2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 1005B
Sample260623-pdmgcacx41
SHA256 2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e
MD5 fd879317e803d0d934db5bcc5ff8fcc8
SHA1 21b7954728b3579bbccddde44255bd8173f96f64
SHA512 2b274bf9900fd88d8697f67fdd82db000d1c1c9447ef1d4fd6b0202ac74008142ada2e30beed8f3b3e6e5ea8931f35cb21d5f5294ac9721a366d0d675043731e
TLSH
T168110EE72204920E3F0091807043312CC9D79EE96FA58C41D9CB989A75D8E81C82B388
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4792	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266903871282819"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-958335860-2021930596-4099878453-1000\{00F5FF53-3C9C-4993-B672-9373C2172BD9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6332	msedge.exe
6332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe
5984	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5984 wrote to memory of 6036	5984	msedge.exe	89
PID 5984 wrote to memory of 3568	5984	msedge.exe	91
PID 5984 wrote to memory of 4792	5984	msedge.exe	92
PID 5984 wrote to memory of 3568	5984	msedge.exe	91
PID 5984 wrote to memory of 3568	5984	msedge.exe	91
PID 5984 wrote to memory of 6604	5984	msedge.exe	93
PID 5984 wrote to memory of 1492	5984	msedge.exe	94
PID 5984 wrote to memory of 6748	5984	msedge.exe	95
PID 5984 wrote to memory of 6604	5984	msedge.exe	93
PID 5984 wrote to memory of 1492	5984	msedge.exe	94
PID 5984 wrote to memory of 1492	5984	msedge.exe	94
PID 5984 wrote to memory of 6748	5984	msedge.exe	95
PID 5984 wrote to memory of 6748	5984	msedge.exe	95
PID 5984 wrote to memory of 2968	5984	msedge.exe	96
PID 5984 wrote to memory of 4516	5984	msedge.exe	97
PID 5984 wrote to memory of 2968	5984	msedge.exe	96
PID 5984 wrote to memory of 4516	5984	msedge.exe	97
PID 5984 wrote to memory of 4728	5984	msedge.exe	99
PID 5984 wrote to memory of 1608	5984	msedge.exe	103
PID 5984 wrote to memory of 3288	5984	msedge.exe	104
PID 5984 wrote to memory of 2904	5984	msedge.exe	105
PID 5984 wrote to memory of 7028	5984	msedge.exe	106
PID 5984 wrote to memory of 7028	5984	msedge.exe	106
PID 5984 wrote to memory of 6332	5984	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffd2bc4c188,0x7ffd2bc4c194,0x7ffd2bc4c1a0
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1864,i,18057163311988625406,1169640468425932081,262144 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,8100082560498462069,7302756437283129284,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,15428967082517700425,4489162892475440175,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:13
  2⤵
  PID:6604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3368,i,13111004780341017300,10451351079767186942,2097152 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,5027228051031760423,9207689361182994679,2097152 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:6748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,3526375822278685591,13477222483119738200,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,9456518813928923058,3176313956042066862,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,17371163917338762143,14634030461857530821,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,17371163917338762143,14634030461857530821,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,17365171810777109350,3026912257596181476,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=1248 /prefetch:14
