ccc7b707f7ef3833bb9ba96e9b7d4984816dc01c170e147c927bf09c16d09135

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 00:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 90KB
Sample260802-ag2m4szfpf
SHA256 ccc7b707f7ef3833bb9ba96e9b7d4984816dc01c170e147c927bf09c16d09135
MD5 0da308432db3c244efbbc3721b4ea3ca
SHA1 65f0223b89c855b19614eb85669713684f1ae26f
SHA512 a614b8cd50b23feb16b0ea09e26c21fec7fcce6c78a8142153bcd3b941aa91a7454b7d6ee5ab2d60b7a2b9046aafc5ce415ca97b3f4de20095be4572f1b0e6ec
SSDEEP 1536:ut0ZypklnhKAFgYvkAi91IJLDfQSgJDElwmsyXg9DUEeGYrr2mN4bMa+uHuZIKcx:ut0UCnhKEgqMlHQIS/G/BDpFLMPvE5/
TLSH
T1D1933972DB8C1C7B2B1783D96904BB5D9AABD63EC9074DA0B2F7415C47D0FEA185302A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301031180286203"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{89248315-67F9-46B3-A5A0-593CDF57CFDD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 2760	5056	msedge.exe	88
PID 5056 wrote to memory of 4176	5056	msedge.exe	90
PID 5056 wrote to memory of 5040	5056	msedge.exe	91
PID 5056 wrote to memory of 4176	5056	msedge.exe	90
PID 5056 wrote to memory of 4176	5056	msedge.exe	90
PID 5056 wrote to memory of 1360	5056	msedge.exe	92
PID 5056 wrote to memory of 1360	5056	msedge.exe	92
PID 5056 wrote to memory of 3124	5056	msedge.exe	93
PID 5056 wrote to memory of 6080	5056	msedge.exe	94
PID 5056 wrote to memory of 3124	5056	msedge.exe	93
PID 5056 wrote to memory of 3124	5056	msedge.exe	93
PID 5056 wrote to memory of 6080	5056	msedge.exe	94
PID 5056 wrote to memory of 6080	5056	msedge.exe	94
PID 5056 wrote to memory of 4448	5056	msedge.exe	95
PID 5056 wrote to memory of 4448	5056	msedge.exe	95
PID 5056 wrote to memory of 4448	5056	msedge.exe	95
PID 5056 wrote to memory of 5244	5056	msedge.exe	96
PID 5056 wrote to memory of 5244	5056	msedge.exe	96
PID 5056 wrote to memory of 5244	5056	msedge.exe	96
PID 5056 wrote to memory of 4992	5056	msedge.exe	98
PID 5056 wrote to memory of 4992	5056	msedge.exe	98
PID 5056 wrote to memory of 5212	5056	msedge.exe	99
PID 5056 wrote to memory of 5212	5056	msedge.exe	99
PID 5056 wrote to memory of 4180	5056	msedge.exe	101
PID 5056 wrote to memory of 3128	5056	msedge.exe	105
PID 5056 wrote to memory of 4984	5056	msedge.exe	106
PID 5056 wrote to memory of 1372	5056	msedge.exe	107
PID 5056 wrote to memory of 4868	5056	msedge.exe	108
PID 5056 wrote to memory of 4868	5056	msedge.exe	108
PID 5056 wrote to memory of 3212	5056	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffa31a2c188,0x7ffa31a2c194,0x7ffa31a2c1a0
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1960,i,4758928274475061924,2200170110598086847,262144 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,3031561671722822907,7389925055159872270,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,12293872243044093042,16585137184877421635,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:13
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,10445290781344838110,6410926138688024470,2097152 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,12534875429405511790,17013908189808709629,2097152 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,5051261856716612075,5911552523992600851,2097152 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,4745888168727313790,12854224254763565453,2097152 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:9
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,12275517678415568684,15894708160819535051,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,4458984047268553888,12062669673987963696,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,3489446603451991684,1220025097103648884,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,3489446603451991684,1220025097103648884,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1384,i,15696351265263920981,5492488355637614413,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=1172 /prefetch:14
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1392,i,8494793700735292786,12408642575864194927,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1348,i,733116508662891073,12167029357566690530,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1316,i,5869151900549985949,6138636542634439115,524288 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=1228 /prefetch:14
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1420,i,3811561704561775526,11315738014887676532,262144 --field-trial-handle=2648,i,12174301183347748154,9426699280046566294,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

