6caace1830594763e97cb682b5c2c8e063c35b3e67fdfbbb4e45d141714314ef

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 06:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 59KB
Sample260727-g4ev7aak41
SHA256 6caace1830594763e97cb682b5c2c8e063c35b3e67fdfbbb4e45d141714314ef
MD5 0f03b9d72cd40124ceac153c2bf653fc
SHA1 2cace12606cf7f0d165b6b938e1df01114a2b1d7
SHA512 e7c600bee0982a4ba3ec1366fa3e17e68e17f7dc471b5067d205e042ce1359dcb9b8528b140e007b5c10fec5534727c924b7d80b9aa4712b787230cc991274cf
SSDEEP 768:CNqwc5XZdypJdIui6D468WKK3zaQHeyazlp6HYPQAG2akRrBrLrStr+rnKWo0sCl:CNutypIuTD4dh5G2aal3e6zKq
TLSH
T10853C522C8F86CA3247E435892B1372AAC92F907D6425998B4BDF464578FC5B047FBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296069713628558"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{CBC44965-1DBE-4147-9452-822C7EA26377}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 6676	4296	msedge.exe	91
PID 4296 wrote to memory of 4344	4296	msedge.exe	92
PID 4296 wrote to memory of 6452	4296	msedge.exe	94
PID 4296 wrote to memory of 6896	4296	msedge.exe	93
PID 4296 wrote to memory of 6452	4296	msedge.exe	94
PID 4296 wrote to memory of 6896	4296	msedge.exe	93
PID 4296 wrote to memory of 6896	4296	msedge.exe	93
PID 4296 wrote to memory of 6720	4296	msedge.exe	96
PID 4296 wrote to memory of 52	4296	msedge.exe	97
PID 4296 wrote to memory of 6720	4296	msedge.exe	96
PID 4296 wrote to memory of 6720	4296	msedge.exe	96
PID 4296 wrote to memory of 52	4296	msedge.exe	97
PID 4296 wrote to memory of 52	4296	msedge.exe	97
PID 4296 wrote to memory of 2008	4296	msedge.exe	98
PID 4296 wrote to memory of 2008	4296	msedge.exe	98
PID 4296 wrote to memory of 4532	4296	msedge.exe	99
PID 4296 wrote to memory of 4532	4296	msedge.exe	99
PID 4296 wrote to memory of 7124	4296	msedge.exe	101
PID 4296 wrote to memory of 2332	4296	msedge.exe	105
PID 4296 wrote to memory of 1688	4296	msedge.exe	106
PID 4296 wrote to memory of 6824	4296	msedge.exe	107
PID 4296 wrote to memory of 6388	4296	msedge.exe	108
PID 4296 wrote to memory of 6388	4296	msedge.exe	108
PID 4296 wrote to memory of 3480	4296	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffbbb94c188,0x7ffbbb94c194,0x7ffbbb94c1a0
  2⤵
  PID:6676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,13139762633314607581,4634983145469850996,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,12345138083594155273,15391290813062268427,262144 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:6896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,10592538143827446805,379399810157580537,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:13
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,682687131063135988,14052957764134700811,2097152 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,5133012487245573331,16229177280382867797,2097152 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,14103351683446630708,8511136492057604382,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,2230147421567860344,6330167059544606421,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9893382626897668504,15763257281996205693,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9893382626897668504,15763257281996205693,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:7124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,7213453676578770059,1372055672254044095,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,17101081348308517281,12503113222486807827,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,1096142471336762605,6007858698450888344,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:14