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,16061507065590876652,11372813907955784869,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=1276 /prefetch:14
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,9906146155562082971,14829238842721904568,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,13970518617495645788,1445076492737799578,524288 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6336,i,14958138591545681882,13620841882697571310,262144 --field-trial-handle=2424,i,17347563231007617345,13920506067612617248,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 19509664097c265b613b84702dd83a5bf5de055759de5b566057524c40ef7e6a
MD5 21b7bb74a7a973f055e2b6a521d9b7cb
SHA1 3d70b3b2cde84afbf3f8734366a34038d4e9a9d8
SHA512 c0e322927c0dd573b4065c0af844b7689ba9ed346bc20367531c7f58dfc0db9d330f64bb479ece7c9e93e6ef8165c09293c33482618cb351288c8e942ef968f0
TLSH
T109D0C03136146102C21A22B06C00631C605D82123192C10774E1E00ECC9FA60B7C6503
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54c2f594ac5ab8cb2c84ac95854712b1d39191769839007889ad58d0a8acb09b
MD5 35a353c55b125bcf6e8367640eeea748
SHA1 1655243ec502fb3b5a85abd22fbd1f62cd1c2d0c
SHA512 2da841d1abcd6407ef04255ba7b81e4a131a12cc27032c43d6d17f9e17a75ddd466b533c45594f0e81eda5c450b35a336c6eed9c4f2302f610f34731bf1aea49
TLSH
T170D0C03136146102C21A22706C10632C605D82563591C10770E1900ECCDFA6077C6503
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 746bc37bae33425abb5bc7da5e2507e1e5202ec8666be82b7cee831339c7071c
MD5 58705de883a96fd5d96ded9cdfe67fc6
SHA1 3d2f01d4e926df5bebf6755636b301693cc763a0
SHA512 2e6b1cb6804cd9c21af96003c1bd298031c1a29df01873076a5b84d226d8b02e906f63bf163a448ada1bc7d729e5e5db240131416828fbac45b6390917277cea
TLSH
T1D4E02BB5CC65EC3708FD175814540B86D65403477650958B763ED2084FB153A5645C2C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 64c6a4781fd477c55510fbb78b7cdc0b3685a96124c2a426e09e55b2424303ae
MD5 8886bc62cd8b2f4e774679b6bdd14b64
SHA1 20a24969069a4c67a81ce608e2c97f5348d0df33
SHA512 2376a8dc05118539ca2f0396f7d71b1804f17f844c2717fa1c4026a041002b30221ff9480d768ff59118d258246d016252bbdd0a0fd418e479e7465b15a2318e
TLSH
T1A751DEF7C3E8866D990156F0BB186E2BCE1D0915832C3C5AC9E4AF5BA3E2471E14265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 959f892a15d7d428238f715aceec59301033fdfb4f4e0f09ae14755e84643f5e
MD5 d04d59cfa0b5464bd0387410cba783ff
SHA1 72365ca247e40ef77da2b4a128edc791937a0b0f
SHA512 b8a0e0f571c9131f35ae7aace2f5d98f03ebecaf6b75ec9a82ca3df42c36c131a7ee9f9190abbcf9de64841a7323e9869990a74b92a26131a33596713c618bbb
SSDEEP 192:sxRyRVyMqZjK1Ml8wFa/fCsVUcZaezoA8peg/g6+WNIY/WKAGgIgjkJ:sxRySba/fCsVUiSX/5IJjo
TLSH
T1BE62D9166A34997BCCDBD219FA45BF53D6F91533F2905E44AAFC8A0C00E6ADD211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4dad263ee30e5cabd3a5da6fb310170eda60f4839cf945c8014edc79c9fa74ff
MD5 7f924a2e76e287e32ac4a070fbaae58f
SHA1 a1386cf26cbccb91529f47a228096494857621e1
SHA512 fca059ee02ebe746f8e36b1d94d6019e7f263048c8fc53d0c6a2780b847ab294e5cba2f73a5491b702ca50760d57f3fa41c53c9e20b67fa81bbe8029cc2996c4
SSDEEP 192:sxRyRVyMqZjK1Ml8UQLFa/fCsPITbgcZaezoA8peg/g6+WNIY/WcAGgIgDskJ:sxRySqBa/fCswTsiSX/5Iboo
