79191958fc7c4e0617cfe6fa66e59098aed142f26d8af5bce4a498784f70da0b

Analysis

max time kernel
149s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 35KB
Sample260816-pm1ekaxyfx
SHA256 79191958fc7c4e0617cfe6fa66e59098aed142f26d8af5bce4a498784f70da0b
MD5 58115277330dfc1ec0416aa81cb2800e
SHA1 ac1def448c4079c37225571e20c25c95ce04445a
SHA512 37de9cce4711be5de37f59ddb09201d5811daf5a74b593abd3921514eecdd9d8bd45f53623b5c10530693bbbb9fbdf3bdadb405e8c530e3ab6ebe6dd8724c823
SSDEEP 768:dPZ/2W8Zdyp6yDwSjIuJwDGn1497V+no6A/J+b0vLBP:XunypxDwSjIfDGnSVwo6A/RP
TLSH
T198F22BB6D374486B3E494798FAA5F368E4597525D60DEBE5B0F4223897889B300F330E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5664	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313569107040082"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{F6899959-C138-4B58-AD10-56560CA46852}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe
6868	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6868 wrote to memory of 3800	6868	msedge.exe	91
PID 6868 wrote to memory of 6452	6868	msedge.exe	92
PID 6868 wrote to memory of 5664	6868	msedge.exe	93
PID 6868 wrote to memory of 6452	6868	msedge.exe	92
PID 6868 wrote to memory of 6452	6868	msedge.exe	92
PID 6868 wrote to memory of 2524	6868	msedge.exe	94
PID 6868 wrote to memory of 2524	6868	msedge.exe	94
PID 6868 wrote to memory of 4892	6868	msedge.exe	96
PID 6868 wrote to memory of 6200	6868	msedge.exe	97
PID 6868 wrote to memory of 4892	6868	msedge.exe	96
PID 6868 wrote to memory of 4892	6868	msedge.exe	96
PID 6868 wrote to memory of 6200	6868	msedge.exe	97
PID 6868 wrote to memory of 6200	6868	msedge.exe	97
PID 6868 wrote to memory of 5216	6868	msedge.exe	99
PID 6868 wrote to memory of 4956	6868	msedge.exe	100
PID 6868 wrote to memory of 5824	6868	msedge.exe	101
PID 6868 wrote to memory of 3644	6868	msedge.exe	102
PID 6868 wrote to memory of 2000	6868	msedge.exe	103
PID 6868 wrote to memory of 3644	6868	msedge.exe	102
PID 6868 wrote to memory of 2000	6868	msedge.exe	103
PID 6868 wrote to memory of 5032	6868	msedge.exe	105
PID 6868 wrote to memory of 6924	6868	msedge.exe	108
PID 6868 wrote to memory of 6924	6868	msedge.exe	108
PID 6868 wrote to memory of 5016	6868	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffbbd30c188,0x7ffbbd30c194,0x7ffbbd30c1a0
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1435075510235933246,16858433025341451995,262144 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,12439681707549239771,14329705193638051605,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,9675133637649912787,8972083823468000155,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:13
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,8018716591521946724,2251660958273528594,2097152 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3700,i,16051437738425892765,11859086534980698476,2097152 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,16101965886987952653,14451952592522791019,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,10062786223179419261,13646458662287212752,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,13847806711146072649,16163002517250180432,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,1250269518010681698,5301860013409281863,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,9783443030788645168,10942157942047330301,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10332520856287567693,14651432397195701568,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10332520856287567693,14651432397195701568,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,11312208835256198637,24063008264130436,524288 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:6924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6236,i,4892305961846067465,3818213552541976027,262144 --field-trial-handle=2496,i,12344639587741570157,3024885305715187753,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5016

