134b03d5840dae5c833f7b419113c65edd14364e5e6ca8539c6b18370130c0e8

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
docs\_template.html
Size 26KB
Sample260730-ptc8lsan71
SHA256 134b03d5840dae5c833f7b419113c65edd14364e5e6ca8539c6b18370130c0e8
MD5 2927af91ce00b6ac0f627a4dfea5f76e
SHA1 341f5890708528e7168cf4aab626974a6575517d
SHA512 73e28aaf4c61deb326fcf4460c5c167c26c589d95e25b99e1d38696b30b8f6b7af7440802b6c0ccef54d667aa1beaf24e66c392f97238f7f783c3eb4878ba692
SSDEEP 768:q1BnXbx9AtTJNwRC4X7t81GtU0b0xADfqTm7PzImDUQ1hd:qgad
TLSH
T1ADC2D05158F1343F015665F5C6F02A197E988037F587AE067AECAB799FE6F02BD03828
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
836	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298888598598341"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{63E5EB9E-6AED-494C-8A0E-0E08BFE5C4E8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6772	msedge.exe
6772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4432 wrote to memory of 4900	4432	msedge.exe	90
PID 4432 wrote to memory of 836	4432	msedge.exe	91
PID 4432 wrote to memory of 6832	4432	msedge.exe	92
PID 4432 wrote to memory of 6832	4432	msedge.exe	92
PID 4432 wrote to memory of 6832	4432	msedge.exe	92
PID 4432 wrote to memory of 4584	4432	msedge.exe	93
PID 4432 wrote to memory of 4584	4432	msedge.exe	93
PID 4432 wrote to memory of 4188	4432	msedge.exe	95
PID 4432 wrote to memory of 3568	4432	msedge.exe	96
PID 4432 wrote to memory of 4188	4432	msedge.exe	95
PID 4432 wrote to memory of 4188	4432	msedge.exe	95
PID 4432 wrote to memory of 3568	4432	msedge.exe	96
PID 4432 wrote to memory of 3568	4432	msedge.exe	96
PID 4432 wrote to memory of 4976	4432	msedge.exe	98
PID 4432 wrote to memory of 2600	4432	msedge.exe	97
PID 4432 wrote to memory of 4976	4432	msedge.exe	98
PID 4432 wrote to memory of 2600	4432	msedge.exe	97
PID 4432 wrote to memory of 4640	4432	msedge.exe	100
PID 4432 wrote to memory of 3312	4432	msedge.exe	104
PID 4432 wrote to memory of 2448	4432	msedge.exe	105
PID 4432 wrote to memory of 5556	4432	msedge.exe	106
PID 4432 wrote to memory of 1536	4432	msedge.exe	107
PID 4432 wrote to memory of 1536	4432	msedge.exe	107
PID 4432 wrote to memory of 6772	4432	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\docs\_template.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ffd8e03c188,0x7ffd8e03c194,0x7ffd8e03c1a0
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,9720608736020242575,10994504924145199836,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:11
  2⤵
  - System Time Discovery
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,9975770973396139028,7548092106210057553,262144 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2
  2⤵
  PID:6832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,10651536217051322217,3832801654275223070,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,12188353079300511845,2713125716833411565,2097152 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,5543181168459214872,8656919514129055687,2097152 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,10908315250100904103,17851623349443558609,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,15120688682984976486,2076778259713777078,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7159334048090248594,10139095239345426265,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7159334048090248594,10139095239345426265,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,15609589360937273835,3988290773825244990,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,13297361694393836035,17035310476829791547,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,14327402547856399734,2872230288059890504,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:14
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,13945792372551011605,14303821919217110833,524288 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6052,i,10402046532782313608,3789883184306026448,262144 --field-trial-handle=2308,i,8139016480608586872,13458474618935618902,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6772

