9cfb57e8855c2c72998c724d512914dcabd04aa7e7b38a23bd70a2e657bfaae8

Analysis

max time kernel
148s
max time network
157s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
readme.html
Size 7KB
Sample260814-prp5dstbrd
SHA256 9cfb57e8855c2c72998c724d512914dcabd04aa7e7b38a23bd70a2e657bfaae8
MD5 bb5d8bd5e5cbf6e788df2b613656e61c
SHA1 3d0694d6cccd12395ddf567009ec3dd762759b1c
SHA512 a149cb7f7dae4d7e410e7d2f0435fdd6f4cb7ea953bb619347bfd8e51e6c4f7168adff09eb3de9a7f2fd0ee432095d35218b83b40780ff9183887379cc97d5c0
SSDEEP 96:4UK8pz1E/4kF5kyJ0ifN8uueKQetcU4wtcwTKuID9kKCZxjD+9+25tdLwGg1IZzj:68/SVPmuF3C/Da7d0euCidI
TLSH
T131E1856BB540537A135143B1600621BEB33300BEB79D4646549BE62EBBA23B4AF7F0DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6224	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311846009074915"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{ACE25BDA-6F69-4FA4-88A2-8D3C3F7989D4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5964	msedge.exe
5964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe
6896	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6896 wrote to memory of 2488	6896	msedge.exe	90
PID 6896 wrote to memory of 6224	6896	msedge.exe	91
PID 6896 wrote to memory of 1788	6896	msedge.exe	92
PID 6896 wrote to memory of 1788	6896	msedge.exe	92
PID 6896 wrote to memory of 2916	6896	msedge.exe	93
PID 6896 wrote to memory of 1788	6896	msedge.exe	92
PID 6896 wrote to memory of 2916	6896	msedge.exe	93
PID 6896 wrote to memory of 6672	6896	msedge.exe	95
PID 6896 wrote to memory of 6672	6896	msedge.exe	95
PID 6896 wrote to memory of 6672	6896	msedge.exe	95
PID 6896 wrote to memory of 2856	6896	msedge.exe	96
PID 6896 wrote to memory of 2856	6896	msedge.exe	96
PID 6896 wrote to memory of 2856	6896	msedge.exe	96
PID 6896 wrote to memory of 2064	6896	msedge.exe	97
PID 6896 wrote to memory of 2064	6896	msedge.exe	97
PID 6896 wrote to memory of 6304	6896	msedge.exe	98
PID 6896 wrote to memory of 6304	6896	msedge.exe	98
PID 6896 wrote to memory of 3120	6896	msedge.exe	100
PID 6896 wrote to memory of 3764	6896	msedge.exe	104
PID 6896 wrote to memory of 3648	6896	msedge.exe	105
PID 6896 wrote to memory of 6472	6896	msedge.exe	106
PID 6896 wrote to memory of 3524	6896	msedge.exe	107
PID 6896 wrote to memory of 3524	6896	msedge.exe	107
PID 6896 wrote to memory of 5964	6896	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\readme.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a8,0x7ff98fa7c188,0x7ff98fa7c194,0x7ff98fa7c1a0
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,3876276114489131137,13395135396859668494,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,17468223736096540347,4975928586016501613,262144 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,6539161145144606958,8755701286146694432,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:13
