848c69e154846ac83b3f6b212939e04d01e8c7e86d130cfd7c1cf83f203f3805

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
test/z0n51/app.html
Size 3KB
Sample260727-prdrcsep9v
SHA256 848c69e154846ac83b3f6b212939e04d01e8c7e86d130cfd7c1cf83f203f3805
MD5 4e77c9f66e5b103ac32fa973f94df798
SHA1 7d6443b0cea634088521b2d89964bd86fbfe96d3
SHA512 1197871f716bbcab22d135d3f89f6f6ffac126aa4c5d803d6a01d852185a1d395602f318160a47ed013b973ab54d033a8253af8f4d6b287e16e39bfea6074f4d
TLSH
T194519621ABC3291F5332478469A5BE49DB518207CB050D95F06C31ABBFF8D559CA729C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1372	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296292268960244"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{A738E113-7F54-4D92-9738-90DD99942CE7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe
6752	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6752 wrote to memory of 2480	6752	msedge.exe	90
PID 6752 wrote to memory of 4524	6752	msedge.exe	91
PID 6752 wrote to memory of 1372	6752	msedge.exe	92
PID 6752 wrote to memory of 4524	6752	msedge.exe	91
PID 6752 wrote to memory of 4524	6752	msedge.exe	91
PID 6752 wrote to memory of 960	6752	msedge.exe	93
PID 6752 wrote to memory of 960	6752	msedge.exe	93
PID 6752 wrote to memory of 6880	6752	msedge.exe	95
PID 6752 wrote to memory of 6880	6752	msedge.exe	95
PID 6752 wrote to memory of 6880	6752	msedge.exe	95
PID 6752 wrote to memory of 3116	6752	msedge.exe	96
PID 6752 wrote to memory of 3116	6752	msedge.exe	96
PID 6752 wrote to memory of 3116	6752	msedge.exe	96
PID 6752 wrote to memory of 6664	6752	msedge.exe	97
PID 6752 wrote to memory of 6664	6752	msedge.exe	97
PID 6752 wrote to memory of 2620	6752	msedge.exe	98
PID 6752 wrote to memory of 2620	6752	msedge.exe	98
PID 6752 wrote to memory of 1196	6752	msedge.exe	100
PID 6752 wrote to memory of 7140	6752	msedge.exe	104
PID 6752 wrote to memory of 7072	6752	msedge.exe	105
PID 6752 wrote to memory of 7064	6752	msedge.exe	106
PID 6752 wrote to memory of 1740	6752	msedge.exe	107
PID 6752 wrote to memory of 1740	6752	msedge.exe	107
PID 6752 wrote to memory of 1668	6752	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\test\z0n51\app.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffd8e03c188,0x7ffd8e03c194,0x7ffd8e03c1a0
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,4705199781137190297,3186910269763655074,262144 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,9427879987161247891,7077999551208887299,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2188,i,5251521810566788039,14070120327337316730,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,17047466581928157109,8278393900712130945,2097152 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,14707722352062739288,11582748482110700917,2097152 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,110749349386980799,10314409905479786624,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,9186208806642990219,8328609464239334736,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,18190153731047753305,5448412644088472088,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,18190153731047753305,5448412644088472088,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,8314793462409518664,9936516472563548555,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,10224954423160918804,17690992536568340124,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:14
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,9739898174072830361,7237844765533888972,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,15088731322939829473,5166308329190614901,524288 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6296,i,14039135893217483967,11049418116132828114,262144 --field-trial-handle=2764,i,11481494723673763840,16597058643834722154,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1668

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 3b24c37b5cd19e8b6dcc8687f66d554d65de8c699021f2b8a2f2f1d098bb703f
MD5 7deb0b26174b20f340535a8eeccf210b
SHA1 5db2f1452bac147eb0b971f1fd23a95cfacc3bf5
SHA512 a01c4c370bd2031c05d8f6711e6cdc44c78881fe8053e1b64d29b617ce0af2b6de70aa4f72cd0b408b9b5c93503b205dda1db3d9455b5bfa4b58e97affe370e3
TLSH
T175F0A9AAD921BC3719FC1B1C60585B47EB50135B3B41989B3B3C921C4FB463B868685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 40ca074b5e47eecdc3c6862db74d5400700fc922e33fe8a77b05584a8b3be839
