3049ebccd855d4514994e3120553180faa1c3f6e29094d1537fcd1a2620d0746

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Gemini Catering Redesign.dc.html
Size 70KB
Sample260722-pfmj5aef59
SHA256 3049ebccd855d4514994e3120553180faa1c3f6e29094d1537fcd1a2620d0746
MD5 25cbf8e5f70d68578878a27217a688e0
SHA1 daa40638237fd1b708afd8ec896c832274a5a53a
SHA512 0f6e8fc55216af007f0d643e90cb60266a7af34bc1bcfc000bc734fbb11b3c4772a71f36c281c2cfc94820cd9af6c06135a286950fe2e831664ec32ed9a37f7a
SSDEEP 768:85GJYWEmL8T++7+wOdVwYKIKVuhdCfU5IixAAle8exZ3/UIU7FP/YTk5pFu/23Pl:UGJ3AIdD7KUWcAAlPbZu+l
TLSH
T13763D810E1F41939A053D098FAC5854F7920E687C9691FC8FB2D56B26FC78FAE93218D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6360	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291962337380838"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{8FA4D001-83E0-48A5-B2F0-4E4E76441B2E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6324	msedge.exe
6324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe
6116	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6116 wrote to memory of 3936	6116	msedge.exe	90
PID 6116 wrote to memory of 6360	6116	msedge.exe	91
PID 6116 wrote to memory of 1068	6116	msedge.exe	92
PID 6116 wrote to memory of 1068	6116	msedge.exe	92
PID 6116 wrote to memory of 1068	6116	msedge.exe	92
PID 6116 wrote to memory of 3636	6116	msedge.exe	93
PID 6116 wrote to memory of 3636	6116	msedge.exe	93
PID 6116 wrote to memory of 5520	6116	msedge.exe	94
PID 6116 wrote to memory of 5520	6116	msedge.exe	94
PID 6116 wrote to memory of 7028	6116	msedge.exe	95
PID 6116 wrote to memory of 5520	6116	msedge.exe	94
PID 6116 wrote to memory of 7028	6116	msedge.exe	95
PID 6116 wrote to memory of 7028	6116	msedge.exe	95
PID 6116 wrote to memory of 5620	6116	msedge.exe	97
PID 6116 wrote to memory of 5620	6116	msedge.exe	97
PID 6116 wrote to memory of 5624	6116	msedge.exe	98
PID 6116 wrote to memory of 5624	6116	msedge.exe	98
PID 6116 wrote to memory of 3332	6116	msedge.exe	100
PID 6116 wrote to memory of 1152	6116	msedge.exe	104
PID 6116 wrote to memory of 1384	6116	msedge.exe	105
PID 6116 wrote to memory of 696	6116	msedge.exe	106
PID 6116 wrote to memory of 2244	6116	msedge.exe	107
PID 6116 wrote to memory of 2244	6116	msedge.exe	107
PID 6116 wrote to memory of 6324	6116	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Gemini Catering Redesign.dc.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffbb620c188,0x7ffbb620c194,0x7ffbb620c1a0
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,11650604228312142166,12431135399278678076,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,737632051138388134,17111146451682216726,262144 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:2
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,243599527384060226,2222896637886922428,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:13
