7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df.html
Size 5KB
Sample260813-ee7tkagf66
SHA256 7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df
MD5 a78e44d9c36a4aa2d67d6a5df69aa7da
SHA1 6e2d6c2123bb10f25710d399651cfa952ade12cb
SHA512 5290ea37f84ec8b07b0f61150a6259721aac955d32910e86d179339f1debbdefdbf5f3fc05ba169af27b4b1deca3d8119f7209b2c8da7ab9ad644a9a4da6184c
SSDEEP 48:hSxDAyBB6Pp/TVlaM/l5u9Z/xH+ur7Iq1KppTnjsstyJKHmWnE0MzR7YHIV6kiXj:YDeD56ZYdq9SyJKGAcBQkuFKxVY+csM
TLSH
T124B1531A88F20242688244A56BF73B9536559017CE46C958BEDEE748CFCCB51AEF338C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5268	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310667487907870"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{DAE6F34F-CC27-475B-9BFB-3ED98C71BC6E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4112	msedge.exe
4112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe
6804	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6804 wrote to memory of 4196	6804	msedge.exe	90
PID 6804 wrote to memory of 6816	6804	msedge.exe	91
PID 6804 wrote to memory of 5268	6804	msedge.exe	92
PID 6804 wrote to memory of 6816	6804	msedge.exe	91
PID 6804 wrote to memory of 6816	6804	msedge.exe	91
PID 6804 wrote to memory of 4808	6804	msedge.exe	93
PID 6804 wrote to memory of 4808	6804	msedge.exe	93
PID 6804 wrote to memory of 5424	6804	msedge.exe	94
PID 6804 wrote to memory of 5424	6804	msedge.exe	94
PID 6804 wrote to memory of 5424	6804	msedge.exe	94
PID 6804 wrote to memory of 6512	6804	msedge.exe	95
PID 6804 wrote to memory of 6512	6804	msedge.exe	95
PID 6804 wrote to memory of 6512	6804	msedge.exe	95
PID 6804 wrote to memory of 2988	6804	msedge.exe	97
PID 6804 wrote to memory of 1692	6804	msedge.exe	98
PID 6804 wrote to memory of 2988	6804	msedge.exe	97
PID 6804 wrote to memory of 1692	6804	msedge.exe	98
PID 6804 wrote to memory of 3304	6804	msedge.exe	100
PID 6804 wrote to memory of 2144	6804	msedge.exe	104
PID 6804 wrote to memory of 4720	6804	msedge.exe	105
PID 6804 wrote to memory of 1892	6804	msedge.exe	106
PID 6804 wrote to memory of 5820	6804	msedge.exe	107
PID 6804 wrote to memory of 5820	6804	msedge.exe	107
PID 6804 wrote to memory of 4112	6804	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x32c,0x7ff98fa7c188,0x7ff98fa7c194,0x7ff98fa7c1a0
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,10355236961518686732,18293397372459087907,262144 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,3443946024402273763,1524939053287961990,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,789492300929239906,9489358489238696496,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,13679342698515496835,11215050325581525436,2097152 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,16666762043268594573,8338143233077872599,2097152 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13989974215702247714,15908820405851362265,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,10860129283170808760,18319805899472700245,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,10305473822968964351,1729580989261354253,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:14
