64d6dfbc4d68a86d81c48e60d15289d4d4fc66fcb0c370703953902c4e73515d

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
general.html
Size 356KB
Sample260808-ajhysaej71
SHA256 64d6dfbc4d68a86d81c48e60d15289d4d4fc66fcb0c370703953902c4e73515d
MD5 949ef98f7388581d5cbf105c35bd13cc
SHA1 aa31ab8992e53b644a2e95d2a80b893fd9abd41e
SHA512 d412fd0c2ddd9ed1a0a241f0b30444043ad59a7d728705336a9337dfc52be3212e6365b68cf32e1668714390fc356367fdc61374095657c63070ab62a9f2fde6
SSDEEP 3072:tTNtY99BSA8ZVGqE0mxQyp4mgWqIVIKCdfaxWEUDrJRXJx8XezTE4k3WB8TmQOH0:CGpf/N0nFyCFPM6LkoXnWOB2i
TLSH
T1E174C37BB11A10811A33F769EA636609FB17723BC242C819FA9E678C4FF11069591FCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3656	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306216816897652"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{85491F8A-1A08-480B-A182-F1A14BDDC472}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5740	msedge.exe
5740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe
6012	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6012 wrote to memory of 5616	6012	msedge.exe	88
PID 6012 wrote to memory of 4592	6012	msedge.exe	90
PID 6012 wrote to memory of 3656	6012	msedge.exe	91
PID 6012 wrote to memory of 4592	6012	msedge.exe	90
PID 6012 wrote to memory of 4592	6012	msedge.exe	90
PID 6012 wrote to memory of 3908	6012	msedge.exe	92
PID 6012 wrote to memory of 3908	6012	msedge.exe	92
PID 6012 wrote to memory of 4232	6012	msedge.exe	94
PID 6012 wrote to memory of 4232	6012	msedge.exe	94
PID 6012 wrote to memory of 4232	6012	msedge.exe	94
PID 6012 wrote to memory of 3548	6012	msedge.exe	95
PID 6012 wrote to memory of 3548	6012	msedge.exe	95
PID 6012 wrote to memory of 3548	6012	msedge.exe	95
PID 6012 wrote to memory of 5528	6012	msedge.exe	96
PID 6012 wrote to memory of 5528	6012	msedge.exe	96
PID 6012 wrote to memory of 5528	6012	msedge.exe	96
PID 6012 wrote to memory of 968	6012	msedge.exe	97
PID 6012 wrote to memory of 968	6012	msedge.exe	97
PID 6012 wrote to memory of 968	6012	msedge.exe	97
PID 6012 wrote to memory of 1052	6012	msedge.exe	99
PID 6012 wrote to memory of 1052	6012	msedge.exe	99
PID 6012 wrote to memory of 692	6012	msedge.exe	100
PID 6012 wrote to memory of 692	6012	msedge.exe	100
PID 6012 wrote to memory of 5088	6012	msedge.exe	102
PID 6012 wrote to memory of 4300	6012	msedge.exe	106
PID 6012 wrote to memory of 3260	6012	msedge.exe	107
PID 6012 wrote to memory of 1748	6012	msedge.exe	108
PID 6012 wrote to memory of 3264	6012	msedge.exe	109
PID 6012 wrote to memory of 3264	6012	msedge.exe	109
PID 6012 wrote to memory of 5740	6012	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\general.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb19dbc188,0x7ffb19dbc194,0x7ffb19dbc1a0
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,4611667399883864101,15433998333509811035,262144 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,6883794353448318989,9851888959000201299,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,5707512127850123876,13195164721119277076,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:13
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,6811787088886024540,8022036048384699193,2097152 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,5508145992275624974,11985781507781154768,2097152 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,3498057338519226370,1448877372021179281,2097152 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,16905803843462034641,13604004847665441938,2097152 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:9
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,12532239120040416652,13425126266801793709,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,3244425988355186926,10139837383419778039,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:14