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,5163811979699740704,5468525181479682914,2097152 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,1193988408550182489,17410577642511505989,2097152 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,2974053271595262274,8366736433913533960,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,326184477645235695,15904905554362558704,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11599374955324018365,4124641623757242653,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11599374955324018365,4124641623757242653,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,821482383276965682,9731022036321343716,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,13457412031608660950,16020876379488141537,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,7843196791614083343,5500306978432304614,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,3083643590773265980,10899355722906576090,524288 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5320,i,18022389897653104785,11293522339479080361,262144 --field-trial-handle=2476,i,5174915264505332174,10614304823031271026,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

01950446-d747-49a3-a46c-16f80f24d614.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01950446-d747-49a3-a46c-16f80f24d614.tmp
Size 649B
SHA256 de0bb006ea695561c2c10598bcf8e0a0db058433eae7d8a690c901e7db31c96d
MD5 8b8392ef6e8b61ef331b7143b3be8204
SHA1 8086f940b9d5a348e93f3b0030b6c79c548c41d7
SHA512 77953d94586ac0628ed63f0900852e8006de6fc8d8a645a2e4802d1f396ba7be87f0cee6339a0979d99392939f21e188eb8fe131e0ecb22f0f12fba0fff86140
TLSH
T14FF0F9A6C921AC3729FC1B1870554B47E750131B3B41994B3B3C820C4FB563B474681C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1cd7f30e9b0fe1a35dd02800bffaa6b3ed4c07813f73e7a811934d20ca886d65
MD5 897548981ff614d217ff6d0c37e59a2f
SHA1 9dde12f4bc9602d224f459362923a66d39f87de6
SHA512 a221456adfec86c432c43f82a6afaf3aa6568053e56f610f07666046b60db5079fe762a06d669355bdd8b7a38bcf09b100a338b889ab9b72b0b636c9cd6c304c
TLSH
T1D071CFF7C3E4866EC91152F0AB187E2BCE1D051A822C3D56C9F4AF5BA3E2471D141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 44432fdef9e686dcb2508f2bc029abdf718feae6895e2eaf9d50b6440f2a4161
MD5 150dfaeb210e61ddfae2acae132cd6ad
SHA1 976d80a451ea11a928e0a8a6661a65ee66e59881
SHA512 3c1c5ecf7c74d1d3a349cd02a5acdd5483e19e0a0ea6921289b38d073e25a3eff6ada980cfe4fe97f16e289a57a916aed13eb30ac5c554417c64340c016ea3d3
SSDEEP 192:sxR9R9yMqZjK1Ml8wbJ/fbseLnNRZMGzoD8peF/g6+WNIYcC4ClsGQVZGKIgjFJ:sxR9WlJ/fbseLN/M6y/5IW4gsGQVLjv
TLSH
T1C062D916AA349D3BDCDBD209FA557F93D2F81573A1505E44AAFC8A0C04E66ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1490fb373df8733c8c13c88dc26dfd96cc4fe0f4f7ea4c6c17fcb09e67401f4a
MD5 0c583052316472ab790f7c62d9f1c591
SHA1 7943442a5055e4960179b2811a7022403e35e91e
SHA512 946200da2bc7d92b2f1183f66e22157e04b602b1010b1b85a1078c907edadf48eb3627b8de6ce82c95b380cf6ae1d2aa6289e583aedda4e9e2f3b3a4b2426110
SSDEEP 192:sxR9R9yMqZjK1Ml8UQUbJ/fbsplPNRZMGzoD8peF/g6+WNIYcC43lsGQVZG2IgDT:sxR9OqSJ/fbsp5N/M6y/5IW4VsGQVFfv
TLSH
T1B162C91AA9348D3BDCDBD219F6957F53D2F81573A1505E44A6FC8B0C04E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c2dd638829d57984895f18848e48b4de739b90f1d6ea8e3166bdfcd744144bd9
MD5 ab8e34deed18f2dbb97077d8e5281a79
SHA1 3b734b8db30f531cb76d418d1337c50758bd196f
SHA512 ec090268b8f0cfa7a142ded0e57f83c358c6bc840216295bfb384d20e4179681ec37dbbb827e1a80863b06300bef6e06593f462d0dd0b325c164007b2721e7ca
SSDEEP 192:sxR9R9yMqZjK1Ml8wbJ/fbsplPNRZMGzoD8peF/g6+WNIYcC43lsGQVZG2IgDLFJ:sxR9OlJ/fbsp5N/M6y/5IW4VsGQVFfv
