fca6a8fd6e6a0b4efc2673435eaee25072ebe39b71aa71cab370e7153fdf3b67

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 512B
Sample260809-aje7wsxale
SHA256 fca6a8fd6e6a0b4efc2673435eaee25072ebe39b71aa71cab370e7153fdf3b67
MD5 64c2f5e68dca8eedef53a961355aa676
SHA1 68f539a44a2b9e2fecce661adb62098b58181545
SHA512 119bf64dfbe9dc7ef5babf88218597e71e2d63dc3e3e3bf62140f3c42781b431f016e6e4cbe45f896e3e9dab8c03734a6874b73a7272faa6af3ae3e5c172e93d
TLSH
T153F09E97D8D145484D3109F4D9D1B8085ACA908793414D9134DE242D1FD97FACDBB1D8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5408	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307080660720054"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{477CD9E3-F893-450F-9A17-91F9B0C008B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe
6536	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6536 wrote to memory of 4724	6536	msedge.exe	88
PID 6536 wrote to memory of 5408	6536	msedge.exe	89
PID 6536 wrote to memory of 5564	6536	msedge.exe	90
PID 6536 wrote to memory of 5564	6536	msedge.exe	90
PID 6536 wrote to memory of 5564	6536	msedge.exe	90
PID 6536 wrote to memory of 5028	6536	msedge.exe	91
PID 6536 wrote to memory of 5028	6536	msedge.exe	91
PID 6536 wrote to memory of 6324	6536	msedge.exe	93
PID 6536 wrote to memory of 6324	6536	msedge.exe	93
PID 6536 wrote to memory of 6324	6536	msedge.exe	93
PID 6536 wrote to memory of 6120	6536	msedge.exe	94
PID 6536 wrote to memory of 6120	6536	msedge.exe	94
PID 6536 wrote to memory of 6120	6536	msedge.exe	94
PID 6536 wrote to memory of 6384	6536	msedge.exe	96
PID 6536 wrote to memory of 4972	6536	msedge.exe	95
PID 6536 wrote to memory of 6384	6536	msedge.exe	96
PID 6536 wrote to memory of 4972	6536	msedge.exe	95
PID 6536 wrote to memory of 1052	6536	msedge.exe	98
PID 6536 wrote to memory of 7100	6536	msedge.exe	103
PID 6536 wrote to memory of 4188	6536	msedge.exe	104
PID 6536 wrote to memory of 6444	6536	msedge.exe	105
PID 6536 wrote to memory of 848	6536	msedge.exe	106
PID 6536 wrote to memory of 848	6536	msedge.exe	106
PID 6536 wrote to memory of 3620	6536	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x238,0x7ffb88b1c188,0x7ffb88b1c194,0x7ffb88b1c1a0
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,15548820625527967454,4230563309512920558,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,17457822791880344915,11866215642838164904,262144 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,12596428757255548174,5722246474568563169,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:13
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,2842133202583886974,15771161382696128349,2097152 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:6324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,9779588621734682363,8600762920595893785,2097152 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,4237568750970609044,6668654461594721833,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,9523055368402349777,11641103714891297079,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:6384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,7803085700855347467,7414532427210644688,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:14