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,6304502143797478303,15719520774362823992,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,6304502143797478303,15719520774362823992,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,12117995642643737304,7060783377108912284,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,7641012614719512112,11482029340597838467,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,13806233032557532973,1972405258054631162,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,10672221618233967970,8990226578086358750,524288 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6448,i,3984977270856303825,17787840514660314429,262144 --field-trial-handle=2296,i,12412900033892989946,1602413240262320898,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3b44ebf9882cbd200372c445eb0252e25954a62bf94f2b96a58acdad7a68cd29
MD5 6781583e42e668df5d34064d90a541fc
SHA1 7c4d07d2d4c57e8782720a4dece27ff419873929
SHA512 ed579fe1130e858fd1007f61864d0d7cbcf76ba6fc5091d52e37c1bc03e2ee92e5d1cdbc1ac74d87bb433b793e501eeaefcbaf67157faa2100fd1e366646cb86
TLSH
T12E61214B236D04E9D3AA4A7250D9774436F186704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592be8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592be8.TMP
Size 3KB
SHA256 9715ac45df5c8ef3d599a8b821282c43f1d64b0a0d50b83756649ca2907f5993
MD5 e9ddecda5147688f22521d958eb79a1a
SHA1 4b55e44328ed705adab501ca05ca920342713349
SHA512 038e4f03ed22ca001b4e3bba8c6c916bf2f5194f8f5ee40f43c2408be93c63b8929cb789940891fdcf8d7702bfd151fcfff6e4bad58fe0230961903f3ff607c5
TLSH
T19961214A235D04E9D3AA4A7254D9774436F086704D07BF80C0F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

c7e840ad-9b3e-413e-ba3e-1d6507d410f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c7e840ad-9b3e-413e-ba3e-1d6507d410f4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 05f8ca6ddd2a658f6f7772718cdcece7633ef0fae90c171f930f1920050b4bbe
MD5 3920645d71f8731f2b69e5c0e579fc88
SHA1 09ae80eed2f5c5cca43b673850cd407e9b062813
SHA512 e55600961f68545731d400a1b5d1baf52bd6e5130a4c850fb9f5d6f6eb44e2fd85417fefb8beb5a2afa498724f9f07ee2bb182dc14a07e4edf424fd4f6ce15d8
SSDEEP 48:YALlgWYWPgFYWIgW+gWggWkJAsJbRsJgfoKsJ2gmgCCjyTQsBJZDsOJrsBJZMs8E:D9hOK9+9g9mp5ziZe/Z9WZeNq+8ZTwQ
TLSH
T16091ADB6C3E4437E881152F49B257E1BCD2D155A422C3C66C9F5AF1F63E28B1E10169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8879bfc7530b45052745883366132b0d81e18a5a7b31b4f8b282ea0041714a58
MD5 596c499490b18f3c5c3ed17bdd2c91eb
SHA1 22b2a87443cdecd6a87ed45ad07501f2d7260eb6
SHA512 3764a2788a955dafda7e79b5bda285667f0d8943ae360a57cf672e2552e141f247382f872add75ee0000ad247a55542bb9348f87c2be1cc631701195af3a6d77
SSDEEP 192:sxRhrbI/f5ssUprQ59zoA8p4M/g6+WNIYn8COhxGjIgDgJ:sxRhPI/f5ssUJt/5ITC0cQ
TLSH
T1D732C5166E68A83B9CCBE21DBB15BF53D2F9503260D42E08B7FC9A5C14E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4a7eda9e0aa7467a07f5ea6c82f3d67f1b0855f693d948bfb5b79f7b1020c6e6
MD5 2ca853662dfc4e41a25446dbfb5d5fc4
SHA1 404adde80522cdd181991e07a393a9a7b2d3601f
SHA512 f6d78147c6040f3fa3efa7d20e29737f568dc470811da53fcf8c24791f861b06cd7293bea6bc5aacaed3d38d6f1462497aa6df3076628d68bc9b1a05d70d66b0
SSDEEP 192:sxRhrbI/f5ssDprQ59zoA8p4M/g6+WNIYn83hxGjIgD6J:sxRhPI/f5ssDJt/5ITRci
TLSH
T18E32C6166E68A83B9CCBD21DFB55BF93D2F95032A1D42E08B6FC9A5C04E76CD121740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 91f0851e40d6b8e3f43d55c5c2b27da617664160bdc7e7e9ff92a60685849ebc
MD5 52298867d6ebac34e5976de101a1a078
SHA1 d8c1ccaada0689cee930c9ab71ea142732971e18
SHA512 ad665f0aeb47f5c866c4b0e8796405b720f8a15b75902ecef5569d883e3a1ae724e38ca82074e02a90780066a49a4ee01f92c92010d4c75ae2a38e3adb365ae2
SSDEEP 192:sxRWrbI/f5svDprQ59zoA8p4M/g6+WNIYn83hxGjIgIJ:sxRWPI/f5svDJt/5ITRcs
TLSH
T1FE32B6166E68A83B9CCBE21DFB25BF53D2F9503261D41E08B6FC9A5C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 415943c587e5dfd6755b596998a9b20da31921deedab79fef0da1d3ea65b33ca
MD5 346f8bca809429c667f1142c566f67ea
SHA1 29b0a1d43a28ab3899bc386d6649bbdd93a67e25
SHA512 418eed7c7bb4fd62c4900655ff68a74ddd87a2d1c23a01adf2a7bc7e33b1ff42a833bbea16c0ecd6b64518af430dd75e00293c79b41f47f3b964eb004c1044e9