TLSH
T1D562C91AA9349D3BDCDBD219F6557F53D2F81173A1505E449AFC8B0C04E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 36f26cc689f49d0fc7deb993e08cff00006218de99710ea628991ede351b5c79
MD5 2634c9eb7f7aee8598509566d91629a9
SHA1 c0422b0ef20e019bd1c3835c6fdd531b0734dc6b
SHA512 89fe6d1599c9c213964a7ae1ec6555fad804c24d5e01e52b8ff2062ba0f1a93e87d34f1704d8935c686fa0d46fa720a70efe5d49503f479a1eb654398fe2382a
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9sf+:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRM
TLSH
T129B25E11713F4280383EB90C8178986F96C2B4637519F52F7B6846A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 382123e52995161974d5e6c4bbbd38584c45708490db9735aa305c5c9125e181
MD5 1305c2f3d515b6012dabafc8a62ce36b
SHA1 4657c234fff33739fb41ffdd7cd3f4af68eeb31a
SHA512 4f5dc1984b48ae8d1d128fadc09304a2b2daced2ee372ddfa14ce86ac400a5fd166083c61ff7ec4c1d663f2fb7618a50430fe20027414d0857a080cb0b364cd5
SSDEEP 384:n4iF7tNn/s3n9Su8NL48TUNTUlIRYOPvuTB9/EqfbYGGpe+DLyMsScjmwQ8LEEIL:DF7j+9fQ4wg6euzWGGNZs1jE
TLSH
T142D24B33E855CAB7EDEA8ED5B70A7606DEE451A3C48C5AD4DAD91D0C00CB1ED430BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 20b81af7e3cb03208d6731af6754cf1509534fc318c965baba6100f80128b2f8
MD5 bd5c405a8be256666cb5f060c37ae1e1
SHA1 3ba4d1af8060ee7ba060d7e2a4d82fe7a93984fd
SHA512 81ee52d858eb0c5c587de3e930a0a103a94d5a44ad7f09ff39491dd9ebe00958f37cc9c60f12129a5daf1c4f508da3d20e908f673e057b3b19d7208f91060ec6
SSDEEP 384:nYiF1tNn/s3n9SW8NL48TUNTUlIRSdPvuTB9/EqfbYGGpe+DLBcsrQ68LEEIz7EI:jF1j+97Q4wgyuzWGGN+srQVI
TLSH
T1EEB22A36E864CAB7EDEA4FD5B70A7646EEE45253C48C5AD8DAD85D0C00CB1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 208063577932b4f69b54950f9e8883a2d06b6447a533c4af2c988a719b902afd
MD5 1aae35afcfae21259aa628b3124f75b1
SHA1 854b5d72649fd19f5173cfc213fef5b6eda24493
SHA512 04049bff2f825b5a21a2ca4d6c7c9ad6943c66f9bf28e240722a358becdf4cf0234be2e1d512a2f5def809782f13520b81a54c81cfb9e571c299bfacf2fa906c
SSDEEP 384:nYiF7tNn/s3n9SW8NL48TUNTUlIRSdPvuTB9/EqfbYGGpe+DLBcsrQ68LEEIz7EI:jF7j+97Q4wgyuzWGGN+srQVI
TLSH
T137B22A36E864CAB7ECEA4FD5B70A7646DEF45253C58C5AD8DAD85D0C00CB1AD430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 066657e456b3aef1ed2be2b19f0f6dceae0a2ad7c60edd2f18547ea956567ee2
MD5 af49c3f9a3e5da66cee49a97aa045438
SHA1 b31bcfd2ff1521aefecd02bc50a873215de23892
SHA512 cbdbc39d02efc7af051d5d8b1e4b857f319a053dce09bd70b03bc5fedb03a12fbc20c268e3470be89b690ec1bdeaa88fd2e517064c0bed0a1929a3f9900f405d
SSDEEP 384:nmiF7tNn/s3n9SW8NL48TUNTUlIRqdPvuTB9/EqfbYGGpe+DLBcsrQ68LEEIz7EI:NF7j+97Q4wgCuzWGGN+srQVI
TLSH
T1E8B22A36E864CAB7ECEA4FD5B30A7646DEE45253C58C5AD8DAD85D0C00CB1AD430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 8a80f3e25c8c5013620b879a5faa375414bbc6b47b2a09def9671053eaccb898
MD5 4c4a1cd5331771198d62bdf266cc1a19
SHA1 0394d958d99e8bc2a64bb5e221e159df4f7902cf
SHA512 fa5f1b748d33e906e5001bc701f9610b3d23e44ef8c3fedec20e8be85fda2443d2be9958f8991360a1ae9b7d2b2142610671a4aee4a2dfdf2a6f34391ae5a0b7
SSDEEP 384:nIiF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTuxREqfbYGGpeKLwOObjI9G6w738LEEy:TF1j+9SXmwgUucUGGrw29MJ
TLSH
T17DC24C32EC59CAB7EDEB4F99B34A7A46EEE01167849C59C8DAD85E0C00C71ED4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download