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,7803085700855347467,7414532427210644688,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,6763046673068189372,7918152302289096793,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,16396066814757865587,7084397977957338349,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,6880725880655156926,4686083670995814,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:14
  2⤵
  PID:6444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,17444396696060048942,2524354889250312602,524288 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,13784668364435049728,5465582180579248600,262144 --field-trial-handle=2384,i,2197125896545248872,3322590326501311679,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2184

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6b3a56ae8988125993b70fe286122ed2422ebdd0ccda199da7eb654d46118f0a
MD5 6532e933e0f3ce8342bd19efdd94291f
SHA1 aeabad759529ab03351c10d1674fae5dc6722fdf
SHA512 6c6ced3007ad9371ff989fabaec2e61bf39479dd7d859fa98d5d14734a4935a6a351b3e79f24fc9f5125ee0732401b86f1af0c12b14e204a4010869d169177cf
TLSH
T10CE0E5A5D960AC2719FC1B1860644647E744136B3A41894F3B3C816C8FF063B47C685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1b175d6b-6b81-464f-abf4-a175b58c3561.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b175d6b-6b81-464f-abf4-a175b58c3561.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8ac06f0ea7b2ef3136092f8cf4bba599131be0088c0d6ceab8f84153055e39fb
MD5 fb307fcfbbc0a8c127338d27cf06567c
SHA1 85c6161bce8262a4a99bf2f0dcf58044b34880f0
SHA512 76748ca25ab70e3731a4d45f3f93413c2f4888812cded0a14b9727c990777fb8cb1ee3d0f8403add9d71e78cc15fb51dcd613a91daf3c2ccf46802021dffc8b9
TLSH
T19E41AEF783F4857E8A1196F0AA18AE2FCE1D0511432C7DAAC9E0AE1793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6c46dd73318ea0c65016b34d36c4d70e2f4974b6b4964daf5ba381a101f8bd3e
MD5 c037042e793b89bee2661d04be67a481
SHA1 fd8b91cc4b8a7287c35a19b500e472468efbcb89
SHA512 d8a46f431bdb7b677eff924d45e6546bffe0f38fc17780a2b38c088a2593e54ece55d73dff01813d189be73f811e9071e9c5c0f4bfe469a494335334191fefe6
SSDEEP 192:sxRbRVyMqZjK1Ml8wbJ/fSsu0NRZ5NzoD8pek/g6+WNIYcC4x+CsGQUGuIgjsJ:sxRbClJ/fSsu0N/5pH/5IW43sGQWjQ
TLSH
T1E162E915AA749D3BCCDBD209FA557F93D6F81133A1905E54AAFC9A0C04E76ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 675fd2fd39fd8c88e1e79ebe1eed98baa1f2f2b9e6fa7577467aef79f8f66937
MD5 0efe86b3825167ddf705bfb78f63491c
SHA1 49cd7c7295b6d717cbfef99c2c7a01c876196bad
SHA512 e3f0915d79d0a3e3a48b4beda496f102fb3c9699359dc6e2b6c65a9d04ee0514c73ab9b450327226dbdb70ddb9430875911f82cd722dab74ac35fd09e49ab57f
SSDEEP 192:sxRbRVyMqZjK1Ml8UQUbJ/fSsrbNRZ5NzoD8pek/g6+WNIYcC4O+bsGQUGuIgD6Q:sxRbCqSJ/fSsrbN/5pH/5IW4PsGQWuQ
TLSH
T13972E715AA749D7BCCDBD209FA957F93D2F81133A1905E54AAFC9A0C04E76ED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 80cf03dc0f61778465e39d87bb27c2e06b7353a7b0874cd206aa93e49a2be45c