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,10305473822968964351,1729580989261354253,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,2135888733103937958,3728179830725253549,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,4776979078698579001,1768290450637421007,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,8969702343779022341,13392483363787398137,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,7908105941993258554,13258924395638327017,524288 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:14
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,1192294160297128182,9610323289552407736,262144 --field-trial-handle=2524,i,6353975653893651328,882011649420300249,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4112

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:7116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0a65952778f293e2e4f823535b66d4c2014b62a4c8729d82d7f419ff4443440f
MD5 47b1aee5126eecf6b647fcb10ac0e6c0
SHA1 1ac650daf7d295dc80ebdf7f7b083b64c0c4e6ce
SHA512 6212c18f532d0cd534f42562ddb6d8f60241023f39dfa8f99c16484eb45211eb217f056e37be0c671646cadd8b1c6691db7cdf0e708547054ebf1e5746e7e64c
TLSH
T18CE0E595C820AC3759FC1B1861541686EB40131B3A41C80B3F3C812C4FB167B428685C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c6a24e5445e3a4632c8a3b394052b0c6f160959ef214e2f98b31c20d4ed8fec7
MD5 b287e31f4dfc6ac98926645672e8397f
SHA1 4881b9c6ff73f9ce569d93bb18d9e9d3697b6b3f
SHA512 31fef546d3f00f9cb10b1481555382cbf55ac004e4544febdb7b345dd9b869c164c44c68d1e4d87b52f8859244a81ecab285a694df9197572877d5f33589e164
TLSH
T16F41B1F743F4857EDA1196F0AA18AE2FCE1D0515431C7CA9C9E0AE1793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 423dbd6d1904189aefa4e6ae1f86f66d94fb000dca00f33171eceafc9245203f
MD5 d731fb308f842eabd05aa2b0b5ba5d23
SHA1 ee6e0b8cad08e229ff8db2ab5c3e77cf3faf2737
SHA512 2914dbcbeabaf0485b6cfe24ee767edd1ebb82f85fe24a1ce81682196efcd535c62c0a1f7a6c3f5d8a5be2c9ef6691ceb4a7190e01f2050f2d66fed785a55d15
SSDEEP 192:sxRlREyMqZjK1Ml8wbR/fMsdPNRZg1zoD8peQ/g6+WNIYcC4xRasGQ2GSIgjzkJ:sxRlFlR/fMsdPN/ghP/5IW4msGQYj0
TLSH
T1EF62C6156A349D3B9CDBD219FA957F93D7FD1123A1905E44AAFC8A0C04EA6EC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a73cf9eb42a3b85c62cae51cc1f93d28bc2a4a0c79293090f1e8bf838bea365e
MD5 987fc8f5e22439802c1dbddbdc389f5f
SHA1 0d89d36aabac5538b9b45c32eec91c76b493560d
SHA512 6e1c98385cac6025d07f02c5bc8fb9275379091aea793d91b630d3f4bdfb1c0f00aa3a5f710fdf0c13083ece453735c4eefb58a96ba6caf14341c6cb3e6de053
SSDEEP 192:sxRlREyMqZjK1Ml8UQLbR/fMsMzNRZg1zoD8peQ/g6+WNIYcC47R9sGQ2GSIgDJ0:sxRlFqvR/fMsMzN/ghP/5IW4/sGQYN0
TLSH
T17D72C61569749D3B9CDBD219FA857F93D7FD1133A1905E44AAFC8A0C04EA6ED210382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 a3c2a40534bbaee5f8d7b1038d079dc3863e5749c0e909d04db561780468c956
MD5 b9115c717eab65da7eb88d2b31562d68