4030d310-bbd8-4036-b7b1-6ca68b7ee75a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4030d310-bbd8-4036-b7b1-6ca68b7ee75a.tmp
Size 23KB
SHA256 db9a419c383d00ed8672a42a01931f06f068c1dcd2c52185fc73a92d9b166574
MD5 5cc2d2491cee027b1eb83a470b94dfec
SHA1 9cf74a3e5915a3795963e823f29fd733d47c3131
SHA512 2aec51f2cba5e67c24d23e86666d914c8134ee98da98e6cb70bcef6f3470db1cbf9764de5e71d2669765b2f53bccc3b7abead04982cc39c99c658e72a5f96b9d
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3RkvroruA:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0Vm
TLSH
T160B2DB3B644CCB7E9F800AADAC596FD77D9802C797988D4047FE990C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c005cc39948f2e0db3dae1fac7308655cb422bba99390f54329cdca38acbd025
MD5 bd896e0ae8804269bd2955539f65f7c1
SHA1 12e419aff511e80814fcdbdd03a58c13433a25f2
SHA512 e119910c4e62d2cb4a79416a3a68c05e29f28cb3bc2393de5e493b3dd72379fab8d26d9ab3e65dff64a7764c93ef1378de5e0fdb233f1c945a11c6e2149c0881
TLSH
T18D515F58DB2E06D1D37BE6FD93F48ED6B275A8FD0907AFBA01B4D078AAC77125100412
MD5 SHA1 SHA512 TLSH