TLSH
T16262D9166A38997B8CDBD619F685BF53D6F91533B1805E44AAFC8E0C00E6ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4688f92c2295627dd9696809af7049f5b937f1f18e001b34e0f3954de26bcb36
MD5 d10e9e9fe0ce5c6e16a0ea5a67382ee6
SHA1 8b1c9367d605db04ec4b43f01174e6ccd18ce6df
SHA512 02d8f5692f48d03aef1baf15a281adade336915f6cf3ba2aa37e6ecaad7a19f01d6ddde550485c4c8aa1a3d14a781cc5b1fa258b2580222b37499faee12fed88
SSDEEP 768:zEX1O9WgLLfzE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVrZwD/rooUvQ:zEX1O9WgLLfzEu1jaS2DsoUI
TLSH
T155C2FB2B640CCB7E4F840E9CEC29BED76DD802CB97984D5447EA894C03C67EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8e1fad3a43e4ad19aaad2c51395a2dd1ac0b7fdcc358a204922fd168566bf141
MD5 426fdcb91b79d06c7f902168372cd89d
SHA1 abfbbd89ba5d7f81e523c5ead62add9bdafdfc70
SHA512 296ce22af1f23b1acb3d59a7e35450665864e58f1399c14c4589d2eda80877c25909b65128b8297c85799e57388045caa544c0b0a3cb8c0e8e86fa40b82992d0
SSDEEP 384:83lTzBt/l8joMOimxiVwEQhoGhsM1OsBcxGNwqobu:83lTzBt/l8joMOimxiVwEQhoGhsM1OsF
TLSH
T18DB26B117A7E224038BE290CE1A5952F675130B3301AB63B7BBD60F51EA7E005EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0872b98d1957fc80583b1e9ac2eba79ded62a3be556a8a8d261d34f053680b3c
MD5 cf22417315bb7708504eb9319c5d4052
SHA1 7797d733a5923d11ecea0c27a077be685d81b678
SHA512 d6826f70b2bf5bcf91a51bbce17176de7308f8b0077e5f2c1228f849bab2e462bcf13d321e09e08fdedd22380d9571fd05905b08f1f8b1801f87051aac1f5edb
SSDEEP 384:nriF1tNn/s3n9SB8Nu8TUNTUlIRUgqB2eKudmqOfLPG4ZHgixdzf9XfTXJy/Pb9m:GF1j+98jwgDqbQqQGf61f7Jy/Atvx
TLSH
T155C24A32D864CE77ADE35FD9A6097647AEF04163D5C8AAD8DAC86E0C00DB2ED4307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cec496f010091debdb13a255fbc25097bd47ca770a0ef806ab45483518b7142b
MD5 f9cf06e1c0215545db75b611d9613813
SHA1 4d3eb7313a584cda06ac0a065a0ef787c113224d
SHA512 5dd95e22b4a68d444d0929623b60e45a2d0f9fa6ba970d666c7b1fbc5a642ad42fbab05d4a24ec55162468d5fd861a3d7cf5a998254a4313fe19299fdae9cf3c
SSDEEP 384:nliF1tNn/s3n9SB8Nu8TUNTUlIRUgqBGeKudmqOfLPG4ZHgixdzf9XfTXJy/Pb9m:sF1j+98jwgDqnQqQGf61f7Jy/Atvx
TLSH
T115C24A32D864CD77ADE35FD9A6097647AEF04163D5C8AAD8DAC86E0C00DB2ED4307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e02a09f0c1aafba4ec79692865a0d182cbc63fe637a8e18ad1f781a1a5da0c05
MD5 e9d89bcea9c1aa9dba9816412155ae48
SHA1 84a6eaae066481e6fe26b5b30a0b7442d4620e35
SHA512 eade9f55f16e82c2e68bc1d9df14afa5c00071583ec749ea2eda9eb059ca9875a4557a033f111828a555982c2a9baf5118ce772d1523385416b0a489d0dc6f49
SSDEEP 384:niiF1tNn/s3n9SB8Nu8TUNTUlIRUgqB2eKudmqOfLPG4ZHgixdzf9XfTXaKy/Pbk:pF1j+9ojwgDqbQqQGf61f7aKy/Atvx
TLSH
T161C24A32D864CE77ADE35FD9A7097647AEE04163D5C8AAD8DAC86E0C00D72ED4307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 cc816b458a56eb3342994f80394d7656d7b9fabb6a7b9191838eb341a168e6c0
MD5 fd1568cd0c3fdb25f4399f787608e470
SHA1 3ebdb0a8ddc38b75e1e998157705ff004e40403e
SHA512 2a1479e33ce899ef7d9dca36ebd048d1f7dacc564f8c0692e76b7132ade2ab45ec3b7e8953d74e4aa3a2ac15b6a4ebd0866f2b3aa3807bf5273c8826b9c0cf75
SSDEEP 384:n+iF1tNn/s3n9S58Nx8TUNTUlIRBBgqB5+UdmqOfLPG4ZHgixdzf9cNSITGT0IcO:VF1j+9I8wgCqCxqQGf6qNSi+0mvh
TLSH
T12DC24B32DCA4DA679DF65FD9B709764BAEE001A3C1C86AC8D9D82E4C00D72ED1347D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download