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,8374188309684011660,17774859602300316053,2097152 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:6672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,12442083078834384437,8232371072174686164,2097152 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,16252863378024573818,13900701773694062780,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,8170993537727998890,8428288432284676943,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:6304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,9914957565081431940,5720016049120246440,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,9914957565081431940,5720016049120246440,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,8110276034472512647,6786700980358871203,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,12787840815942111393,8039236117628555240,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,11050165799844144409,3842836085531107214,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  PID:6472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,11157172633895251608,6973980706284790188,524288 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:14
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6000,i,16552077063476092940,17793756623724481175,262144 --field-trial-handle=2488,i,14925898819804332252,10359411610020415245,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ecc1b8ab111959f7f12c3d180096e401b2b3357785ad079e625a0dbee8f3367a
MD5 d9570406272681b925b226b307701f7b
SHA1 14d9e3c695045ca84f83fff25444cacc95341cd1
SHA512 cefb06403ec695bc6a3eb0b98b3206b9fb8fc860fbadb1bcac81bb6199a20a74af731636e3504b1b84b73bec3ed33a46496081fa519f3fe60251baad39deef99
TLSH
T122E0E565D920AC2719F81B1860550787E790135B3A51880B3B3C826C4FB563B4286C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 efba34ebb606d84732dc9305565fb9bc63bee78613fb1281b711f47da63c5cc9
MD5 d8b3a9caf708b775ffb5dbd052da8cdb
SHA1 c80631b7cd17f80b4f8c77c28eb7485149e96646
SHA512 833a165c355fd321a6ef50d5f41bbd66f6031a0cf223884a9f7ee9f8576a36bef4ed83780d9bfdccd259974c1a72943cb545e14eeaed23f649e8f0f29ab5b51a
TLSH
T1B941D1F383F4856ECA1195F0AA186E2FCE1C0515432C7C99C9E0AE1793E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 39c011ff00f2b7df8db6118c6ed6d8845730db192a6a0fcddd77ec45c52209f4
MD5 2242bbc031216d0b6fd39f86f9769ff2
SHA1 a435d337e5a9de0ca97c4ef7abc5183ad4fe963f
SHA512 469c8cae6b512ef536ac140ce297c282dd93c62297f7fe7631045c153b311e2e1b0929470776f40a0f46269f24d8d8c03a8e7c74177de33cd196c09497202ba5
SSDEEP 192:sxRGRhyMqZjK1Ml8wbY/fZscDONRZS4zoD8peq/g6+WNIYcC4xsZsGQrGTIgjzkJ:sxRGmlY/fZscDON/SIB/5IW4GsGQmj0
TLSH
T1A362D8156A349D7BCCCBD219FA55BF93D3F91173A1905E44AAFC8A0C04EA6ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 020bc69d2ed10e7bc3b28a92ec9000ead1d909c39eff7649162257b62be7eb39
MD5 55a5e3f4f2282f44c76ff9bdf2e6c878
SHA1 103d9e1355ea0e6a34aaa5de993ec3d5b33d6632
SHA512 d0d17312281f1ec744403b3a0438305eec7e016f2f1ecf4ad4d1848369f15ac4c45230001fb3c823ad0cd75d1d5e4f3a646d5cbf0fecadb2d28e414341d44ff4
SSDEEP 192:sxRGRhyMqZjK1Ml8UQSbY/fZsmDZNRZS4zoD8peq/g6+WNIYcC4jsRsGQrGTIgDI:sxRGmqUY/fZsmDZN/SIB/5IW4IsGQm30
TLSH
T1BA72C71569349D7BCCDBD219FA557F93D2F91173A1905E44AAFC8A0C00EA6ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 1cabe7f2d8282743110742e85471f01edd5de4b10b2634fc6d5b7781336a9432
MD5 02deb6aba820fc3d04abf05b7064fb4e
SHA1 bc238e115e8a31bd9e6ce62ab1152adba8310982
SHA512 af19da66c80f1e1c3d3c6047bf3cbd04bdfad26123fc8011957e2bf7cef536eea7bf2df452c12ddb8644480a8138754583bed92da2e734eecd50b4ed975f05dd
