8d3b85765af22c9b8d1c74a97d586354cfe0279ba9773d5a3a788d47ccfd3361

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 00:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_aa0558ed-fe6f-4afd-835c-856670147c8b.html
Size 219KB
Sample260628-abax7set4l
SHA256 8d3b85765af22c9b8d1c74a97d586354cfe0279ba9773d5a3a788d47ccfd3361
MD5 8b4fd1baac94755a588d6e3b159de635
SHA1 c6d67c7f5e888190e7320b8f0267e4e655267a43
SHA512 00d7faf6a386294736f1293a054985f7bd015eb3a1aeb8ad28e2b51c7a8c379ce222c00e880f848f5ceb5b62c51baf654daa9fbe4685c0239c46de6ecaa625f1
SSDEEP 6144:VsP3QFu8w8JXlN1pqTzNVADjezvxzgt6b9Yh1muCK4aT8+BlhXQBBb0c:Vp1w8JXlN1pqlVADjezvxzgt6b9Yh1ml
TLSH
T11324FF2BC804EB382D269829A375BF769278CBF7C8A5845CE7EFD788051DC7017858B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4088	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270785148268267"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-958335860-2021930596-4099878453-1000\{5498EED3-4319-460C-B62F-D3C8C03E5035}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 4824	4956	msedge.exe	90
PID 4956 wrote to memory of 4764	4956	msedge.exe	91
PID 4956 wrote to memory of 4088	4956	msedge.exe	92
PID 4956 wrote to memory of 4764	4956	msedge.exe	91
PID 4956 wrote to memory of 4764	4956	msedge.exe	91
PID 4956 wrote to memory of 5928	4956	msedge.exe	93
PID 4956 wrote to memory of 5928	4956	msedge.exe	93
PID 4956 wrote to memory of 4972	4956	msedge.exe	95
PID 4956 wrote to memory of 4148	4956	msedge.exe	96
PID 4956 wrote to memory of 4972	4956	msedge.exe	95
PID 4956 wrote to memory of 4972	4956	msedge.exe	95
PID 4956 wrote to memory of 4148	4956	msedge.exe	96
PID 4956 wrote to memory of 4148	4956	msedge.exe	96
PID 4956 wrote to memory of 5436	4956	msedge.exe	97
PID 4956 wrote to memory of 6488	4956	msedge.exe	98
PID 4956 wrote to memory of 5436	4956	msedge.exe	97
PID 4956 wrote to memory of 6488	4956	msedge.exe	98
PID 4956 wrote to memory of 5184	4956	msedge.exe	100
PID 4956 wrote to memory of 6392	4956	msedge.exe	104
PID 4956 wrote to memory of 912	4956	msedge.exe	105
PID 4956 wrote to memory of 2556	4956	msedge.exe	106
PID 4956 wrote to memory of 6376	4956	msedge.exe	107
PID 4956 wrote to memory of 6376	4956	msedge.exe	107
PID 4956 wrote to memory of 4496	4956	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_aa0558ed-fe6f-4afd-835c-856670147c8b.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffcf549c188,0x7ffcf549c194,0x7ffcf549c1a0
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,16853860026762191488,1742926462075768902,262144 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,14044243949162944091,17772539393961181427,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,2956136831198995090,13955408794816122951,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:13
