ed6f6f2144998175c846a99d2a0faab5bf7b6ace318f0fe2dc4bfeaf4700c1d8

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file_c728de98ac1beb8a.html
Size 564B
Sample260627-allsfsfv41
SHA256 ed6f6f2144998175c846a99d2a0faab5bf7b6ace318f0fe2dc4bfeaf4700c1d8
MD5 54d14e2aba479693f9fd361a56d5f525
SHA1 2e52709ffe46120e45b90fb907bb2d09e083b448
SHA512 460c379c9b4c4b5b89f302cec4edaa5707578fc336ec70c8ad992d8341a9f3e27b1764b8b9f170715723afc7f3e7114faa4c09ed4e3db2a77c90ba5ccaa05498
TLSH
T110F0CD9F1F12387F2E238170F0C35068CF680A56FB9921E28748001F3ACA04549F6FAD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5864	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134269930973022425"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4274393721-1801116158-3678143273-1000\{38CF418A-1C28-4229-ADDF-D5D10146D65A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7032	msedge.exe
7032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6116 wrote to memory of 5260	6116	msedge.exe	91
PID 6116 wrote to memory of 5748	6116	msedge.exe	92
PID 6116 wrote to memory of 5864	6116	msedge.exe	93
PID 6116 wrote to memory of 5748	6116	msedge.exe	92
PID 6116 wrote to memory of 6396	6116	msedge.exe	94
PID 6116 wrote to memory of 5748	6116	msedge.exe	92
PID 6116 wrote to memory of 6396	6116	msedge.exe	94
PID 6116 wrote to memory of 1884	6116	msedge.exe	96
PID 6116 wrote to memory of 1884	6116	msedge.exe	96
PID 6116 wrote to memory of 1884	6116	msedge.exe	96
PID 6116 wrote to memory of 5956	6116	msedge.exe	97
PID 6116 wrote to memory of 5956	6116	msedge.exe	97
PID 6116 wrote to memory of 5956	6116	msedge.exe	97
PID 6116 wrote to memory of 3788	6116	msedge.exe	98
PID 6116 wrote to memory of 3876	6116	msedge.exe	99
PID 6116 wrote to memory of 3788	6116	msedge.exe	98
PID 6116 wrote to memory of 3876	6116	msedge.exe	99
PID 6116 wrote to memory of 4236	6116	msedge.exe	101
PID 6116 wrote to memory of 4868	6116	msedge.exe	105
PID 6116 wrote to memory of 1244	6116	msedge.exe	106
PID 6116 wrote to memory of 2340	6116	msedge.exe	107
PID 6116 wrote to memory of 4928	6116	msedge.exe	108
PID 6116 wrote to memory of 4928	6116	msedge.exe	108
PID 6116 wrote to memory of 7032	6116	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file_c728de98ac1beb8a.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd0885c188,0x7ffd0885c194,0x7ffd0885c1a0
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,17628680086624717730,11574601299069321995,262144 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,10577756137982335163,12352260735101557817,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,4323908532845969267,17049455008865046864,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:13
  2⤵