  2⤵
  PID:6824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,13090626859516556482,106621617114045938,524288 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:14
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5876,i,5884071990726531283,1167860637117667320,262144 --field-trial-handle=2164,i,4712716485322502419,1575007204783779433,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3480

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 1658fbb285027274f17741b5238a4ead046744861e6f82f78a1bd3ffe3bbcc6c
MD5 b62c1f41755061fa6325c1a357339f0e
SHA1 7fbf5bbcad03c7a96c9ee042a7c750b2cf9884f1
SHA512 a44fc2a1f47088db2ffa3dbfa42947939b9e43ad57370ab65a72dabe62a0680c394d0d2126b7351c51b81577dbea27dcfea1eda170df49af0ace6412726651e1
TLSH
T1F0F02DA6C821BC371DFC1B2870950B4BEB50132B3B41985B3F3C921C8FB063B464681C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e7c0e06c702ea08311051ca195168b76b84b73e509101700c233606de6abb8c2
MD5 37943a506f18608db20830cbaa7433f8
SHA1 0da6b07befeb92fd49d4ef403e249730cc470a00
SHA512 e95017eb7b300e1c7f35db74c37ea9268ce1b5257db582bffce954af4ce59ca976ecfd7f5c06d8bcb7ff245d753b593fd2fd8febbb04d11aac939fbcfe1fcd83
TLSH
T18251A0F7C2E4866DC91196F0A7247E2BCE1D0915432C3C5AC9E4EE5BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a7fce382-f7c9-48fa-8cad-60e562be1b9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a7fce382-f7c9-48fa-8cad-60e562be1b9a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2eeb98c1dae9a0f3363ca3e51d69aa53ea02cd6361d93f32f7e1a0f3640dcee8
MD5 9eecd9b13f495c6366032a6891539a28
SHA1 d53451562d33125d35900bfbb618ba0919bf3f9a
SHA512 8e8abd754b9e02bcabbce2216ea4f94cfb7daa82901df53b6d75701ed7a07fc8eee17c137afed958bf5c950c23a527182f59efbd7e23caf8b3733a8c8434acf4
SSDEEP 192:sxRrRJyMqZjK1Ml8wbQ/f8smq7NRZvzzoD8peo/g6+WNIYcC4ClsGQOGYIgjzJ:sxRrelQ/f8smq7N/vL7/5IW4gsGQmjl
TLSH
T1BF62DA15AA349D3BCDCBD209FA95BF93D6F91173A1905E44AAFC8B0C04D66EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 268a7fa0267c4a8575a885b9d8e831429a587cbf23cec20f343c097c77ea043b
MD5 e69c58f6aba69778e3b4227177580b06
SHA1 30aa82c4a8492ac2ddd888505d9b574f91b8bd40
SHA512 baded2baa5dc22a47ab5345e6d92ffebdd75c8df68f55ecbcbeefcb70b2de29aa53229d8badbf7be7efcc54136c7b62be1e48252bb646fac2238826770ffe456
SSDEEP 192:sxRKRJyMqZjK1Ml8wbQ/f8sWqaNRZYzzoD8peo/g6+WNIYcC4QPsGQOGUIgDyzJ:sxRKmlQ/f8sWqaN/YL7/5IW4OsGQyGl
TLSH
T10862D91AA9349D3B8DDBD209F695BF93D6F91173A1505E449AFC8A0C04D6BEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 562ffc3723760f65f08258a8b00032e5fec071371809abe19c46c079e53b030f
MD5 55060c04e19d455551176b5592f5e468
SHA1 bb52e2ab55bb0944f55a5d51fb662c37670c017e
SHA512 9138740e517d9e2a0ca65ede4ba8de15612f5dc51e2f9efd89460ae66a3ac3f2e00cc28e874d48b5e70ae5a282148ce9424682cbbb21182ab3684fe4b77ceb31
SSDEEP 192:sxRKRJyMqZjK1Ml8UQWbQ/f8sWqaNRZYzzoD8peo/g6+WNIYcC4QPsGQOGUIgDyl:sxRKmqoQ/f8sWqaN/YL7/5IW4OsGQyGl
TLSH
T1AB72D91AA9349D3B8DDBD209FA95BF93D6F91173A1505E44A6FC8B0C04D7AEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 38df2982bcd12d288336adf4969938f8b9b9e7f21730bb9926444d0efc3fc671
MD5 899f4ef144854bc17015150e2812ee2c
SHA1 e12a67509a6f04177f5ea941320948291d75d314