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,9659157917814621633,4664087490688528156,2097152 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3688,i,17933106384978852597,1426020949610794132,2097152 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,6876375013491896719,10552506529087233040,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,7485873128888593432,3443319124218264599,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:6488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3338512129532928810,12318142324241447441,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3338512129532928810,12318142324241447441,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,14274373293122137519,5794663109983442780,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:14
  2⤵
  PID:6392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8231448801401478866,9258029585798985976,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,16557077410815406036,14587692063631721353,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,227326391133805054,4911354653784668235,524288 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:6376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5692,i,9524716832417718174,462428911859123744,262144 --field-trial-handle=2308,i,5766547787743811557,15091360428674147503,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 19509664097c265b613b84702dd83a5bf5de055759de5b566057524c40ef7e6a
MD5 21b7bb74a7a973f055e2b6a521d9b7cb
SHA1 3d70b3b2cde84afbf3f8734366a34038d4e9a9d8
SHA512 c0e322927c0dd573b4065c0af844b7689ba9ed346bc20367531c7f58dfc0db9d330f64bb479ece7c9e93e6ef8165c09293c33482618cb351288c8e942ef968f0
TLSH
T109D0C03136146102C21A22B06C00631C605D82123192C10774E1E00ECC9FA60B7C6503
MD5 SHA1 SHA512 TLSH

Submit Download

03843bae-4458-4667-a55a-1060055f3bcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03843bae-4458-4667-a55a-1060055f3bcb.tmp
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 2f633d515c208e11d5c2470d28e787f4c12fe31aef48f1dfd74990e45b8e4540
MD5 f32befc9bb8023aa0db39e8e0c71d125
SHA1 c4935f976f505a2c84ebbb1580efe9b8ea1803b9
SHA512 6257ea06d0df462bdf23a5c43cbe518e21afd4fa540998d7c304838b3502b15ed3358dc1adf89f0ece3129d08a03b9db75cfa4d7b4e1d22946ab4b437d5d637f
TLSH
T17CF028B9CC21EC3708FD5B2960940B8BE76413573B40995B3B3D920C8FB163B4686C2C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 61e853c909f84c668b45a7719199461f04fe1a68c278087f2308d90e7edff7a4
MD5 108c8295eb350a185457c81b7460bde2
SHA1 2a4565e9820d41608a5d5beb32c9c35723d38d5c
SHA512 6f4e6a116460b24a0f3a0f012f7c60b7f4f6cc98a887fbdd56175a36779afe4f120d7e24f96c9516a6e8c726e320e45bda887f25b52fa3e2bb19a88b8fec28a4
TLSH
T12351AEF7C3E4866EC91196F0AB18AE2BCE1D0515432C3C5AC9E4AF5B93E3471E14265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4f69c44b98a274b4a13b6d924cdd955bb971c84ef98c3a4236258244cdaaf805
MD5 c71c29a213d20ff620f55e1337952170
SHA1 fb4266b4ae7a953d10cfb20dbaaab7017b1aaf9a
SHA512 7f63bc790e6f97e81967f8f9a073a246b68b4bcdcc64143010bf8eed3192371b90e491ce9875f6702ac42f8cd7de22dcbb14ea37151df829188255b75d9991b8
SSDEEP 192:sxRkRsyMqZjK1Ml8wFF/fwspvcZa1zoA8peL/g6+WNIY/WKvGnIgjRJ:sxRkVbF/fwspvidI/5I3jb
TLSH
T1CD62EA166A34597BCCDBD209FA857F93D6F91533E2845E44AAFC8A0C40E7ADD211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 387abf75bfc47b820aaecb205aa90c00fd577ebbfb454f86bcb3ba3377a4c100
MD5 08d234c4c4a583f3d663c8021c9614f6
SHA1 d6184e9426b3c144b87246bcdd0ff616c60849c2
SHA512 0cb92c3456b036194bfe125fcc2201cd60b99bd2820f4cdee1c12eada8fa3659c0c374e9cf6172bdeb8053117d6c1974e54f31fda5f8905157d6ffea86f2fbe4