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6004

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0088283c64b0fad3406779f574a2ded24d7529d476a401d54bb30ae7c3097446
MD5 2192ce869944f8232a6007dc26a38d2a
SHA1 91aceb55b36160cefe24b03a2f0740011c8c4c0d
SHA512 9afe15cebba8e97bc7b74e319f0d0f9a4c8daedb3e99f4e03088a863844693112580038f52148e684ba45c4c82dc633d2645ee1712c3a5114c419bb08ff6173a
TLSH
T1EDE02BA5C861BC275DFC1B18A0550647E740139B3B41884B3B3C91AC4FF1A3B4386C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9982e8413d5ebf6deb6d0b2c631b494447a5cd4cdea62fcbaceed0ff3e989f2b
MD5 5dd571368356bfb6ed55916ca32a4618
SHA1 6d7998dea698d30b7fa2cfe5596664697831f83e
SHA512 f4ff5815e845abae785ee7db6b1645b225ab9af2869b927ad74cf42f4d8d01484ff84b343f57cb3388cfdb444070cf505468f59d1fce8091b5004ed2fbdbb709
TLSH
T17B41A1F783F4856EDA1196F0AA18BE2FCE1D0515432C7DA9C9E0AE1793F3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b9afd3b4eb43be7a6d74f4556fdeac8f390052839135541023d53beac20a05bd
MD5 3732627912df7224b68c70e4e8ebaf99
SHA1 12f29d199edc0be2da7183c777990e15137ee183
SHA512 a7cb9d25a81e78ff526bc5e8e3661c45619afe76cec775ffacb61c36ea4341bb1acb82a360e15553fd6a97d43e0b2e5af31a7041cf6cb28d9de9e34f02e3d7e8
TLSH
T16631BEF743B4856EDA1196F0AA18AE2FCE1D0515432C7DA989E0AE2793F3472E041B5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f4dcadefc71eeda9853d88abd8e247ac67eeea5730c3b497a6140b705d180451
MD5 dc0f9271fc385a7d6fe58f5374693723
SHA1 7d51447ea720ab764497666d00f93e8d5fd54705
SHA512 bee3a927b7067a15bf2839dd4ccd249a608e49a53db688bb1227c4a724a55279b34fc44f6c6b88c0de1b8ab1a8b152a3cb959d0aaf100c72c4994e8b8402f99b
SSDEEP 384:sxRmpiqOe/fpsHKRN/8Ry/5IW4YsGQvHKl:s+tOe/f0AT/5IW4YsGQv2
TLSH
T15672D859A934993B9CDBD209FA957F93D3F91173A1905E44AAFC9A0C04E7AEC210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f950b68f9fdb4472b6e4293cc1753c69b0306afd844d9fe7ebcdf9bf46b245d9
MD5 15f783213c92235d50d7329e4d9ed004
SHA1 844a7489a16051368a53e6a93f752f6c9c730202
SHA512 2883071aaa9c91d418e35f9e5d3f3ca2018a3607e26ff75ad6502e58eb13951dfc56f2770df8f4aba8cfa8a7206e76657285fae39e8d23a419093906a029ec4b
SSDEEP 384:sxRmpKle/fpsNK4N/VRy/5IW4gsGQvgjl:s++e/f+pG/5IW4gsGQvs
TLSH
T12762C815AA24993BCCDBD219FA557F93D6F91173A1905E44AAFC8A0C04E6AEC2113C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ba13a0111283d3acefdd2ec2af4a683b767d46848870bf3d97948f16f741ec3e
MD5 98d13fbdd48186067126867b1d3af4a2
SHA1 2c25274e14767029441d95ac0dc61bf2775b3b21
SHA512 e9090d43102d7af5b147d673266c6a20d2a5042293b64eb36800ce9da7ac8671797f76ea8931f954ec9f4ca0bbcb59431e0b7a849d09a79d08ca84d49fad8809
SSDEEP 384:sxRmpile/fpsHKRN/8Ry/5IW4RsGQvHKl:s+2e/f0AT/5IW4RsGQv2
TLSH
T16762D859A9349D3B9CDBD209FA957F93D2F91173A1905E44AAFC9A0C04E7BEC210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ed7f4237fa8ff03cb5e89669f7df88d1154abb7c370824e9cdd65ed188af5ed0
MD5 8eba59506cee72498589c1a96e80c18a
SHA1 a2a011517828e199e95e6fdd1d066a1380ad874b