SHA512 f28d3b87c76c94860aed3cd46fe229d1d52cf9be0cf9204d1eff3b9b96d15fbbec6d90dffe4c3d107d5ef4be3e27dd4d35fdac9e46090fb09592a90b0a9adfec
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9l2n6b3xdZ4d0z/TB75oX3UxM:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRj
TLSH
T190B24C11713F4280387EB90C9178981F96C2B4637519E57F7BA802A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 51dfa192b2b85ed4b2d99aeae2a7a52b74b0f00915c7d9bb76e106bc3d8cc350
MD5 1a71cd7c31b0b99a433baad2803d5b3a
SHA1 851b3e86851337c3e49171a3f461709f78bba53c
SHA512 c09b6327f8998d782d126ae94695ece223ca8df49d6701a0e09f84416f73f5942c0045459eed8a43bb88101e9278d3fa6d027af58ccec2209e9a463e4bfbcdda
SSDEEP 384:ngiFd7tNn/s3n9So8NLz8TUNTUlIR2PvuTin2uESVfbzGjwTDGGL2CCCTPhbR8Lr:7Fd7j+9RQzwgAu4vtGCaJzCTPBg
TLSH
T112B22936ECA5CAA7ECE74FD8A34A7646DEE04253C58C9AD4E9D95D4C00DB2DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 54fd8aa27f8b1851d7133fddbfc2c1a8405044a48f2cc9adc3dfcdd1550d0eec
MD5 13d87ebc7e6a816f26f0d6d50c507480
SHA1 37442e129d64490c9585916324418fdc891dad2a
SHA512 72f4b3f788e947b6f049e5e3c9258b71b708188c763b252bc68dc9d25bd583c8e4a5b9699bef6815d985f7690ca40e74a86ceab235caeb08480cff3cc9557556
SSDEEP 384:ngiF1tNn/s3n9So8NLz8TUNTUlIR2PvuTin2uESVfbzGjwTDGGL2CCCTPhbR8LE6:7F1j+9RQzwgAu4vtGCaJzCTPBg
TLSH
T187B22936E864CAA7ECE74FD8A74A7646EEE04253C58C9AD4E9D95D4C00DB2DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f603751682d088e1ab35bbca1a01e79f57292fdbebc6a5f2d80eaca90fef0d66
MD5 c47f0954bae0dc1b1a2d46243d020650
SHA1 45a9929cd9eb02c27c4212325296c5c528ba8dee
SHA512 7a30e65b50dc2280a51b4c2b8ac9c056c72836be64c3f2a4ab917d3ec6819cc7b7e27cd2acad1884bf0b495974f941891368a1cced9b4ed60296bb187939a40d
SSDEEP 384:nHiFdMZcIK8NLz8TUNTUlIRkPvuTin2uESVfbzGjwTDGGL2CCCOObjI9G6w7Os8R:CFdaKQzwgCu4vtGCaJzC29MY
TLSH
T1E8D27C36EC64CAB7ECE74FD5A28A7646DEE05163C69C9AC4E5D95E0C00DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 230d976c4122aa83740d484b10a66aefaae87b3c8a53cb015102690e3ce271fc
MD5 dab5bf07bed7e52a6b9915d263efb674
SHA1 b57d22da8fe34b2274e61fd6ef14b1d490c9b41b
SHA512 a7fa6a43f361ab8b60c9f04065e937da6c24bba0dc816d18ff8abf93a1027b418ec0b15bb2aa05af81603e955446f87d928063f33d79991b5c098b14f98632fb
SSDEEP 384:nliFdMZcIk8NLz8TUNTUlIRkPvuTin2uESVfbzGjwTDGGL29iCOObjI9G6w7Os8R:sFdakQzwgCu4vtGCaJ4C29MY
TLSH
T134D27D36EC64CAB7ECE74FD5A28A7646DEE05163C69C9AC4E5D95E0C00DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2e5912a335e689d9c806703dd7c4093a91c3ccb1019ff73313c31b41fe3fbfbb
MD5 d0aadf4e29aa7dc9f806ebfd9ec3d387
SHA1 a30af0904fbaf960dcad41f9e5028ea7a7305554
SHA512 022295e6ee23b6818f04ad8dfea2f099d018988e401d47c43b001c7233bf908c140d8955793d3c572e82389e4d8788cded35575482b446e23e7a9253d52207f2
SSDEEP 384:ngiFdMZcIK8NLz8TUNTUlIRkPvuTin2uESVfbzGjwTDGGL2CCCOObjI9G6w7Os8R:7FdaKQzwgCu4vtGCaJzC29MY
TLSH
T1D3D26C32EC64CEB7ECE74FD5A28A7646DEE05163C69C9AC4E5D95E0C00DB1ED030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 33a329dfb9d185fd3f7b20d39729e454f813f4bb99d4bdc008c5dc496948398b
MD5 a2aa2d3c4616d2abda4ba9f584420c39
SHA1 ca24327b7c2f925b60190706313d91fc5558723d
SHA512 30c250fd48b386ddce913734991d38fff254118dd3f345977aa15338fae012d29d5baa0627b1227f052ac510e233f899da5a74dcf1ec00349235b01735eda3a7
SSDEEP 384:nJiF1tNn/s3n9Sn8Ng+8TUNTUlIRiPvuTuyRESVfbzGjwTDG1LOqOObjI9G6w7KJ:gF1j+9SX+wgUu91tGCaBOq29MI
TLSH
T1B6C24A36EC55CEB7ECE64F98B34E7A5AEEE01163859C5AC4EAD95D0C00C719D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download