MD5 987b7fd608bd8758b66d58fbbf8a0ff4
SHA1 ff086de84b91fde729becff22ac1b013349edb84
SHA512 e0b8b310bb20cab3c7e9b497df7df690abf4eebb00302e1c6756d8c8a831b4c9e7050b4b1b024665f070f0fb59fccdd827c35ab34ab2d8144cd62dff8993c480
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9h7d:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRK
TLSH
T10CB24A11713F4680383EB91C91B8981ED6C2B4A37419E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 eef0e1fc320f53002bb4ca1db13f369972fec9b03cf1cd9ed8a25399b120a039
MD5 43e2b33974684f7bfe3bc1faabf9b49f
SHA1 541a83bfc827804e04fffce21e2facfd8825bcd4
SHA512 c77c659b3fb4906496995ca058bfca97076bf59ff2a2a4f943b231ac599ab44db5deca533e7769bb6ee96ae9ef6b043dd6c24eec27eaeb356007bab14d2b3857
SSDEEP 384:nZiF1tNn/s3n9Sn8NgX8TUNTUlIRiPvuToJbEqfbYG8oqGqrYkgOObjI9G6w7ai+:wF1j+9SXXwgUuuqG8DGURg29MaWa
TLSH
T129D24A32E854CEB7ECE68FD4B64A7A56DEE0526385DC5AD4D6C92D4C00CB1ED830BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 72c224ed0eb28aa04eaecd665252955160ac271ac6b5436b8940fabe9e686156
MD5 9cdc954729a1e7eebb07c50794eee072
SHA1 2e32729b5caff99d9f1bdd63e4aced1e92b8bcc6
SHA512 d6a51cd53336d6635a4d1331627ace6683562a77a9d5e699b200a7fb8b4e7f0de5f954622e318e904267b0c07757a1d090cd4c9582369c561d43e3a1383e07be
SSDEEP 384:nOiF1tNn/s3n9Sw8NLX8TUNTUlIRJPvuTLDbEqfbYG8oqGqrY+gOObjI9G6w7aiL:lF1j+99QXwgXurqG8DGUhg29MaWn
TLSH
T187D25A32E854CEB7ECE68FD4A70A3A56DEE0526385CC5AD4D6D96D4C00CB1ED830BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d9bdee32c949bdcb5cab76f00c749dd5fb00b456cad4581251de8caa95eaadae
MD5 415b710165b2a72c1e78416c71c802d8
SHA1 a8b508e88d2f7d6b841727e4c5d09933f6d8fd10
SHA512 74629017c543ffa20242cbe1a3efb918dbeee8cd41ad43318825c2818b90d14159b67bff00a6babfeb2dfd0054787cf48e3c2da2c0bb0c2ffc34aff04e8d16c7
SSDEEP 384:noiFiZcI28NLX8TUNTUlIR0PvuT+EDbEqfbYG8oqGqrY+gnTKwBODNZOCI0d8LEa:zFQ2QXwgGu1qG8DGUhgnewBKZON0E
TLSH
T1BFD25A32D868C9B7ECEA8FC5A60A7647CEE45263D5DC5AE8D6DD5D0C00971DE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 ceaa7f0bd115e720cc19f1a548fbe21f393b32512646be12e1943e54ed4f0da5
MD5 3376d8b1903d81c60021c63d86d5d695
SHA1 be23eb11bd8786b86dc1fb591538706d66f1026f
SHA512 933ea23547eee33430d344ef0cffbd92e23dbf7e395a3d74d75598b651aa7fc67c221a3c3c4e5862f569e7164458d0630ffaf1e680423a7c88fd128a8eb706cc
SSDEEP 384:nXiFiZcIi8NLX8TUNTUlIR0PvuT+EDbEqfbYG8oqGqrJmgnTKwBODNZOCI0d8LEa:SFQiQXwgGu1qG8DGUwgnewBKZON0E
TLSH
T1E7D25A32D868C9B7ECEA8FC5A60A7647DEE45263C5DC5AE8D6DD5D0C00971DE030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 600b334a63f50032af57e09e6bc020f2d9a623a38229c00664437ab5be5fdfc6
MD5 f82d7ac5a7ef93091a402617ea2de089
SHA1 2f7e480bae41d358ff536c48e3ffbd6d603e0275
SHA512 22843dc9fe5e334bece0f216aabb4eca6c1593d8df99cf46d45c2d0a2785326da025e3c2f998fbd9467a1a613010926426be2be810d5166771a59e62ee651405
SSDEEP 384:nhiF1tNn/s3n9Sn8Ngc8TUNTUlIRiPvuTuVREqfbYG8oqHLSOObjI9G6w7aijh83:IF1j+9SXcwgUu4UG8DrS29MaWa
TLSH
T15EC25A36DC55CEB7ECE64F98B70A7A56EEE0126385D85AC4DAD81E4C00C71ED4307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download