  PID:6396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,18435379122779865647,4763328139111893399,2097152 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,3434178512495582769,5523167244241063743,2097152 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,11958145429892107388,7917702528931969759,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,9160798098290961535,11175670162937362246,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,7810020025635789739,12483692841664992038,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,7810020025635789739,12483692841664992038,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,14074801618237153335,14505139582713978832,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12694046104246361306,3276798780015971583,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,6554541653648062692,9150089501005037100,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,5885054682006832305,252088307349250396,524288 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,5806890425906521604,4886937784950766131,262144 --field-trial-handle=2596,i,16212949273499729059,12332861773744545137,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 afab44831d15737b93a51b5da32d6f7ffdeb215ed2ae065fce98d07ea4026ae9
MD5 577602fc13804460f1a4c682a14371fa
SHA1 75c72bc7e167208774b7c3c199ee72158d472d5b
SHA512 cf269890ba0a2bcf1c40983f5ab82ca0bed90f59b35f5275ced490c8da7884427c1e64cec45fcf6fb345409604822a89ee8e179211bc96abdb7d379a2baa2ee4
TLSH
T112D08021350EB882D11B10FACD62C316711985636263D10E7991D02DCC974D0B3C5597
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 6e192e3676f272203c3b09038fdf1ade6e255358b6cdf19091d849313322417a
MD5 82cbc4e7858836650b10977e45995021
SHA1 28af126f18fc346dba8c0dd3a4929352870c686c
SHA512 82e9aead2c8528cdca79e61e684b81f3b1bf94623450023e08d5884343f9cdbd40ed5d4a538c7d56b96f0d8dad1da63ec1c86b6df27b2032eebe967b7735989b
TLSH
T178F0F4A9D922EC7718FD0B1971A44A0FE750136B2781999F3B3C920C8FB067B4686D2C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 465909eb5fd552ae00496605bce265ab16a5c88c0c90e2a6a8d2dd36e8830a5d
MD5 775e97f95e5c501ef2fb8217d2086e33
SHA1 82cc8672db63d94abf7f370accf6ff7829a82de2
SHA512 8d4bdcdde6d03f4f5bfc57b2ca58278bef31ab4737dfea782dde4c9a7d9abd8499b12e7f8302caa0c32c2a1079c5ecdfa9953aaf7dd26f6412643de72ec8debd
TLSH
T17B41CCF3C3E8866EC91146F0BB147E2BDE2D0914432C3D5A89E4EF5B93E2471E14194A
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 e3de184d5bdd828e8e14aac8b28039b2ee9622b4b7d28d0a18422f73467e20c8
MD5 d697c39ac2e9206e3b827219f23212b3
SHA1 ada2832118f9409eaf535049712ad0f6d12b9a81
SHA512 c04920185509557c8e90bb384a54774545bf88fb1ec497b71afb64e94a29d838a54ea1614edc288095f275d6a69404b2c99c13194544f96bcb156947517039a3
SSDEEP 192:sxR9ReyMqZjK1Ml8wFQ/fQsJ0WsZuAuzoA8peI/g6+WNIYJDAqDvdGAMGIgjAJ:sxR9/bQ/fQsJlSNX/5I0v/jk
TLSH
T18362D9166938597B8CDFD609F6857B53D6F81573E2505E44AAFC8B0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 13dcacde518595a6b8821c9731920e09a5f2be806e9028cdf9dc5bda77592afe
MD5 761c841790ce54b986dbb621c0a39a7c
SHA1 d7064bda02b949f68fdce44430ff284fd468d710
SHA512 40f18fbbed7a1e8eda200081376618b42ff80bca9f05ee9ecbc6be4b4831a25ee572164357729b781c05fb6ea306af8da1eeeb1f8a9c5b3b14b66eda2bfee9ee
SSDEEP 192:sxR9ReyMqZjK1Ml8UQ0FQ/fQsnaWsZuAuzoA8peI/g6+WNIYJD3DvdGAMGIgDMAJ:sxR9/qCQ/fQsnbSNX/5Icv/Ak
TLSH
T1E562D8166938597B8CDFD609F6867B53D6F91573E2505E04A6FC8B0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 91fc157443756ccb2afe439faf44133fd4a4f983ed29b8c599202b7e2311fab7
