B028A86C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b081c0b8-aaf4-40b3-9479-44626b2e8113.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b081c0b8-aaf4-40b3-9479-44626b2e8113.tmp
Size 3KB
SHA256 33554078c00318177e34e7094993c25b410cb9afd926e295d5bfd403cd44be17
MD5 67a8d8fb3d12ee6a2799604f58810ee2
SHA1 8313e6afcecac02bab9ef7388cbea90ebda58da1
SHA512 3bf338c815f569d93b65f92dfb628ee4cf2d7e04abd1843467bcce52d8a54f7111524e8133798ba527d9df808429f4901c29ee0f46c7a9fec49ca5886acb331d
TLSH
T15981CFB7C3E8876D891156F4A7147E1BCD2D0516422C3C6AC9F4AF4FA3E2471E14265F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 b28bbe1631b1574c9d01e36250e069346ca137aafb06105a55541209772790b8
MD5 4d5c3d1af1664243b435bdf9f78eff3f
SHA1 3ddf6591515a812c9456fdfbad98be48acc7ea78
SHA512 ac5567796bbfca5ecf667a016d487c0b559d1460b017a15fc5260dbde762ae4691ffe2342cffd8859ad6cdbb1568aede0053946da083fcb07ffc539d7daefd0a
SSDEEP 192:sxRvRNyMqZjK1Ml8wFx/fEsTjf7Z5SzoA8pe8/g6+WNIYYxtvTGiGrdIgDnwJ:sxRv6bx/fEsTr15f//5IDvTibU
TLSH
T14E62EA16A938593BCCDBD219F6557F63D6F81533A2905E48AAFC8B0C01E7ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c0c1c3649967b308816843eb1c9f7b99f7d56fb601ef94277bc89007cb73b14a
MD5 685587d5d757de542bff9200b15c2f0e
SHA1 eb13f858d6d5d0e2aae28422e8336344189432aa
SHA512 c94217dc3da6c38ac2c44db30736ac8c1732020ad5ecfe4e250eb0afb1ac6cf50c2428480da7eb8c6c1cbf2b8b225c9133842362a86219f93cd0f8bb8725c4dd
SSDEEP 192:sxRfRNyMqZjK1Ml8wFx/fEshjy7Z5SzoA8pe8/g6+WNIYYctvTGiGrhIgjwJ:sxRfybx/fEshe15f//5IyvTEjU
TLSH
T12062D916AA38993BCCDBD219F6557F63D6F81573A2905E44A9FC8B0C01E7ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 17e1b5b1fd87240e0db2516334f3bf6cb257b7132f3c657d34a7105f544c4553
MD5 050b588c184889e3a976e82b53aa9a02
SHA1 34690a4e0da1a90c180f3df53058127a87862854
SHA512 544fe7f7b0612415556936872484cbcd72a921afe192c14beaf643688b2e5128c1ce079fe63718988ab2c4114418b204c4d3bcf58c3946464709f255f4595857
SSDEEP 192:sxRvRNyMqZjK1Ml8UQqFx/fEsTjf7Z5SzoA8pe8/g6+WNIYYxtvTGiGrdIgDnwJ:sxRv6qQx/fEsTr15f//5IDvTibU
TLSH
T16462EB169938993BCCDBD219F6557F53D6F81533A2545E48AAFC8B0C01E7ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9e4dabc75ad09f3d740010d370e4678264c6b1e80e58ac5470808ca54d422b22
MD5 1c17eccb7db994016680b4b6b70c4169
SHA1 59320295e971590d5bf7cf351237f7607ffe6455
SHA512 38e11ac9e6a5cdf764bd0759c5c9e415b32391f3ba3539110966c0af84882633f3d050393aaa58a98f40d44d7ddec972009ac87ec04868b7da23de6664ede64e
SSDEEP 768:57pWc3WgTXf0F8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPdRtAroYAxc:57pWc3WgTXf0Fu1jaWntLYAq
TLSH
T1C1C2FB2B644CC77E4F844E9CEC29AE966DD802CB97984D544BFA890C03C77FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 82f713ad1f10c3bdc9db100362c3a38708b35aa3ae8514df77c86d26bbb2a9d3
MD5 0e4a1ff40404c81a774a7aed9bd61518
SHA1 e945a459ac51dfe5f22c90cb733e18bfb1b22a40