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9JbD:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRM
TLSH
T142B25E11713F4280387EB50C81B8981E96C2B4A37519F52F7BA846A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0018f982c1520a00e1ff17dcfd33abea5bfcf5a76402dc870d9040c068edcd4f
MD5 7802cef04449e461b86fcf9d67ff6fde
SHA1 e946d53e28352e575147c50f7ea1633e6ce1bf1b
SHA512 c40afd5285d8eb3690285a3455be5a0c394f043294d58e3a0b756720e6e33ebc5f02426fb14504f5817fe469188a23a9455763088f1441d1e405005f2f7be742
SSDEEP 768:7mF1j+98QSwgGu+ZueGzDcsdHvlOi9Pn6:7T98Qnu+ZscmOh
TLSH
T183D24B32E864DEA7ACE68FD5A75A3A4BEEF40253C5CD5AD4D6C85D4C00CB2AD4307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d158189fb4bfa3c782e1adb2734b1c2f88d9a2997ec6da412a9e5d68b5ca8a3f
MD5 8f4607445d9745dffc3c5f58043ce20c
SHA1 bcc02bc33d8489bd1e8c8a8e0998877b294d696d
SHA512 daec9da1221ce505d4b92a2f2cf84b5211ebf671060d5dabc8afe22a7e21f052aee960360a4384d55210fde9b6e7e4c458d5f2ad8338b645c15b559344f5ff69
SSDEEP 384:n7tZiFiZcI/8NLS8TUNTUlIRAPvuToFZu9effoGGcuDgWcjYxIWbrealOOPrXLp/:7mFQ/QSwgOu6ZueGzDcsdHvlOi9Pnn
TLSH
T124D23A32E8A4DEB7ACE69FC5A6493647EEF45163D5CC9AD4D6C85D0C00DB1AE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 de6841f2616fa34b55935bcfa1d969ca21317429c81e66bad45fcd0290418076
MD5 a80864e2dce607061ca2e3794ea0f304
SHA1 0aef62c38e1cd6d9c276735f24a6b194648e0104
SHA512 5e402a50286241d7c46d30b5a1626c0e61198db9bc95af24b2dbc84d14e98aeb55308ae82dae7dea70ecf43a235b879f674d1a4be181483fc539abd8bca65ff4
SSDEEP 384:nntZiFiZcI/8NLS8TUNTUlIRAPvuToFZu9effoGGcuDgWcjYxIWbrealOOPrXLp/:nmFQ/QSwgOu6ZueGzDcsdHvlOi9Pnn
TLSH
T11ED23A32E8A4DAB7ACE69FC5A6493647EEF45163D5CC9AD4D6C85D0C00DB1AE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 27ec02a493463bb3f811feaee1fbc0110b88aadd89e632b0bc71d748923b0240
MD5 32cf490e511653cb6235bb598a8333cb
SHA1 1ba1ae52d43833f67bbaedebf7d1857876639a95
SHA512 fb104e373985aa46abd3d34b4b3d98e90fec955e438985f8ea67e83538ff77e0ce205c3b1c53b9d4e09979495eb8145f5ef2b29b0d614738c4894a44e3453f05
SSDEEP 384:nntDiFiZcIa8NLS8TUNTUlIRAPvuToFZu9effoGGcuDgWcjYxIWbrmqlOOPrXLp/:n8FQaQSwgOu6ZueGzDcsdHzlOi9Pnn
TLSH
T148D24B32E864DAB7ACE69FC5A6493A07EEF45163D5CC9AD4D6C85D0C00DB1AE0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 925e84c4ebfbc678c7bde5e15c5592d5f5464381553181a4c3bd6911cd1757e5
MD5 84cbe30ac67c49d48b70b0d271a240d6
SHA1 180fa4a1c6f89e49cb57edcb9341ee9d56cee701
SHA512 d568587470dd293474e9417ecb9c9fce84e79d791dff924106e073d3eb7f8cd1c7b94d481f6a5adc4f2116916c1f5fbf598162db6367ff46f69369ec434b0117
SSDEEP 384:n2iF1tNn/s3n9Sn8NgV8TUNTUlIRiPvuTuE7ReffoGGcuDgWcjYxIuLnFO6AV5Xe:dF1j+9SXVwgUuL76GzDcsXnFTAV5Xjq
TLSH
T11BC24B32E865DEBBDDE64FD9B30A7A46EEE0125381D859D8DAD85D0D00C72AD0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ff9086e722fd96a635b36c9641cc07e0bbbfae7436848c692a14380be198253e
MD5 8a9be0c06e18fd418296a226717903d5
SHA1 fe616ad6b84d79294ef1ed4ab9c4d1dad70f6fa2
SHA512 ff405deb490969a026f41d71d602ef81b3b9dfe8a384c00a010fb8bd74800e870a463dd56e283e78bb5bf44131aed66800c4a044402eda33f18d13889f5002b3
SSDEEP 768:bF1j+9SXSwgUuKf7eGzDcsdHnlFTAV5Xjq:69SXTuKffccFTkzq
TLSH
T133C25C32E864DE77DCE64ED9B24A3A46DEE0525385CD99D4D6DD5D0C00CB2ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download