70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sketchUp.html
Size 8KB
Sample260730-1bakjsfh69
SHA256 70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3
MD5 1eb970ce5a18bec7165f016df8238566
SHA1 9efd1514af80fe14db4ed28e9bc53975b9ee089c
SHA512 21b4d800cc282ca452f7394e95d5382340ac3481a002c21da681005a44f18ea6cf43959990cd715b4657f180e0e96d6087fe724f3200e909f9fd70ebcd5511bd
SSDEEP 192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN
TLSH
T1E6126D7E19E93308D8028A1539F267993D65880F9E866E6FB5AD0351CF8FE10E1637CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4060	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299204943589305"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{CCC95AC2-FDE9-44BC-AEAF-B901F102CE26}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5556	msedge.exe
5556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe
6412	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6412 wrote to memory of 3688	6412	msedge.exe	88
PID 6412 wrote to memory of 5024	6412	msedge.exe	89
PID 6412 wrote to memory of 4060	6412	msedge.exe	90
PID 6412 wrote to memory of 5024	6412	msedge.exe	89
PID 6412 wrote to memory of 5024	6412	msedge.exe	89
PID 6412 wrote to memory of 3916	6412	msedge.exe	91
PID 6412 wrote to memory of 3916	6412	msedge.exe	91
PID 6412 wrote to memory of 3196	6412	msedge.exe	92
PID 6412 wrote to memory of 3196	6412	msedge.exe	92
PID 6412 wrote to memory of 3196	6412	msedge.exe	92
PID 6412 wrote to memory of 6548	6412	msedge.exe	93
PID 6412 wrote to memory of 6548	6412	msedge.exe	93
PID 6412 wrote to memory of 6548	6412	msedge.exe	93
PID 6412 wrote to memory of 6024	6412	msedge.exe	96
PID 6412 wrote to memory of 4304	6412	msedge.exe	97
PID 6412 wrote to memory of 6024	6412	msedge.exe	96
PID 6412 wrote to memory of 4304	6412	msedge.exe	97
PID 6412 wrote to memory of 6504	6412	msedge.exe	99
PID 6412 wrote to memory of 6556	6412	msedge.exe	103
PID 6412 wrote to memory of 6348	6412	msedge.exe	104
PID 6412 wrote to memory of 1752	6412	msedge.exe	105
PID 6412 wrote to memory of 7144	6412	msedge.exe	106
PID 6412 wrote to memory of 7144	6412	msedge.exe	106
PID 6412 wrote to memory of 5556	6412	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sketchUp.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x2cc,0x7ffceed7c188,0x7ffceed7c194,0x7ffceed7c1a0
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,8224058433842171457,3404957304461279534,262144 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,1065871957281602392,13021535625289283016,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,4466242210116013807,8142544020400849123,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:13
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,12130267818354194182,18105990195281315268,2097152 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,8028350226871387419,3054195857881335769,2097152 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:6548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,14848668688104617891,6196033322589031753,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,9815921942264280224,4365670109938738775,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2778285885950143748,5128861009186772531,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2778285885950143748,5128861009186772531,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,10540618123208415115,12046221755427015898,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=604 /prefetch:14
  2⤵
  PID:6556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1672693448327026305,6570005236106307182,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
  2⤵
  PID:6348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,9394354782961008765,10141754295002093597,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,17297085790936117103,8848198781786216335,524288 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6284,i,3801398461073657074,3141957014021755565,262144 --field-trial-handle=2192,i,9542058752570068750,14237729675491255657,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 58ed9525fc33808d73b24d87f80b4047b53356d2772140ed88a12f4c23a83c63
MD5 90288ee3e07135bc0b20013fef3844e1
SHA1 375f68986592dc42b50b82bd090e01b7e6c9b536
SHA512 58419ee75506714edf94a5b54d5e2d5ee464af2defb523dc457ae05ea42d3f35090654feb8a83c52be850e3fb8b653954a35575d8f446982747e0ba83044389f
TLSH
T146F0F9A6C921BC372DFC1B1960981B47E750136B3B41985B3B3C921D4FB463B8746C1C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ac20e169572894a7ac807dd8910ea6f7aab3e8cac10e46c3dc4daf4d5b1d890f