MD5 228b97a96f0957e881904ac80f29f1c4
SHA1 185b120738fa31f15de070836d56a356df9658f7
SHA512 b0c2acd693248aa632daa1b57206083ec5be7f3a1ac1a43bb8cbf5c6685a8d5377b01f4c44d254f8825a7641f107e4405772b3e0f10dca598fc4fefdd6f89d8f
SSDEEP 768:Aeax56WgGMffA8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4u8CcrofF3czg:Aeax56WgGMffAu1jatBCHd3cM
TLSH
T17EC2FC2B240CC77E4F845E9DEC29AED76DE801CB9B588D5447EA880C03C77EB911A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 f90e4cc1a2e42e3c6554254caacffac3172c0cb156419e65b3569e89815b82f3
MD5 302fdb0672dfd8e40708a7c31e8cfb36
SHA1 a080dea376010a7cef9a325468861afe1a85d198
SHA512 15d849b54929fbfb8ef7cf2150a16a5c8e1f3b7114a4152fea0237cd31cd778b132f55c0f6502ec743b24644981ff8105e25667ba0eb4dcc1fdb4c016d9094e6
SSDEEP 384:CEsqH8wSgMr85QoaiVuNqCBUsDJO9ZfLHob0Vx1pVnopZUP2PHbAzvHvR0HLzR:CE9RKPHbAzvHvR0HLzR
TLSH
T1B3B22C51797E220039BD2919D194966F675230B3301EBA3B3BBD24E20EA7E004FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c416b4a69d8a77f5ed53b010546edb2daa2feb89767eee28c1705a82f885d296
MD5 4519b82bd443115cd435f13c696e4fe2
SHA1 e21acb71267b691c24338168b1909312c0fff6fe
SHA512 0315d178a3dda7a59294c3858f7d26bcd12aaf390468574234403cb0da77916afb5a54410b62824c57bb53e91b17cf56a9b5ddfb7c694af7a3d9720413f0655f
SSDEEP 384:nOiF1tNn/s3n9SB8NM8TUNTUlIRT/F3Y0wBc2HfoBVgGq2fpmmEITGT0Ii8Lk1Ih:lF1j+9wRwgdat36VHZffEi+0CvR
TLSH
T152C24B32DC64DA67ADE64BDAB70A764B9DF041A3D1C86AC8D9DC1E4C00DB2ED0347D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 565bdd148417a0064647454052512a9c0143dc5069fa1f34edeae241d116fea9
MD5 95533fee7deb56c43e402fb415bab93c
SHA1 9714b5a362ffad0b1482c285ad03b2ae10c0aa2c
SHA512 86a54373a8244e8ce484a4eb42701792bc2eceaa709681436aef309452a84aa3e48e098b9250ca0c4742bba5372450fef220cd9a3ecb1782ed137b5634f73bba
SSDEEP 384:nIiF1tNn/s3n9SP8NM8TUNTUlIRe/F3YXwBc2HfoBVgGq2fpm9Emn15wbAjEi8L/:TF1j+9+RwgSaA36VHZfCEmn12bfV
TLSH
T171D23A36E868CA77ACE78FCAB74A360A9EE4416396CC19D4D9CC4E4C00DB6DD1307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 58b55f0c625296f99d4910ea8cbf674fb00ecd4de18a9567dfd49e561004bf9e
MD5 f97f269479780029556e998952aab301
SHA1 72e306960b683115d38e13813e809aba84ca1220
SHA512 743551820ca88e0bbd2dd409ddd3b4c82083c02de15e5554659ed1dbd630866ee17cb87d95d1b81a50542e3bc7e88ba900abb86ee0e506593829d437b37e0e44
SSDEEP 384:nUiF1tNn/s3n9SB8NM8TUNTUlIRe/F3YXwBc2HfoBVgGq2fpmmEmn15wbAjEi8L/:vF1j+9wRwgSaA36VHZffEmn12bfV
TLSH
T14AC24A36E868CA77ADE78FCAB74A760B9EE4416396C819D4D9CC4E4C00DB2DD1307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3a1b9f420f61df064e0cac5014ccc109c0f86368ca81a406294406badf3fc894
MD5 5e4fd47c466453cc5b738749c838aa84
SHA1 2e0212e728bbd4864f9735cf3bca07745a8c7da1
SHA512 37ea6300f24d5eb7438ecfcfa7734482064c0f894489f88e90a94905ad8aecbf894e87f7df2316423dd9ae816f1c6b96c1259bee0ca31d7e9bc2d1fb02557e5e
SSDEEP 384:noiF1tNn/s3n9SN8NC8TUNTUlIRG/F3fGdAc2HfoBVgGqgfWITGT0Ii8Lk1Iz4xz:zF1j+9AXwgKZu06VHNfWi+0hvR
TLSH
T1F9C23A36E858DABBDDF65F9AB709764B9EF001A390C86EC4CAD85D4C00872DD0347D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download