SHA512 804450c832d37dbcc42e3a6075a814f5be24634d2cf8bf16830b4049b56c5edc77e940043058e4c905fd95e332fe046a19f25dc0af1f0f1170f26b25b0fe9913
SSDEEP 384:97SnL5NRMtAPjvR3R8LLAZrK610IK4cZ0/IAie3+7S6nkM94Z9Lr76TmtNFn3v25:ShJtf3BlQ1KbhJv3UJd
TLSH
T1B9B26051707B2700387E250A93B8842E564630A230DEF87B77A975E66F67E004FFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

eaafa3d4-f1fd-48d7-8575-c4240b9494ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eaafa3d4-f1fd-48d7-8575-c4240b9494ed.tmp
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9df6fb959ab62b89ba27ffcfab18264b06a55c5df3053dca3e5a3302aab4ae4b
MD5 21452dc41faa2092970a813f10c9804d
SHA1 af990c19c5b19290be41e2d10621cd5345b9a56a
SHA512 c6e457bfb91bd3990a87e5e22b79bfedcadb3e436b8ef3515dd2f5074c2b5b0bdb6ae5d7bac33d8ea59fb62dbb13642f18e9f8ee655b4dd837f7e805ec64dc55
SSDEEP 768:6F1j+9NAwgHbRlveEWuGNGvQ/fZTR6Vld:f9N4m3T/xNyf
TLSH
T176B22932D895CE6BACE68BC9A70A7647DEF0426786CC5AD4D9DC6D4C01DB2ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 cb7758e4a396a4fa27f4844a476a193dfeb7cdc1253331deb3c3a2415aeb1e0e
MD5 b792a1f318e852efbba9ac5954473dd1
SHA1 6fc5d38d7ff1fa87f603c0d39ccd5310371a224f
SHA512 a4f900475a56facd4a5d19969043d2cd6d2aa6ec8247e024383a30a5e9ae43ca6629cdc4b206eb9805e0569afbcfb2c69808803671320b03c0067ab678f03332
SSDEEP 768:6FBj+9NAwgPbRlveEWuGNGvQ/fZTR6Vln:p9NUm3T/xNyh
TLSH
T12EB21832D895CE6BACE68BC9B70A7647DEF04267868C5AD4D9DC6D4C01DB2ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 69ba1cbba2c30038f87c30ab7b45e9a721256b5486224d456e5d27e99c5134d8
MD5 25c99b545fdb00c652cfe88672525ea2
SHA1 529461668cd6e7fa88fb042dbd9a704c420d17e9
SHA512 73900bf9172a9f328a1692c569dda358c29979ab031bdfcd4d9a96cfa4def9890cb38efe9470416ed3573da1dfb0a99ad3fc330711279e5f7e2cce80ef99af2d
SSDEEP 768:kFBj+9NAwgLbRlveEWuGNGvQ/fZTR6V29MG:79NYm3T/xNy2+G
TLSH
T183D24A32D895CE67ADE78BD9B74A3A4BDEF04267868C6AC4D9D86D0C01C71ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b49db692a6b1ff0af80caa66b6daa84758cc9ab06fcc0c8628a968f5f2aff085
MD5 7d1dd713cba9f7ef41f61f88626e7725
SHA1 d6b07826c2b7f872ad2473aa3f82c137b63d28fe
SHA512 a44578b172db12e28d9785f949773b03c5fe6d92de627dd31dbad2ac989d45b4c40b911988431c6e0e8aa365dd044acac4bde117b299a667fe1cd5c1a203b8a3
SSDEEP 768:LFBj+9GAwgLbRlveEWuGNGvQ/fZTRUV29MG:m9GYm3T/xNM2+G
TLSH
T145D23A32D895CE67ACE38BD9B71A3A4BDEF04267868C6AC4D9D86D0C01C75ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 69a798f9e7df9cf9c9992da551c72dd0d5453914e72604b0edd0d42180ab8295
MD5 1773df612d060d51fd662290a5211ccd
SHA1 e1f1a4b5f54fb68c95a18a185ea013391fdb827f
SHA512 f6e8af15fc0203f70858e180e921b7eeb52f2197d2f373965239110d01058e567525fe990cdd3b2bde319072a031f4ddf47b772dce3edec35867d1681fbadef6
SSDEEP 768:nF1j+9SvwgLcbRlyrWuGNGvQ/fZbVmn12bfJKg:O9SMRT/xR0yJKg
TLSH
T117C23936D895DE6BADE38FC9B709764BEEE0426781D81AD4C9D84D4C00C72DD130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download