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

8da9d79c-46c8-4644-bd7b-1d45e036c8c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8da9d79c-46c8-4644-bd7b-1d45e036c8c1.tmp
Size 15KB
SHA256 cbc57710dda2515bba7c5b4b1deb53e23a4c77e9298e438be5e64a474b2f0f4f
MD5 c63e105f86ed7a06e611c23c5fcab32f
SHA1 8d1dbe1a559de3be1f750a980f65031441b2bb13
SHA512 0f927d25ddd89da18d58b11902da74a88224a502a5a657fd9ee2b91d1a9c84df7326a1064e2ba14ab18e701e7c01de02778cb5aee013499e40617f453279fc0b
SSDEEP 192:sxREREyMqZjK1Ml8UQWbw/f2srJNRZbszoD8peb/g6+WNIYcC4GjsGQD/GFIgD0E:sxRENqow/f2srJN/bE0/5IW48sGQDAoE
TLSH
T16162C71A5A248D7B8CDBD219FA957F93D2F91133A1945E44A6FC8A0C04E77ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 99e83c8c3696b4fdbf730629ac04a6f11b89bbd8212e2e983d81e26cbd688e7e
MD5 0deea05dd07cce6cea5e3460e667962e
SHA1 cad09bcf563ab7d68ae71bd955376072ea98cfce
SHA512 da3627523e7f11bfa16e0aeabea871980dde33e34b761a6c7f48d66251a90d6e77dd23fa3af90a2bbbd73647136a46e512c5b924d004d32b210cd63d09150fc9
TLSH
T11DF02DBAC921BC3719FC1B1C70940B47EB50136B3B41984B3B3C821C4FB463B864A81C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3b08dd9d-58a8-40f1-bfce-8fdb886c9ed5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3b08dd9d-58a8-40f1-bfce-8fdb886c9ed5.tmp
Size 2KB
SHA256 4d9ed2a0413b30537ee06a8c6d366f3f2b680ea2860be748fbb973ce521966db
MD5 0ac9793e47246be9153b815644b8676f
SHA1 280b218783869762be335def8dceef3de21a0d9a
SHA512 219fef4f2cc364388e569f4c125406cf777774f998a9e6694a602359517462d85f1e5b79dc450912b4e615a5621b86661bee657b9a88b256e992120e81e05d67
TLSH
T15A51AFF7C3E4866EC90156F0AB187E2BCE1D0515832C3D5AC9E4EE5BA3E2471D141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 311d52914cfeff4e4884ca265d1702da68aaf68eeb290a341ffa2a6628bc4bd6
MD5 cbac91029ed57c89eaf6dc7181b89c12
SHA1 4c3ecbade1c5877e71adeb10ffa5b93ab543fa61
SHA512 90e76e209e1678073f44e4c3bc6c0a0d49f1484ddd942ddca10ac1f89eac9f46daec09013c05472f2f23da062bf7f7dec2a463ad6c9ae3290bad88c26674e815
SSDEEP 192:sxREREyMqZjK1Ml8wbw/f2sygNRZbszoD8peb/g6+WNIYcC4CjsGQD/GFIgjgJ:sxRENlw/f2sygN/bE0/5IW4IsGQDAjE
TLSH
T1A662D8166A349D7B8CDBD209FA557F93D6F91123A1905E44AAFC8A0C04E67ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 382691e3d847bdee71a34de491df5b6826d869fd6314ba3dca9f4773efa3a1ff
MD5 fab072ef4cf45fe16c17ce9c114809f2
SHA1 62c7d92b62cebbdc1356d8db320373fca1778175
SHA512 28fe7fadfa51eca1385c85032f3fa0551b8501106ec2fbb4550a1888dab88a940d140195e56e323fca0848b9551f9c329fac95bafc360f542f8198e5305ffe24
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EgCBdvbHAbcJVphBnQ9d8v96BWj:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRb
TLSH
T110B24D51713F4680387EB90C9178D82F96C2B4637419E52F7B6801A65F6BE039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f0fcd65c-d114-438e-ab4d-f872cd651a01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0fcd65c-d114-438e-ab4d-f872cd651a01.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 de242d2021fdb12ce75c13566610a5bad2adc39797b4b7693df3e4f0ff3a1d87
MD5 3437eae8203ab105fb489ffeff6ee7eb
SHA1 4e033de054d8867e9ca8b02c8e96dc4bb27b6d85
SHA512 3a22cecbb96331ecf8c50f91d1a7bda4aceea818f027543982bbe8bc348e8de9a83463712ce9f5af79ff2ea399319667690e39a815f1b4c8b58d29ec5eecaff5
SSDEEP 384:nviFiZcI78NLH8TUNTUlIRjPvuT7BEEqf+GGCxm+4R3cHOObjI9G6w7Lb8LEEIzN:6FQ7QHwgRuhQGCY/RsH29MLT
TLSH
T11BD25C32EC64CAB7EDEB8FD5B64A7A06DEE05123C68C9AC4D5C95E0C01975ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 fa235004844fd1bc6b6b13877d3b9379dd7facc9306f09a6758b11730625e276
MD5 21018ee358642512e3db210a1917affc
SHA1 3c1b17870770956e55868b28911047ba59500011
SHA512 265e6dd902e80a3f00a29d84ca1df00543d7221da023e8869b3e00a57d25c3f47dbffdce67d255630265eeac3b2495bb3b5abe202467d7080f2f1f9b392235af
SSDEEP 384:nIiFiZcI78NLH8TUNTUlIRjPvuTWBEEqf+GGCxm+4R3cHOObjI9G6w7Lb8LEEIzN:TFQ7QHwgRuMQGCY/RsH29MLT
TLSH
T1D9D26C32EC64CAB7EDEB8FD5B64A7A06DEE05123C68C9AC4D5C95E0C01975ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 82fbf2480fb72ef8153519037ab1c4fa9f0cada57dd546d4cf222840bc4333b5
MD5 ffc6d265caa1ed9be58400534bd55b99
SHA1 9ee9f13af018932f60d5e1f0706bbc7f1a597551
SHA512 15962456ce02c53c9d5de999955bc9f0c1a7cb6a38ed009a8676b07496026edb1cfaeb3de5f0f70f03d5801e4f7d6f9c89fefc293f16ed41b261b32a05aa20cf
SSDEEP 384:nkiFiZcIN8NLH8TUNTUlIRjPvuT7BEEqf+GGCxm+4ROZMHOObjI9G6w7Lb8LEEIx:/FQNQHwgRuhQGCY/ROyH29MLT
TLSH
T12CD26C32EC64CAB7EDEB8FD5B64A7A06DEE05123C68C9AC4D5D95E0C00975ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f710377280bac15513d2946f279749cbbd0270684f5f984cce1e09c2ebd281c6
MD5 afad7c36653c8a73c97c084cc2b11886
SHA1 f0a5376efb1cd18ed816dc4047e46413aa499f3f
SHA512 79b38eadc618b81f86bed49108976ec0730700803fde4d7498860726d6e257ce4256f68db7cb8ff6cf7675707220fadf78dcd3acc6d0051a90148bafd6a88870
SSDEEP 384:nciF1tNn/s3n9Sn8Ng18TUNTUlIRiPvuTu5REqf+GGCxm+vLFOObjI9G6w7BZ8Li:HF1j+9SX1wgUu0ZGCYwF29Mt
TLSH
T10BC26B36E859CEB7EDE74FD8B74A7A46EEE01167859C59C8DAC85D0C00872ED0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download