Submit Download

0d440768-a893-4e91-b99f-3304a28f1ef2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0d440768-a893-4e91-b99f-3304a28f1ef2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2401e7bae4ac4e143c065959b1832d473015c7e536bd9b9c631d1275b9730724
MD5 b9261848c5be3b412bf82f87285f10f2
SHA1 9996158db41e3d8f96c1c4969c0eb43d8c67df55
SHA512 ddc78b8cb72315d7e78c9dc10a9c19ae69da1e678bbccdc913a7b20c223d169f1fe44ae7876adb32b108893126417c716b4bc91c6020d147234bd01552863620
TLSH
T1B741ACF6C7D8876EC81256F09A247D27CE2D090A82287C258DE4FF5F63E21B1E10225F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b016dcb8ee55730cda59da7dfae7794b77b6f3cdc0830e9515b75eecbf91b586
MD5 1df78aacdd8c4584569d9fe33cb1c983
SHA1 4fe33861a9f0318be6768bf6b9dacfa86fa7d6d4
SHA512 a9623d81ba56f4af63abecd0915870dabf3e6a39bd40b9f62bc083dc839cc829ea5d9acc85be3963559e803e6ef6b90d30a1a55b7649de0ae59c37ad1e4e6f1f
SSDEEP 192:sxRqRwbq/f0sc8MusmZoczoA8p4a/g6+WNIYxzJ6GiIgIJ:sxRqkq/f0scbuqD/5Iuws
TLSH
T10632C7166968A93B9CC7D21DBB56BF53E6F91032A0D01E58FAFC961C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a2f11ee0dfcf27abd951bace75078bb190592b9b92fc61d3f9e2a2e3685e4848
MD5 8d8412242b8d90f5f80b7561fb33dc31
SHA1 97034e1bc46591b12cf8435fba533892033ba5b2
SHA512 75a011810452abd0b9d3226664039e840eafc1492a1809689656be98e4f68d35679a0aa7220346335688e221eb5a1a2f2afead62bde9f90a7623dd80d0c82c67
SSDEEP 192:sxRdRwbq/f0sl8MRsmZoczoA8p4a/g6+WNIYxHJ6GiIgDjJ:sxRdkq/f0slbRqD/5IywR
TLSH
T11242E8166968A93B9CC7E21DBB567F53E2F91072A0D01E58BBFC961C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7f03b66c85880a494d9fc5a80d1e61cb6b94afce2ef108c52d414cb36c825721
MD5 8c8b145272bb107b36735c88f9660532
SHA1 ca8ad089353da70a872b6032ff7fc903690b4c79
SHA512 4f52cf40a476d8652da99b118f8534167922903c7fe4938039e379638b8b9ceaccadd83f1ba28289020265b23bd59357bbab0a8d9c70dbe1bddf01d8892e21e7
SSDEEP 192:sxRdRwbq/f0sl8MusmZoczoA8p4a/g6+WNIYxzJ6GiIgDNJ:sxRdkq/f0slbuqD/5IuwT
TLSH
T15D32D8166968A93B8CCBD21DFB567F53E6F91072A0D01E58BAFC961C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 b1c331c64fa59caa169d8f94e4446b39cac18c0e27ef3afbb1ae6c3c56aa70c8
MD5 2d29868c5f42afd80d235029d88d2f98
SHA1 98c0322fd0ac9ef631285a98204a84f1afd2687d
SHA512 4c1170b8e9ac1a71f877aa454c9cf3e6cd767bf7ef089bc90f7cfe2f50669fe012367c57ce5463b257dbd586a4c9334a6f6536d4f11579546cefe767691d562e
TLSH
T10771E010357A42903CFF256C81E6AD2B468274677038A83FBBB904614F6BE025EFD8DD
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5ac3ed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5ac3ed.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ec3eb49490f3b088b8432b722f5b7b511a7ae96c1bd4a5238e10ed6a7a2ab889
MD5 296bb348e64d29ed50d217b1cd6796b4
SHA1 135e8f544d5a1a84ac0ab32fddd705260c6fbd0c
SHA512 4c9efc1a8b0f53b47ee463328224dfdfdb8d712c07ba19341e60ee7bc78908475cea7652979cc405d38b397c49ebde141ba65cd79a49af53c60d276040e47e08
SSDEEP 768:2FQx3ywg+pWkKL2XirtnF669yrqUjWiIwwxMt62ewBKZON304:9x3p6rtnF66INWZTMo2evZKb
TLSH
T1B3039D71AC58A9BBCDF5DB85B6123283DEF041E3D5D45EA8D6CDAA0C015B1DC1347C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2c7afdd7b120cdbb8819124e78f17206911d172578905c97b362c4b393340000
MD5 270916889b9841b047cdea8c0de83f7e
SHA1 68f058c695369cff22862850817f0c71fe7ea887
SHA512 2153d6a40e20ee3417e8e9fde4699387494a92b3cc796f8e9cd9367978823c2e15a7b64c8b05120d28dabae43dcef565a4d8786381de33427fd6746fed65e94c
SSDEEP 768:1c3rpWkKL2XircjF669yrqUjWiIwwxMt62ewBKZON304:1c3T6rcjF66INWZTMo2evZKb
TLSH
T129F2BEB0AC546DB7CDF5E785B2127283AFB451A3D2C41FA8CACDA70D015B5D81747C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7bb27520b03de90693f636682949c12d92e6f30d87f200ef6a6a7abe02135b45
MD5 1ab831b3bcdaeecd6d6f213feaa5b0f0
SHA1 259ca4dc9c0963cdf188333f4ce9211476437f2f
SHA512 bff9933029ecb25ce5742b982a62f6e3bc5da2d61db096123e08815caf14e572df21e2a5d13635f90ce84c45b5c53f12699b0f2c811f8718a5aa0657a2c623e2
SSDEEP 768:arv+4UNbdl3mPkKL2XQjF669yrqUjWiIwwxMRrUiler:absbX3NYjF66INWZTM1UsQ
TLSH
T17203CE30AC589AB3CDF2D28672437783BFB4109392C50B98C6CD670D469B4DD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d95d1aed-ff05-4a8d-8f11-79a888decbfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d95d1aed-ff05-4a8d-8f11-79a888decbfe.tmp
Size 41KB
SHA256 16a832bb01b074cfc9e405a1ee799ed1e7c2e0b4235fdcef2e9d2489999b0582
MD5 5a0d9802e9d2c6a6e060e7a66874c643
SHA1 ac2df3a0d043659c23f3deb26f24163022252e67
SHA512 86a6338cd10f9eb5683bdcb481e005d2928070e0ab8b8f5e1b789e6d9e34687bb78c058e14424d43428c4432b43c45328aa661b75cd4fe2a0b77fb5d3750ec66
SSDEEP 768:vrv+4UNbdv3XFWkKL2XircjF669yrqUjWiIwwxMt6UileX:vbsb13L6rcjF66INWZTMoUsQ
TLSH
T1D913CF30AC58A9B3CDF5D686B1137683BFB4109786C40F98CACD670D469B4DD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

073619a8-bee9-4882-9999-07d97a23c831.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\073619a8-bee9-4882-9999-07d97a23c831.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download