SHA1 86a815e6f5d3232605146f57a8023d3884c2d0ce
SHA512 0ddc8bacbab7e86e3643809e303c03ab695e0e072822c0a4d51a246a0dbd5e14c62eabd144edac7d0c4206fe8a6e10d109a520e5c96cb17452b8c9e6712d0354
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9Jbt:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRS
TLSH
T171B24D11713F4280383EB50C91B8981E96C2B4A37519F52F7BA846A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 003373f314ee3ef2e5c795ca4c9bbe7bc510af4e3abb2729778afb640cbbbc71
MD5 07fd6773e0bc0e94a24c719f43b247d6
SHA1 e511232b1e20b1d7bc4548fa29ec829294a0f45c
SHA512 d497035aa94ed50f5111b4e880951c4f109e651fe625cf26b1e0ba50354164484d2ed06eeba945405e67065e8f185b4841e6a4e2c86969bf453d8e6315ee2871
SSDEEP 384:nZiFiZcIg8NLU8TUNTUlIRiPvuT+21effoGGcuDgWcjYxIWbrJQpOOPrXLpe8C/k:wFQgQUwggujmGzDcsdH+pOi9PX1
TLSH
T1C2D23A32E8A4DAB7ECE68ED5A6493647DEF85163D1CC5AD4D6C85D0C00DB1EE030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 58b4f7e7d1ee893de76ac0d2e9f2a3512ee8d8f1da88cb862da206bc56e11abe
MD5 f383a67af05fb0b44e57e41975d7077b
SHA1 09bda6727c35c0fd297fb427e587181f43ddb40f
SHA512 f45f0af177ebc22ad6c09e6072fa46bb5ab41644258e4c5935c16f5964035432c1503e59e3e6fec18f313993408fdcb78ec45451bffaa52bbf4c126e46a23aa3
SSDEEP 384:nRiFiZcIg8NLU8TUNTUlIRiPvuTj21effoGGcuDgWcjYxIWbrJQpOOPrXLpe8C/k:4FQgQUwgguWmGzDcsdH+pOi9PX1
TLSH
T15DD23A32E8A4DAB7ECE68ED5A6493647DEF85163D1CC5AD4D6C85D0C00DB1EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cbe16e0982f8d080388eac42dc22238f6aa8228bbba06ee14d5d7a609f783cdd
MD5 ed23c223034cf021de2592195b2f7da4
SHA1 bf2f4f85b541292d4c6d81f76a0ede1ba389a207
SHA512 b136a10400009cfaea1227b09028dc327fc315b8216c8ce437242f53f0d54b1b82a33dd600e1b02ed68e4b983b0910b9fba92589e1f88fbb771669e817d2a580
SSDEEP 384:njiF1tNn/s3n9Sn8NgU8TUNTUlIRiPvuTHl1effoGGcuDgWcjYxIWbrJkpFO6AVY:OF1j+9SXUwgUu5mGzDcsdHOpFTAV5Xjq
TLSH
T11FC25C32E864DEBBECE64ED5B20A7A46DEE0525385CDA9D4D6DC5D0C00DB2ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 39b6b70847b3c8d984d494f9c6eb77092b8b4c8145cb2779a7e930bbd26e82f3
MD5 0b400ffa68b52393765b337c257b7c49
SHA1 73cbb195f63a7922524c8b22c54177d36dd4560a
SHA512 ed99e950758368ad4aa9c1d2351b2bdbf8c881e0e474c472655808f7f93126d8a4cd2ec8bae4f8bf46225e007d899eb32eb8449898acf4f34948d611606ad6ba
SSDEEP 384:n4iFiZcI78NLU8TUNTUlIRiPvuT+21effoGGcuDgWcjYxIWbrPYpOOPrXLpe8C/k:DFQ7QUwggujmGzDcsdHApOi9PX1
TLSH
T1DAD23A32E8A4DAB7ECE69ED5A6493A47DEF85163D1CC59D4D6C85D0C00DB1EE0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5be05414e920172eef0ea447d685265feaa37b5e3a555fe7b1624dde34b20121
MD5 1627a10cdd845281ea55fe6121ef9dba
SHA1 bed11380fdce0bf3f371724d457c59b1ca0eb77b
SHA512 8e0cb556be4ab2353cb12270e4ef5830e97a1195acb0ac91b19a2a35263b3a7116007299a627bf142a8e0cea79c10a08bcbc542d3f67d5430905affab7948c24
SSDEEP 384:n2iF1tNn/s3n9Sn8NgV8TUNTUlIRiPvuTuBReffoGGcuDgWcjYxIuLlFO6AV5XMJ:dF1j+9SXVwgUug6GzDcsXlFTAV5Xjq
TLSH
T1B2C24B32E865DEBBDDE64FD9B30A7A46EEE0125781D859D4DAD85E0D00C72ED0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download