SHA512 ebd6219cfc7d44ed3359e473ad4405b2eceace55d1d9ade71aca827aa0ab20c4a1a2b85badd1e63700d95ddca1bae49321ff9920a72c602ac913220b91a69046
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9l2n6b3xdZ4d0z/TB75oX3Uxi:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR5
TLSH
T190B25B11713F4280387EB90C91B8981F96C2B4637419F56F7BA806A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 49b2d69d506c5390a43d0f0d3d56f40217a18871b5d25cc4c52a4377048f8e86
MD5 12a27d033b9189e30072ff02851358f8
SHA1 cad4a463774d1a0673b5b9818013d26d9e02dbc7
SHA512 bbadea126dc1a33ee084db6aef802639fe45dd973a25653990911e203e847be92e631f7e08138806add567410dbffe0e835078a5619a86e41e1f73f0bb37790e
SSDEEP 384:n5iF1tNn/s3n9Sn8Ng/8TUNTUlIRiPvuTpnHESVfbzGjwTDGGL22kNtOObjI9G6N:QF1j+9SX/wgUuBjtGCaJ/Nt29MI
TLSH
T170D25B32EC55CEB7ECE74FD8A24E7A4ADEE04263859C9AD4E9D96D0C00DB19D4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 47e2e9214b45a46077933272cc3013c32e49df9ec6426bbd2b685a5ad700bc57
MD5 1a00b20f23181e5235dc2b4cd7beaa2f
SHA1 9bbebe1ea44e52e1cf763cab7d8c59de0ceb27c2
SHA512 f0ee2961ab2d26bf9fce1443cd533a12b0e8a950c137e5e26fe5d57f284860d28bf10b13f3e122bfe57168659eb09814704e9ffaf6bfba9b671d3ee1b4b45fe2
SSDEEP 384:nQiFBtNn/s3n9So8NL/8TUNTUlIR9PvuTE4HESVfbzGjwTDGGL22PNt9kT8LEEIz:rFBj+9xQ/wgnu9jtGCaJiNt94
TLSH
T146B23A32DC65CAB7ECE64FD4A70A7646DEE04253859C9AD4EAD96D0C00DB2DD030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 af1f861bb405d330c421dbf6e18d05da6db72e262b8a5671c40ac9c51a24d4e8
MD5 c5e4a4e426b574ba8b08441f8a628e3f
SHA1 61b63ff0347422eae2c91955eef7432ab4b4a83c
SHA512 64c0da33ac56d288f8a3e2dd0a99eaf2e742fcb59bb3fc7893f9bdc75720fc1d6bdd283ff3021a2eedbc7a945a5cb7bf1b3470cebe8dbd6c1984fbf241da69e3
SSDEEP 384:nZiFBtNn/s3n9So8NL/8TUNTUlIREPvuTE4HESVfbzGjwTDGGL22PNtOObjI9G6g:wFBj+9xQ/wgGu9jtGCaJiNt29M1
TLSH
T1ACD24B32EC55CEB7ECE74FD4A24A364ADEE04263859C9AD4E9D96D0C00DB1DD4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 ef4ad6c4b1ae222a46969abfe36c8324b43282edd51f8d06ad802bb69e7cdbfe
MD5 3dbecc9f74496d30d143184aae206a32
SHA1 688622f33c68e07436d2bb7666c089801c76242f
SHA512 536f7b4bbabf2c8d63fc0979128a2d8979a3bb39c824ec63734d29cbbc4c331ddec7ffb7d163121dc39a03485e70aebd6f165517b565036a59519338da8443bb
SSDEEP 384:nZiF1tNn/s3n9So8NL/8TUNTUlIREPvuTE4HESVfbzGjwTDGGL22PNtOObjI9G6g:wF1j+9xQ/wgGu9jtGCaJiNt29M1
TLSH
T12CD24A32EC55CEB7ECE78FD8A24A7A4ADEE04263859C9AD4E9D96D0C00DB1DD4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e34dacecf2256c9f5577423d32067bafa553193aa5e342ec3d30600fa38bb800
MD5 c87500af2d0b8db6c6b0ae613fd4979e
SHA1 df01522e3a8e6c5c939a5c515effdb46c5165f3a
SHA512 b19717fe1ad51186830f0fe16ac4f5e01f1257d0d4a9745210200da3e4814b66621ee5b6c23cbee5c81edb7abdcb24926c95c1dbc1fc5f2b842f147858cc5e2f
SSDEEP 384:nziFKtNn/s3n9Ss8NL/8TUNTUlIR4PvuTQ4HESVfbzGjwTDGGL2lKNtOOPrXLpel:eFKj+9pQ/wgKu5jtGCaJ4NtOi9PzW
TLSH
T10FD24A32EC59CAA7ECE78FD4A34A7606EEE44293D58C9AD4E9D86D4C00DB29D4307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1b62a0c13ca05790efea77d0c55b930f7b437068d870e369160e06c43e199af7
MD5 ba2a2bdd84f53a5c336c759c10603937
SHA1 3c021b03356b38108304b79581be9edc5aef7b91
SHA512 f3182b3d010660a09c28b7462b21c39a501ad34371a9fb6562813033bb71de97f3fcbcad1e267047c99345eefb03f841f281b579769193097623a94cd26420e5
SSDEEP 384:nJiF1tNn/s3n9Sn8Ng+8TUNTUlIRiPvuTu6RESVfbzGjwTDG1L5qOObjI9G6w7KJ:gF1j+9SX+wgUuZ1tGCaB5q29MI
TLSH
T1FAC24A36EC55CEB7ECE64F98B34E7A5AEEE0116385AC5AC4EAD95D0C00D729D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download