MD5 9788b6faefa7bde68fa0e08bb4108edb
SHA1 6e22c84104346ed1e475f209cd37f70293c1fee0
SHA512 4fa69d40694ab2c78df7e7c4e1fabde47825e4b691018f210a84460a4cfe088e866ba89add3f006d84dbd19b45cc0fc73748594a38444b38c4a1167cb14e1c1d
TLSH
T11941CEF783F4856ECA1196F0AA187E2BCE1D0915432C3D6AC9E0EE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ea0be8a5557119890feddd86501aa9f6ee78e54f82385771fa6fd0c1b57ecf99
MD5 73228a5af60853c3bf55e56b46c06dc1
SHA1 d667a03baaa95863b994ba7baa368e33b935129b
SHA512 a33457ce1c916bc5cf711f32c9bd65c6ee794691dd3ea57a38edec1ed83879ae81ae3a07cdb805de9b2dc0738c2e52821192c7f8062ef2dad9da43e9273b0380
SSDEEP 192:sxRuR2yMqZjK1Ml8UQrbq/fhsDrNRZJBzoD8pep/g6+WNIYcC4WpsGQ2GyIgDmmJ:sxRurqPq/fhsDrN/Jl+/5IW4GsGQ8Cy
TLSH
T11E62D915A9345D3B8CDBD21AF695BF93D2F91573A1545E44AAFC8B0C04EA6EC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 bfacc4473b9312aaeca65cf95c2206d305362bea5e421090d6122a26b0da51b3
MD5 172d0f04cb90cc2b17e20b1261e9dd93
SHA1 387aa8ec1224a642dd6857d440b3b9d1bb636051
SHA512 3492c441df84e75456a050b75e66b1a17f9143ab4c6022032cd87938d24ef9515f3ebcaf3aa48dc7adcef0e8e3e320c1c61c3b49b1d00f6661cad2c5bcf45622
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9H9T:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRM
TLSH
T1F1B26C11753F4280387EA90C81B8981F96C2B4637519F53F7BA802A65F67E038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e9a036a1-b93a-40f0-ba41-bb506db3f767.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9a036a1-b93a-40f0-ba41-bb506db3f767.tmp
Size 15KB
SHA256 abc49b6bb9d23a383c98fc44874edf795728b762c2b8101e22124df852a05af9
MD5 ff3f5d3f73d0dcb5fef7d6f9abd90154
SHA1 50b3ab0afb6b9c96fd8dc718a8e6d45c473a855f
SHA512 b2bf8eec9f6f2dd091cecbe3b112f55b8e10e91fa998bfbc6cc067dc26bc697a6525cd42085a5c928ce53e11e3599f8e5497f549fca9839baa2c476fc572d010
SSDEEP 192:sxRuR2yMqZjK1Ml8wbq/fhsu/NRZJBzoD8pep/g6+WNIYcC4CpsGQ2GyIgjmJ:sxRurlq/fhsu/N/Jl+/5IW4isGQ8jy
TLSH
T18F62EA15A9349D3BCCDBD209FA957F93D2F91573A1505E44AAFC8A0C04EA6EC2113C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d88974889c0c6b7ccc1bdc3d733f49cc8cd17dc19abc259443a1c9d670ab9ca6
MD5 cf2d44f1593c9a93089ec6f847f61edc
SHA1 3549b14885a6d6d9d388db2d50521b51d778e499
SHA512 2bda0f3401fcabd2f293e453586a4bd0266324f28164b45d9b4ab2cfd31edc894ab1506fd92ff30920fb790d00bef61c390481b564f5cc3dee74477adcae6010
SSDEEP 384:nQiFiZcIK8NLr8TUNTUlIRSPvuTt6yEqfbzGYnxmr4l+OObjI9G6w70x8LEEIzO:rFQKQrwgAuogGYxIW+29Mf
TLSH
T1D9D26C32EC64CE77ECEA8ED6B64A3646EEE05263C69C5AC4E5DD5D0C049B4ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 c83eb596cf0daf13bf3eb40e02c0c0aa37b21945f18813f5916af51a9ff3158a
MD5 20ee19631dceb41e37b6929342d89aa6
SHA1 f74cd4871c16312716a40bae0e7fd4eee75805f0
SHA512 fc2bd1ca6034cbee2f3fe49a37ef9df4b45a817b2810360a70ac6f9ac44d00b92fb807e58040af035ea57fb060597c578cf3c1250272786de5c737b20e3b29f1
SSDEEP 384:njiF1tNn/s3n9SE8NLr8TUNTUlIRVPvuTC6yEqfbzGYnxmr4l+OObjI9G6w70x82:OF1j+9FQrwgju1gGYxIW+29MPI
TLSH
T1CCD26B32EC64CEBBECEA8ED9B34A3646EEE05263858C5AD4E5C95D4C04CB5DD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 13a3e57d36e4095f5243016b505b1334759be627f9cb44171324542291802de5
MD5 2e0defdb073b1519af5e5a0fdea04242
SHA1 88bf1a1ae68bc45924a2f25ae30b488dd5c81872
SHA512 f71ba12994dc3606d26c4d314be7b1d288f6a90d0d75a828d52ddea2da496fd073555d0c2f0195f4223cd98cafa8876f9db634c1daadfb8fba47af34488825bc
SSDEEP 384:njiFiZcIK8NLr8TUNTUlIRSPvuTt6yEqfbzGYnxmr4l+OObjI9G6w70x8LEEIzO:OFQKQrwgAuogGYxIW+29Mf
TLSH
T1CBD26C32EC64CE77ECEA8ED6B64A3646EEE05263C69C5AC4E5DD5D0C049B4ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 79e9088d28113f3eadb7fd8756e4417ce4bf68aed73e59d13fc4437ffad7be8d
MD5 d6a46b0c980e1f20380cc8ca18228b31
SHA1 cdbf30a9500faef19629caeff8d11282c41a9e04
SHA512 117a357147f761361283927268f95bfa9c450d9bf8bec244aae12eba77560b5c00052e8e1b7b04d395678afcfc2bc252a9ebe357377efcd78416b7a32863ce68
SSDEEP 384:nbiFiZcIz8NLr8TUNTUlIRSPvuTt6yEqfbzGYnxmrUB+OObjI9G6w70x8LEEIzO:2FQzQrwgAuogGYxIS+29Mf
TLSH
T101D26C32EC64CE77ECEA8ED6B64A3647EEE05263C69C5AC4E5D95D0C049B4ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 726e7e5e8745757ac28c0689b4330fa27b60aac37f5273840310f1451fce9fa9
MD5 c606c29a3b3d0d569e466a154327eca4
SHA1 29c2de91f02702c3e87b1b505ce20ca343fa12f0
SHA512 f19d37ad58f51573b778237d675b0d17ccccc61456a2dce409bfea747b96fe53407bf6ee37a6a6d6d19398dffcdcd3cad32457daa5936d7d94522c6692a51794
SSDEEP 384:neiF1tNn/s3n9Sn8Ng98TUNTUlIRiPvuTuhREqfbzGYnDLvOObjI9G6w72D8LEE7:1F1j+9SX9wgUuOXGYHv29M20
TLSH
T1CEC26B36EC59CEB7ECEA4F99B34A7646EEE0126385D86AC4EAC85D4C00C71DD4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download