MD5 ca258d331abe71349d1b889ab341e99e
SHA1 721c5520ed953bbbd3dcfae14356cb80f74c2d68
SHA512 0bedf5a7ca3c29d8cf1ca72a22381ae8d49329f94db4ecf4022c97f2fc193678ab87490649987b1197d65721d386dbd1892dee81c41976f9c2637d5fcf62e66e
TLSH
T11151B0F783F4866E8A1195F0AA146E2FCE1C0516436C7C6AC9E4AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d016a895b90085dba38221c7312de7a8fee5ada2118d5a89b82b2b94f83374a0
MD5 00bd94fc6a380de858911dbecf24e526
SHA1 039fd875ace1fe6f3f42187a48d92ccdeb553126
SHA512 43b03726e7fd776378436dce75655dd870c9b805148238369aba7cb687056c91938e4f03eb09e7f742fa68c71a3fd1666b9f3066235777496d2ae5a8e75b20e1
SSDEEP 384:sxRcXplC/f+sYMwN/Joy/5IW47sGQDsjE:sInC/f2MKn/5IW47sGQ1
TLSH
T1DF62D91AAA349D3B8DCFD209FA557F93D6F91573A1505E04AAFC8A0C04D6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 af0f87e75152561443008d3b851da5c3647e06dea4b120265579cf4d60aa9db6
MD5 7e6628285d32946d1ae6ebde36e0d3b8
SHA1 b6bf04964d1f49b69eac049b0a031d4b0996c22f
SHA512 de03dccf767c42ec5d93cd737824a38969eb3769e42f1ed72700e73fe97d692607f66aa717fe9c0b4903389f8d43f3eff0d7553027026b213a18d1fca1cf5b8c
SSDEEP 384:sxRcXpqBC/f+s6MjvN/Joy/5IW4nsGQDs6E:sIgBC/fsMJn/5IW4nsGQs
TLSH
T14D62D81AAA349D3B8DDFD219F6457F93D6F91573A1905E44A6FC8A0C00E67ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 4ddac2a127e5d52210c6ab8acc688ad8c4b1537729fb660b095b89f18a94ed07
MD5 b858bcf657ac1fc874a391e20fb1e7af
SHA1 1633b52735b94a5f867a9dba57b5446ee32bfcc7
SHA512 bb2aa66ab59fbf7744e014fd163404cd53295d3712710e680b0f43ab7746b5fe91e6956aa1f6cad5b134cfeb93828463e7bf1c5a7c279a6d78ca696fca5515d1
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EgCBdvbHAbcJVphBnQ9d8v96BWe:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR2
TLSH
T10FB25E51713F4680383EB90C9178D82F96C2B4637519E52F7B6801A65F6BE039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 959d9df7edc3f7c9af47c742b89543623dc83ea505d46278be7afd08575ce5b8
MD5 302db5ec7a6c251bdfb8359cdaf9bf7c
SHA1 3775d9ff61f84f2a50c54a95e7c32721fdaa0bb2
SHA512 1325369a23d4149d5aa6c5208bb95d05e41005e1425fa4b0c04d6501a79ef345064a571b7b0c1608c9280f150f2b442bdc601ae3d566f189cbd6f8eb4bed9f70
SSDEEP 384:nHiFiZcIx8NLz8TUNTUlIRTPvuTs9jEqf+GGCxm+4RoLw1OObjI9G6w7SL8LEEIp:CFQxQzwgRuqbGCY/RQQ29MS
TLSH
T1CDD26C32E868C977EDEA8FD5B64A7507DEE05163C69C5AC4D9C85D0C019B1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 8289e96417d95f95c3d05aacc6a151972118e286b2c4b63768f960004700ec13
MD5 507ca0b986901e62080ede194d3a1608
SHA1 eb22f201599343e7fc51baf6175d0f71c315cf3d
SHA512 4a18371003fcdcc0b88720e235fdb93249dec0ed853fa2628a092c45ded0537def826066e2a067386a31ccd099ae8fb7089b9dc6f16e6c0d012ca2cfcb81f20c
SSDEEP 384:ntiFiZcIx8NLz8TUNTUlIRTPvuTs9jEqf+GGCxm+4RoLw1OObjI9G6w7SL8LEEIp:kFQxQzwgRuqbGCY/RQQ29MS
TLSH
T1BDD26C32E868C977EDEB8FD5B64A7507DEE05163C69C5AC4DAC85E0C01971ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8b83f8a07c08f86c8e51e485e1cf526b9251cadb73297c8e552e7bc70d8a6adb
MD5 f9930c0a462d8d0af269c8328f19911c
SHA1 59afcef3fa7e2430b5f61419f1ee12971f4fc646
SHA512 bcb0b78989915b67013113fd6a868f761582ca05d69d94a1a1cdf78254fd37761f61e8478a1d04b189365ad81123c9c239cb463a2515e57eaf59b4efe1dec256
SSDEEP 384:ntiF1tNn/s3n9ST8NLz8TUNTUlIRTPvuT1E9jEqf+GGCxm+4RoLw1OObjI9G6w7+:kF1j+9uQzwgRugbGCY/RQQ29M+
TLSH
T1BCD24C32E868CA77EDEA4FD8B74A7A46DEE05163C58C59D4DAC95D0C01CB2ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f4a226470939e91e1cadce07b0a54174c934586373980fd54908356a6562f829
MD5 bd91b32330f1b07483c0b97154354ea3
SHA1 40b52220af318e8504cb496120b4b9e929455ac8
SHA512 5c5ae75b843e371113332135f6a410d971fa38af9fb48750e3c38527c06062e478930773e74120f91206bdcb13559c4f011bb3ec94427b06d4159227ee5837eb
SSDEEP 384:ndiFiZcI68NLz8TUNTUlIRTPvuTs9jEqf+GGCxm+4RnZvw1OObjI9G6w7SL8LEEu:UFQ6QzwgRuqbGCY/RnRQ29MS
TLSH
T1CFD26C32E868CA77EDEA8FD5B74A7507DEE05163C69C5AC4D9C85D0C019B1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3dca4651b449e81614f60a6cfc40e5e93334365f5646af433f3699c785db9084
MD5 0b512420a84417a36fa6df4c2ade1889
SHA1 9a741a4513120e46a10ace093632d2b423f703e9
SHA512 9dc3a4bba5d780a472d53bb75135faf7919806988117049d2834854342f4fb2b4af505eafb64c680647941e933e844d5a171ab30f2045b0363bd7ef9fc4a4d10
SSDEEP 384:nciF1tNn/s3n9Sn8Ng18TUNTUlIRiPvuTujREqf+GGCxm+vLVOObjI9G6w7BZ8Li:HF1j+9SX1wgUuOZGCYwV29Mt
TLSH
T1B3C26C36E859CEB7EDEA4FD8B74A7A56EEE01167859C59C8DAC85D0C00871ED0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download