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP5rohMf:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0V6
TLSH
T136B2DB3B604DCB7E5F800AADEC19AFDB7D9802C79A948D4447FE990C02C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b8ea41c1323a1a34d24e8872274f0faa6a7f2f5ce86c2f271adfec76387714c7
MD5 fd47b690ad5a27edfe8b0bd63208152d
SHA1 c4fbaf808a61495a2c9d6808e111a43266bf8d2e
SHA512 d28ec87d782296f88fa46e48d224875ecb0d0a4ae1fb9ad8905db4aa9d5d9ffbae5153e59772c28d73d4f714c740f70f746d4c61e4a7c744795ffb4f43c053dd
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQBrmKMQT:CtaTHd3LeTInPlOgxU1NAj70HS3eyEkB
TLSH
T195914481307F4240397E7A5C84649C1B92C174B33469A5ABF7AD16B20F6BE524EFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c394.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c394.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 635f2be99551850e064b205be914737aa2aafef498bc380b851a21322b1f62a2
MD5 f5b58d503cb053cb8806dcaddf3ded3a
SHA1 aea5faeb3072f918572eef81d9e76eb648862cf3
SHA512 168e3bb6a927f4f125d41de19b8ae866fcc77d31ef4bd58e1e0a3be4fbed18b0f5240741d6cfacddda250098aba22b7d3dcecb7256fb1b49a3e10261d028be85
SSDEEP 768:crv+4UNbdG3Ye+qDZIO0XSHtNzc4ReyIsPpeVH1S5F:cbsbo3YejHttc44bsREH1W
TLSH
T18313CF32E8788937ACF6A645B14B76537EF8521782C81A94C5DE2F4C0A8B4DD131F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f6f500638392a3c4bf836c4178e874f2d0fae156f4a8aa8087abd2208833bbca
MD5 dd90b62d57dfc9e8c1466091be6bf075
SHA1 e7ba90e4930a7a3182a43b66cfe8308e3bb9426e
SHA512 f80cd82c6df50cadf422ef616bda991d72384ca33081c069b23d34539a39514db703e66cb0f759bdc9cbd90aa227f169e575f63bbf2ff841fd0e16ddaf4c3a82
SSDEEP 768:Arv+4UNbdG3YlwqDZIO0XSdtNzc4ReyIsPpeVH1S5F:Absbo3Yltdttc44bsREH1W
TLSH
T1C513CF32E8788D37ACE6A645B10776537EF8521B82C81A94C5DE6F4C0A8B4DD131FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c7a3fd979f5a9d32fd91840868843f7c0bb94a90737a780c8da868a089c05a42
MD5 ab5cba054d38572db03b937fa150f246
SHA1 f9a45cf8ad28d8f6a3eb22432b3733372beca6f4
SHA512 65e972ec75f009a83c1029cd089af8cbcdc57d590e8a905047c85595c0f4df759fe6555bb56b6a1ab83cd0ec6cc5df06e0dfa7c83b83eadcf78f98620ab9739e
SSDEEP 768:Wrv+4UNbdG3blwqDZIO0XSdtNzc4ReyIsPpeVH1S5F:Wbsbo3bltdttc44bsREH1W
TLSH
T19913CF32EC789D33ACE6A645B10776537EF8521B82C81A94C5DE6F4C0A8B4DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cd6102da7bca0718319d85f3025f89612e53ed413476ef1c98e48d98ccf23644
MD5 e66bcf560c058ce5e3821156d683294c
SHA1 39dc4b243eae7d6ad5e8f51f395198cd9cfc6b6b
SHA512 d6257bdfde7e9b5778a88b3b9c1ea3f1767f8ebf99e4023f3afaff7dea086bad677297347e51df9ef0f7333a97dd12124d934e4c25ec49cad3e8aa9c8e4210eb
SSDEEP 768:/FQ33nwgjlwqDZIO0XSBFNzc4ReyIsPp2ewBKZOm:C33pltBFtc44bsR2evZZ
TLSH
T1FC03AE73EC64C977ACEAAB45FA0A3203AEF44267C1C46AA4D7DE6E1C15471DC135BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a0231b8cbaf236448fa18b91883a7fa26bdc28f22614ac7a6622daf8ee333a09
MD5 2af50a3c034431f3d576a05b1e14562c
SHA1 7b03ab80a5c7dc66f6c44b6b3496b86c4d972adf
SHA512 7c515b8e89849712a13efeabc57c21509f94d18811b698dd1faa781e7745b3ca3ca34221ffdc0125858be5521292a6c1eacbdbb6aac29de9381aa169dadc7239
SSDEEP 768:qt3LlwqDZIO0XSdtNzc4ReyIsPp2ewBKZOm:qt3Lltdttc44bsR2evZZ
TLSH
T1F2F2BF32EC349C73ACE9A245B5077243BEF89227D1C82A6496EE6F1C054759D135FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8e00bf4ee58128c65df7f6dcd66716879f13996a465109d148ba2e2484ecdb94
MD5 037d7ec9015aa4a1e47f10afe3e9b8b5
SHA1 33d59f98ca63dbcd72b05074ac6dddfaf940e088
SHA512 5d246bad29457a1b6e01509a94488420a183fa7208f7787b2a9d483e2ca56a606253b4b5a4ec026629fc2bb201740f8b39285d3bb1c79e3565f0fd428f47760c
SSDEEP 768:6rv+4UNbds3zBDZIO0sNzc4ReyIsXBeVH1S5D:6bsbS3htc44bsxEH1Y
TLSH
T1B703CF32A8788937ECF6A686B50B72137EF8611B82D81B90C5DE6F4C464B5DC131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73f2a39a-92e0-47c3-b546-621eb9fe71ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\73f2a39a-92e0-47c3-b546-621eb9fe71ba.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download