SSDEEP 192:sxRkRsyMqZjK1Ml8UQ6FF/fwsrKcZa1zoA8peL/g6+WNIY/WrvGnIgDNRJ:sxRkVqgF/fwsrKidI/5I4xb
TLSH
T1D162D9166A38597BCCDBD219F6857F93D2F91533A2845E44AAFC8B0C40E7ADD211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4688f92c2295627dd9696809af7049f5b937f1f18e001b34e0f3954de26bcb36
MD5 d10e9e9fe0ce5c6e16a0ea5a67382ee6
SHA1 8b1c9367d605db04ec4b43f01174e6ccd18ce6df
SHA512 02d8f5692f48d03aef1baf15a281adade336915f6cf3ba2aa37e6ecaad7a19f01d6ddde550485c4c8aa1a3d14a781cc5b1fa258b2580222b37499faee12fed88
SSDEEP 768:zEX1O9WgLLfzE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVrZwD/rooUvQ:zEX1O9WgLLfzEu1jaS2DsoUI
TLSH
T155C2FB2B640CCB7E4F840E9CEC29BED76DD802CB97984D5447EA894C03C67EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9ca76c332a5c0249535eec25b7405def7f59eb167f0a5bba84d23927e1913ebf
MD5 35cd68230f578c9035d3770e5c906b82
SHA1 54f35ec0eb5a253d3105860b99b28dd943e6cd38
SHA512 b1e87fa6fb102607cf00e774c40e074c3b3060825b1c36a2fe7a5e000bc6a6c276d97d0b006b2b0c0e1116de64a53bd00455bcf31bb5c8e1f877d204c783ed83
SSDEEP 384:83lTzBt/l8joMOimxiVwEQhoGhsM1OsBcxGNwqcjo:83lTzBt/l8joMOimxiVwEQhoGhsM1OsH
TLSH
T18AB247107A7E264038BE290CE1A5956F674130B3301AB63F7BBD60E51EA7E005EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 851bab4e5e15dbf2f9e5aa8087d8603cea016fca9ed5ad85961eac08ed8cca4e
MD5 7fd47cec582973a13a2dacfdb9a29bfb
SHA1 33e36f07421fa14c6e59eb3294e89961a6b60dce
SHA512 20cfa5b97acd8cc6980e045d06ccf226256736292ae7bdc01f6dfe266361138d5c14725e93cbf535efc9794e4c15e89ddaa869b25719410c839fd10c37987604
SSDEEP 768:8F1j+9P9wgVqsKquGV0mzUUyrpofXSmn12bfZi:x9Pee0SUfryfC0yZi
TLSH
T193D23A36DC94CA77ADE78BC9B74A7616EEE0415386CC6AD8D9D81E4C00D72DD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0e1852b65d6f537189aa193b9c660f03b8f05a5d098297d4edf4e90b66209c8e
MD5 be2fc5534209ad48a08b483c9fa00801
SHA1 bacd46ba6bd9c17edcacfb8fd5386115f9fe0ffd
SHA512 1eb84d0b8b9b27d09f63a83060b1d0f6b981bcc7799fa178fb840e6e23ec52d3cd140c10af57de1edb3bca2fed6f8640ac7efc33e53d6d6141c5e632aabae866
SSDEEP 768:dF1j+9y9wgVqsKquGV0mzUUyrpofRSmn12bfZi:09yee0SUfryf40yZi
TLSH
T1E9D23A32D894CA77ADE78BC9B74A7616EEE4415386CC6AD8D9D82E4C00D72DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5b0e44977cb26d2182dc25e43db75595b36cf3137c3e8cd34bcbc276ab8a2065
MD5 3f5b55566bc6773cabbc66be75309f68
SHA1 48f18198c904674e96b0975cf10d5bc660cc3894
SHA512 3dd63ebfb6f98b27d63d87a89ed64df80bd0953cd507001dc49be0caffdb42b74e91609f89705330f84b657f59b48bdfb2db8b637f4346f4f0834b15a8238bcc
SSDEEP 768:IF1j+9P9wgVqHKquGV0mzUUyrpofXSmn12bfZi:l9Pte0SUfryfC0yZi
TLSH
T134D23A36DCA4CA77ADE79BC9B74A7606EEE0415386CC6AD8D9D81E4C00D72DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 59d55e06ecdf3579abd5d1b41de44467e4d2ab74a5a0e98bacf3c68a5b9606c9
MD5 0c40e5d96765375144acf3d7bfb0528f
SHA1 f3c4e23bf53d83c26795ef5f7dd2a80d2a30037b
SHA512 c17914d09c46211cf89fa9f51f9dc24c0cae01b5de956488099f5605619cd592097f34a95337c9802ee29e4d5bb820e0889b1f8c16bba23bbd9dae166a86202e
SSDEEP 768:aF1j+9IZwgQqXxquGV0mzUUyrp94i+0ha4vr:/9IBe0SUfroig4vr
TLSH
T105C23B32DCA4DAABADF75FD9B709764BAEE001A3C5D85AD8DAD82D4C00871DD1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download